last executing test programs: 59.515732878s ago: executing program 1 (id=528): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/8, 0x8}) 59.228349182s ago: executing program 1 (id=532): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0xfd, 0xa, 0x0, {0x1, 0x0, 0xbdd7, 0x400, 0x10000, 0x80000000, 0x9d1e, 0x4, 0x8, 0x6000, 0xa, 0x0, 0xffffffffffffffff, 0xdf3, 0xc0ac}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee00) 58.944364274s ago: executing program 1 (id=536): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e22, 0x7f, @empty, 0xf8b}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xf8d, @empty, 0x3}}, 0x13fffffe, 0x5, 0x0, 0x0, 0x2d, 0xfffffffd, 0x1b}, 0x9c) 58.678432875s ago: executing program 1 (id=539): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x0) r1 = open_tree(r0, &(0x7f0000000080)='\x00', 0x89901) move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 58.62027093s ago: executing program 1 (id=540): syz_mount_image$hfsplus(&(0x7f0000000340), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0) mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)=@known='security.selinux\x00') prlimit64(0x0, 0xe, 0x0, 0x0) 58.096405692s ago: executing program 1 (id=542): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000400008000c00a80af0ff0b000f00"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 57.974065712s ago: executing program 32 (id=542): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000400008000c00a80af0ff0b000f00"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 53.704790147s ago: executing program 0 (id=559): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000000) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x12000021) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x30800, 0x15) 53.452870918s ago: executing program 0 (id=561): unshare(0x20060400) syz_io_uring_setup(0x2c19, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c01020301090212e700000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 51.802641731s ago: executing program 2 (id=570): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='.\x00') pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 51.553886711s ago: executing program 2 (id=573): r0 = socket$inet_tcp(0x2, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) 51.382684454s ago: executing program 2 (id=575): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x7, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}}) 51.115055136s ago: executing program 0 (id=578): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\xa5\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\x9c\x9e\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xb0a\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbd(T$\xf7\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xe2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\x83\x05\x00\x00\x00\x00\x00\x00\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(\xca\xa5\xf5p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\r\xe4\xef\xf9\xff~\x13\xc22t\xf6\xf4Fs\xdd\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\xd3\t\xf6\xd1\"0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfffe}, {0xfff1, 0xffff}, {0xfff1, 0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xe, 0xe5}}]}, 0x38}}, 0x200009d4) 50.086572119s ago: executing program 0 (id=588): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) 47.96066125s ago: executing program 2 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x57, 0x8, &(0x7f00000000c0)=[@efer={0x2, 0x800}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.72399769s ago: executing program 33 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x57, 0x8, &(0x7f00000000c0)=[@efer={0x2, 0x800}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.552333843s ago: executing program 0 (id=603): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x6a0, &(0x7f0000002d00)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVQQEYkdK4VwSUAIBalCVThwthqnseKkwXFR2gNxAYkrB/6AcjAXOIEQEhJSpHKGW8XN4lQJiUtPaQ8MmtnZ9dpdv+TVNv18otnnN/PMPPOb37x415G1AT63Lp1K+146uXTqtTvV/Pra3NL62tyNXpxkPEkraXebFDeT4oPkYrpTvlAtbIYrttvPrxfPX/7w4/WPunPtbIxXvXS2T7C9l6NYbaZMJxlp2kewabw3Hm688Y2w6FemKtjJXuFgv40mKTf58fGNnmHKkYGZbe934PAouj83B3Tv/6nkSJKJ3g+01W5n6+lnuKsHehatPrk8AAAA4MA4ev9ucieT+50HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCbN9/8XzdTqxdMpet//PzbwHftj+5zuFmNDwyEmesG91hNNCAAAAAAAAACeii/dz+8ul+Vkb74s6v/zf7meOVa/PpO3czsLWc7p3Ml8VrKS5cwmmRoYaOzO/MrK8mxvy0/Lstxmy7NDtzy7x4Q7j+OoAQAAAAAAAOD/xoWm/VkuZXKfcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE2KZKTb1NOxXjyVVjvJRJKxar3V5B+9+DC7t98JAAAAwFNw9H7u504me/NlUX/mP15/7p/I27mZlSxmJUtZyJX6dwHdT/2t9bW5pfW1uRvV9Nlxv/2fjfiPk7umUY+Y7u8ehu/5RL1GJ1ezWC85nTfyVpZyJa16y8qJ9bW5oomH5PVelVNxoass91agK01bjfurpj0YpuqKjPYrMtPkVlXj2d6ZGX6GBs/OQ+xpNq3+b36O7bynTTW/sONeiv/2zsmR3pLkme/vXvPRBzqYR7K1EmcHrr7jO1ci+cqffv+ja0s3r18rVk8dnMvoAYz/a+Ou2VqJuYFKvLjnSly9fTgrsVUrL/TjS/lefphTmc7rWc5ifpL5rGQh0/luHc0313P1OrVzpS72S1p5fbcsxprzMrIlpy8f7bY75fRyve1kFvODvJUrWcir9b+zmc03ci7ncn7gDL+wh7u+NeSu//P2yZ/8ahN0kvyyaQ+Gqq7PDtR18Jk7VfcNLmmlHO9u99xjezb2tb/YBNWZ+HnTHgz9Skyk/1Oil93zvQqMDq3Eb+rHyu2lm9eXr83f2jJusTp8f69k8+EfnAdJdb08V52sem7z1VH1PT+0b7buO9bva23t+22n37fbnTrWvIf77Ehn674Xh/bN1X0nBvo23m99WpZl9/0WAAfeka8dGev8u/P3zvudX3SudV6b+M74N8dfGsvo30a/1Z4ZeaX1UvGHvJ+fZvdP6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK5uv/Pu9fmlpYXlLUFZlne36XoiQdrJpiV//cvAOknqLwPa+4DV2hdbSb2knSZ4sMTuPtzhvPewRfhnc06eSsEfSzAx9PoZaY5jsOuTsiwPRs57CcrGQclnP4J9eyQBT8mZlRu3ztx+592vL96Yf3PhzYWb58+dOz9z/tyrc2euLi4tzHRf9ztL4EkYeAcOAAAAAAAAAAAAHBJ7++Oc4tH+tgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgEVw6lfa9FJmdOT1Tza+vzS1VUy/eWPOTJK0kxXRSfJBcTHfK1MBwxXb7WU0uf/jx+kfduXYz1eu3dtpub1abKdNJRpp2iIlhC8u7241X1OPc2n68PSr6R1gV7GSvcLDf/hcAAP//9TUTFw==") mknod$loop(&(0x7f0000005f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x0) rename(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file1\x00') truncate(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20007ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000180000000000000000000008500000044000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010008000000b7030000e714000085000000060000009500000000000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 47.234263959s ago: executing program 34 (id=603): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x6a0, &(0x7f0000002d00)="$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") mknod$loop(&(0x7f0000005f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x0) rename(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file1\x00') truncate(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20007ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000180000000000000000000008500000044000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010008000000b7030000e714000085000000060000009500000000000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 19.648339984s ago: executing program 5 (id=781): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='V', 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) 19.446082121s ago: executing program 5 (id=783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 15.341386532s ago: executing program 5 (id=786): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c5", 0xa, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 15.175821215s ago: executing program 5 (id=791): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r0, &(0x7f0000000040)=""/61, 0x3d) 14.155049628s ago: executing program 5 (id=800): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x10042, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x20400, 0xa4) lseek(r0, 0x0, 0x0) 13.464249513s ago: executing program 5 (id=806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x24a4af79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 13.2567471s ago: executing program 35 (id=806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x24a4af79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 9.983381995s ago: executing program 7 (id=828): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 8.164367211s ago: executing program 7 (id=841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 7.848251217s ago: executing program 7 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 7.376064395s ago: executing program 7 (id=849): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x3, 0x25a, &(0x7f0000000240)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f00000002c0)={0x7f, 0x1}, 0x0) 7.123863045s ago: executing program 7 (id=850): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r1 = socket(0xa, 0x5, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e20, @empty}}, 0xb2c, 0x5}, 0x90) 6.366078846s ago: executing program 7 (id=853): syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000300)='./bus\x00', 0x802, &(0x7f0000000100)=ANY=[], 0xfe, 0x60d9, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r0, 0x0, 0x5) ftruncate(r0, 0xf09) 6.161795513s ago: executing program 36 (id=853): syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000300)='./bus\x00', 0x802, &(0x7f0000000100)=ANY=[], 0xfe, 0x60d9, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r0, 0x0, 0x5) ftruncate(r0, 0xf09) 5.062879791s ago: executing program 3 (id=866): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000004940)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "0d932c", 0x8, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @ndisc_rs}}}}}, 0x0) 4.932862242s ago: executing program 4 (id=867): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001480)=""/169, 0xa9}], 0x2}}], 0x1, 0x0, 0x0) 4.732354068s ago: executing program 4 (id=869): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) sendfile(r1, r2, 0x0, 0x1000000000004) 4.621250757s ago: executing program 3 (id=871): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5) 4.46016316s ago: executing program 4 (id=872): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x16000f57) write$P9_RVERSION(r1, &(0x7f0000000780)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) splice(r0, 0x0, r2, 0x0, 0x5, 0x0) 4.309552882s ago: executing program 3 (id=874): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x1000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/igmp\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/163, 0xa3}], 0x1, 0x1, 0xe3d0) 4.260504536s ago: executing program 4 (id=875): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000000300)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d967206115b492d825751fcc00000000000000e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b170000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e62b1103ec49fc3d1214efebb15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddf914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a4026c56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf60a17142db60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f50520f91fbf7201fc9071d0aee9735d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fbad8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e031cce6d7e3882941a3a5157e666a8ad60ea41cc1cbc68862905ff2197f7f06cb6bcfe65222cb1ba17114b73eb7ca38768027c"], 0xff, 0x5dcf, &(0x7f0000006940)="$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") ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4.067851132s ago: executing program 6 (id=877): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) 3.616663618s ago: executing program 6 (id=879): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x2, &(0x7f0000000180)={[0xfffffffffffffffc]}, 0x0, 0x8) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x8000000000000000, 0x200082) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000), 0x0, 0x521, &(0x7f0000000600)="$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") 3.120192788s ago: executing program 4 (id=881): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 2.655904886s ago: executing program 6 (id=884): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.59855172s ago: executing program 6 (id=885): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f50009058202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) keyctl$revoke(0x3, 0x0) mkdir(0x0, 0xe8) 2.073568222s ago: executing program 3 (id=889): syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000009640)='./file1\x00', 0x10040, &(0x7f0000000200)={[{@sysvgroups}, {@attr2}, {@inode32}, {@sysvgroups}, {@grpquota}, {@bsdgroups}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x1, 0x1, 0x5, 0x0, 0x200000004, 0x4000000, 0x0, 0x2, 0x4040c405}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r1, 0x0, 0x0) 1.743920789s ago: executing program 8 (id=891): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=""/69, 0x45}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.565584754s ago: executing program 8 (id=892): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000)=r2, 0x4) 1.392297967s ago: executing program 8 (id=893): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1b) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 1.344533141s ago: executing program 8 (id=894): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) write$nbd(0xffffffffffffffff, &(0x7f00000001c0)={0x67446698, 0x0, 0x0, 0x0, 0x1}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000001c0)={0xffffff41, 0x4000403, 0x0, 0x13, 0x7, "ffffff7f87e8d2b791f19dce26d76d7fcb3678", 0x3, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xd) 1.190566094s ago: executing program 8 (id=895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="e440c0310222", @local, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "4bab6b", 0x8, 0x0, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, {[@routing={0x0, 0x0, 0x1, 0x3}]}}}}}, 0x0) 808.237615ms ago: executing program 3 (id=896): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, {0xfffd, 0x2}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040000}, 0x2000c8c0) 608.984601ms ago: executing program 6 (id=897): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x1, 0xff9, &(0x7f0000001840)=""/4089, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 404.331017ms ago: executing program 4 (id=898): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pause() eventfd(0x400004) 116.34631ms ago: executing program 6 (id=899): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x42) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0xf1e5b317, 0x801000, 0x0, 0xffbffffc, 0x40001000}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 93.546842ms ago: executing program 8 (id=900): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) 0s ago: executing program 3 (id=901): pipe2$9p(&(0x7f0000000240), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): 000c018, mo2=0002] [ 111.858459][ T5662] System zones: 0-1, 3-36 [ 111.872574][ T5662] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000004,nojournal_checksum,stripe=0x0000000000000007,nobarrier,data=ordered,test_dummy_encryption,nogrpid,debug,,errors=continue. Quota mode: writeback. [ 111.883990][ T5669] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 111.960235][ T5662] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 111.997275][ T5680] loop1: detected capacity change from 0 to 8192 [ 112.066132][ T5684] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c018, mo2=0002] [ 112.147094][ T5684] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 112.175033][ T26] audit: type=1800 audit(1756520105.479:17): pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.443" name="bus" dev="loop1" ino=1048601 res=0 errno=0 [ 112.308750][ T5673] loop0: detected capacity change from 0 to 32768 [ 112.461148][ T5693] input: syz1 as /devices/virtual/input/input14 [ 112.536870][ T5673] XFS (loop0): Mounting V5 Filesystem [ 112.672546][ T5673] XFS (loop0): Ending clean mount [ 112.754731][ T5697] loop4: detected capacity change from 0 to 40427 [ 112.804780][ T5673] XFS (loop0): Quotacheck needed: Please wait. [ 112.882930][ T5673] XFS (loop0): Quotacheck: Done. [ 112.922829][ T5697] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 112.935463][ T5697] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 112.990069][ T5697] F2FS-fs (loop4): invalid crc value [ 113.085972][ T5697] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.152956][ T4183] XFS (loop0): Unmounting Filesystem [ 113.250156][ T5697] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 113.292225][ T5697] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.110432][ T5730] loop1: detected capacity change from 0 to 1024 [ 114.182167][ T5730] EXT4-fs (loop1): Test dummy encryption mode enabled [ 114.214472][ T5730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c018, mo2=0002] [ 114.225727][ T5730] System zones: 0-1, 3-36 [ 114.261174][ T5730] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000004,nojournal_checksum,stripe=0x0000000000000007,nobarrier,data=ordered,test_dummy_encryption,nogrpid,debug,,errors=continue. Quota mode: writeback. [ 114.445798][ T5738] loop2: detected capacity change from 0 to 8192 [ 114.509891][ T5730] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 114.544906][ T5738] FAT-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 114.605929][ T5730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c018, mo2=0002] [ 114.661913][ T5730] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 114.968712][ T5748] loop1: detected capacity change from 0 to 1024 [ 115.051203][ T5748] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 115.094725][ T5748] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.178097][ T26] audit: type=1326 audit(1756520108.479:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cec80be9 code=0x7fc00000 [ 115.259600][ T26] audit: type=1326 audit(1756520108.509:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00cec80be9 code=0x7fc00000 [ 115.303214][ T26] audit: type=1326 audit(1756520108.509:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cec80be9 code=0x7fc00000 [ 115.334109][ T26] audit: type=1326 audit(1756520108.509:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cec80be9 code=0x7fc00000 [ 115.375907][ T26] audit: type=1326 audit(1756520108.509:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cec80be9 code=0x7fc00000 [ 115.401272][ T5761] loop0: detected capacity change from 0 to 2048 [ 115.416548][ T26] audit: type=1326 audit(1756520108.509:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cec80be9 code=0x7fc00000 [ 115.462784][ T26] audit: type=1326 audit(1756520108.509:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cec80be9 code=0x7fc00000 [ 115.479862][ T5761] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.501640][ T26] audit: type=1326 audit(1756520108.509:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cec80be9 code=0x7fc00000 [ 115.861101][ T5779] loop0: detected capacity change from 0 to 512 [ 115.922900][ T5779] EXT4-fs (loop0): Ignoring removed oldalloc option [ 115.929966][ T5779] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.974237][ T5779] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 115.985647][ T5779] EXT4-fs (loop0): mount failed [ 116.002887][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.258309][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 116.299509][ T5798] netlink: 'syz.0.480': attribute type 11 has an invalid length. [ 116.327143][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 116.359490][ T5798] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.368427][ T5798] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.377197][ T5798] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.386021][ T5798] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.427629][ T5798] netlink: 'syz.0.480': attribute type 11 has an invalid length. [ 116.461817][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 116.524933][ T5804] process 'syz.3.485' launched './file0' with NULL argv: empty string added [ 116.588482][ T1108] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 116.613346][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.621378][ T1108] usb 2-1: Product: syz [ 116.672682][ T1108] usb 2-1: Manufacturer: syz [ 116.677316][ T1108] usb 2-1: SerialNumber: syz [ 116.710965][ T1108] r8152-cfgselector 2-1: config 0 descriptor?? [ 116.746090][ T5816] device syzkaller1 entered promiscuous mode [ 116.849105][ T5821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 117.237590][ T1108] r8152-cfgselector 2-1: Unknown version 0x0000 [ 117.242830][ T4850] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.253329][ T1108] r8152-cfgselector 2-1: bad CDC descriptors [ 117.271618][ T5832] loop3: detected capacity change from 0 to 4096 [ 117.287712][ T1108] r8152-cfgselector 2-1: Unknown version 0x0000 [ 117.320474][ T1108] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 117.475942][ T5825] loop4: detected capacity change from 0 to 32768 [ 117.622939][ T4850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.638451][ T4850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.665683][ T4850] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.692760][ T4850] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.701942][ T4850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.748006][ T4850] usb 3-1: config 0 descriptor?? [ 117.908864][ T5845] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.040907][ T5838] loop0: detected capacity change from 0 to 32768 [ 118.154733][ T5838] XFS: noikeep mount option is deprecated. [ 118.244924][ T4850] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 118.267165][ T4850] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 118.291368][ T5838] XFS (loop0): Mounting V5 Filesystem [ 118.369907][ T5838] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 118.437465][ T5862] netlink: 68 bytes leftover after parsing attributes in process `syz.4.507'. [ 118.466392][ T5838] XFS (loop0): Starting recovery (logdev: internal) [ 118.520817][ T5838] XFS (loop0): Ending recovery (logdev: internal) [ 118.690317][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 118.690326][ T26] audit: type=1800 audit(1756520111.989:85): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.499" name="file1" dev="loop0" ino=4423 res=0 errno=0 [ 118.725781][ T4689] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x481/0x6a0, xfs_bnobt block 0x8 [ 118.804845][ T4689] XFS (loop0): Unmount and run xfs_repair [ 118.843327][ T4689] XFS (loop0): xfs_inactive_ifree: xfs_ifree returned error -117 [ 118.847871][ T5844] loop3: detected capacity change from 0 to 32768 [ 118.880806][ T5844] /dev/loop3: Can't open blockdev [ 118.897963][ T4689] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_inactive_ifree+0x1c6/0x390 (fs/xfs/xfs_inode.c:1639). Shutting down filesystem. [ 118.932318][ T4689] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 119.001930][ T4183] XFS (loop0): Unmounting Filesystem [ 119.342962][ T4689] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.446652][ T5868] loop4: detected capacity change from 0 to 32768 [ 119.481326][ T5868] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.509 (5868) [ 119.539831][ T5868] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 119.578903][ T5868] BTRFS info (device loop4): enabling auto defrag [ 119.597874][ T4689] usb 4-1: Using ep0 maxpacket: 8 [ 119.605478][ T5868] BTRFS info (device loop4): doing ref verification [ 119.632105][ T5868] BTRFS info (device loop4): max_inline at 0 [ 119.654658][ T5868] BTRFS info (device loop4): force clearing of disk cache [ 119.677418][ T5868] BTRFS info (device loop4): turning on sync discard [ 119.704705][ T5868] BTRFS info (device loop4): disabling auto defrag [ 119.734069][ T5868] BTRFS info (device loop4): using free space tree [ 119.740609][ T5868] BTRFS info (device loop4): has skinny extents [ 119.752922][ T4689] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.775017][ T5885] Bluetooth: hci0: too big key_count value 21773 [ 119.791845][ T4689] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.834424][ T4689] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.845357][ T4689] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.858495][ T4689] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.867566][ T4689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.124012][ T5868] BTRFS info (device loop4): enabling ssd optimizations [ 120.153221][ T4689] usb 4-1: GET_CAPABILITIES returned 0 [ 120.158751][ T4689] usbtmc 4-1:16.0: can't read capabilities [ 120.180570][ T5868] BTRFS info (device loop4): clearing free space tree [ 120.193456][ T5868] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.238654][ T5868] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.318309][ T5868] BTRFS info (device loop4): creating free space tree [ 120.341799][ T5868] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.347201][ T5919] loop2: detected capacity change from 0 to 2048 [ 120.359321][ T5868] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.375274][ T5919] UDF-fs: bad mount option "gidêÍ ÜFêÖ£=00000000000000000000" or missing value [ 120.489422][ T4689] usb 4-1: USB disconnect, device number 6 [ 120.515550][ T4524] usb 3-1: USB disconnect, device number 3 [ 120.597550][ T26] audit: type=1800 audit(1756520113.899:86): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.509" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 120.681568][ T5927] autofs4:pid:5927:autofs_fill_super: pipe file descriptor does not contain proper ops [ 120.848411][ T5934] loop0: detected capacity change from 0 to 128 [ 121.317580][ T5950] netlink: 51 bytes leftover after parsing attributes in process `syz.4.526'. [ 121.558175][ T5953] loop0: detected capacity change from 0 to 4096 [ 121.670847][ T5953] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 121.762839][ T4689] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 121.790097][ T5946] loop2: detected capacity change from 0 to 32768 [ 121.843388][ T5946] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.533 (5946) [ 121.926118][ T5946] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 121.958051][ T5946] BTRFS info (device loop2): turning on async discard [ 121.983723][ T5946] BTRFS info (device loop2): using free space tree [ 121.995400][ T5946] BTRFS info (device loop2): has skinny extents [ 122.026654][ T5946] BTRFS info (device loop2): enabling ssd optimizations [ 122.193600][ T4689] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.217914][ T4689] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.339167][ T4689] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.383395][ T4689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.391561][ T4689] usb 5-1: SerialNumber: syz [ 122.522101][ T4305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.588932][ T4305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.707564][ T4689] usb 5-1: 0:2 : does not exist [ 122.772302][ T4305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.824969][ T4689] usb 5-1: USB disconnect, device number 6 [ 122.836110][ T4305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.890833][ T5994] loop2: detected capacity change from 0 to 4096 [ 122.960847][ T5994] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 123.042357][ T4305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.073490][ T4305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.099135][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.165976][ T4305] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.173296][ T5990] loop0: detected capacity change from 0 to 32768 [ 123.213557][ T4305] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.223176][ T5990] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.545 (5990) [ 123.268610][ T5990] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 123.292890][ T5992] loop3: detected capacity change from 0 to 32768 [ 123.302723][ T5990] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 123.430030][ T5990] BTRFS info (device loop0): use lzo compression, level 0 [ 123.493493][ T5990] BTRFS info (device loop0): using free space tree [ 123.500045][ T5990] BTRFS info (device loop0): has skinny extents [ 123.724163][ T5995] chnl_net:caif_netlink_parms(): no params data found [ 123.792820][ T4526] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.909065][ T5990] BTRFS info (device loop0): enabling ssd optimizations [ 123.997497][ T26] audit: type=1804 audit(1756520117.299:87): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.545" name="/newroot/97/file0/file1" dev="loop0" ino=260 res=1 errno=0 [ 124.018456][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.052758][ T4526] usb 5-1: Using ep0 maxpacket: 16 [ 124.068362][ T26] audit: type=1804 audit(1756520117.349:88): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.545" name="/newroot/97/file0/file1" dev="loop0" ino=260 res=1 errno=0 [ 124.189762][ T4526] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 124.202932][ T4526] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.222479][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.232161][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.240665][ T4526] usb 5-1: config 0 has no interface number 0 [ 124.263738][ T5995] device bridge_slave_0 entered promiscuous mode [ 124.432520][ T4526] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 124.445955][ T4526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.463072][ T4526] usb 5-1: Product: syz [ 124.467272][ T4526] usb 5-1: Manufacturer: syz [ 124.492737][ T4526] usb 5-1: SerialNumber: syz [ 124.500436][ T4526] usb 5-1: config 0 descriptor?? [ 124.554707][ T4526] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 124.561113][ T4526] usb 5-1: No valid video chain found. [ 124.807297][ T4249] usb 5-1: USB disconnect, device number 7 [ 124.825753][ T4256] Bluetooth: hci2: command 0x0409 tx timeout [ 124.872130][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.886952][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.904122][ T5995] device bridge_slave_1 entered promiscuous mode [ 125.015340][ T5995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.073961][ T5995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.120236][ T6055] loop3: detected capacity change from 0 to 4096 [ 125.191815][ T5995] team0: Port device team_slave_0 added [ 125.235458][ T5995] team0: Port device team_slave_1 added [ 125.424240][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.446161][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.472072][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.533000][ T5995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.573099][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.580096][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.606006][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.671600][ T5995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.832550][ T5995] device hsr_slave_0 entered promiscuous mode [ 125.858341][ T5995] device hsr_slave_1 entered promiscuous mode [ 125.873911][ T5995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.902877][ T5995] Cannot create hsr debugfs directory [ 126.242988][ T6003] loop2: detected capacity change from 0 to 131072 [ 126.315887][ T6003] F2FS-fs (loop2): invalid crc value [ 126.375117][ T6003] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.467864][ T5995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.544182][ T6072] loop4: detected capacity change from 0 to 32768 [ 126.568558][ T4305] device hsr_slave_0 left promiscuous mode [ 126.587334][ T4305] device hsr_slave_1 left promiscuous mode [ 126.638027][ T6003] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 126.660571][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.705737][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.767671][ T6072] XFS (loop4): Mounting V5 Filesystem [ 126.804168][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.811607][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.866925][ T4305] device bridge_slave_1 left promiscuous mode [ 126.876587][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 126.899029][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.914710][ T6072] XFS (loop4): Ending clean mount [ 126.983691][ T4305] device bridge_slave_0 left promiscuous mode [ 126.994120][ T6072] XFS (loop4): Quotacheck needed: Please wait. [ 127.021484][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.140553][ T6072] XFS (loop4): Quotacheck: Done. [ 127.185641][ T4305] device veth1_macvtap left promiscuous mode [ 127.202517][ T4305] device veth0_macvtap left promiscuous mode [ 127.210810][ T4239] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.258816][ T4305] device veth1_vlan left promiscuous mode [ 127.270399][ T4196] XFS (loop4): Unmounting Filesystem [ 127.278143][ T4305] device veth0_vlan left promiscuous mode [ 127.504384][ T4239] usb 1-1: Using ep0 maxpacket: 16 [ 127.658593][ T4239] usb 1-1: config index 0 descriptor too short (expected 59154, got 18) [ 127.670616][ T4239] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 127.680909][ T4239] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 127.745552][ T4305] team0 (unregistering): Port device team_slave_1 removed [ 127.761730][ T4305] team0 (unregistering): Port device team_slave_0 removed [ 127.775987][ T4305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.791554][ T4305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.862926][ T4239] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 127.865868][ T4305] bond0 (unregistering): Released all slaves [ 127.876561][ T4239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.892364][ T4239] usb 1-1: Product: syz [ 127.896964][ T4239] usb 1-1: Manufacturer: syz [ 127.901702][ T4239] usb 1-1: SerialNumber: syz [ 127.913049][ T4239] usb 1-1: config 0 descriptor?? [ 127.938821][ T5995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.970049][ T4239] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 127.977025][ T5995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.007801][ T5995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.103787][ T6132] loop4: detected capacity change from 0 to 1024 [ 128.206925][ T6132] EXT4-fs (loop4): Ignoring removed bh option [ 128.278370][ T6132] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 128.354258][ T6132] EXT4-fs error (device loop4): ext4_check_all_de:667: inode #12: block 7: comm syz.4.567: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 128.407304][ T6132] EXT4-fs (loop4): Remounting filesystem read-only [ 128.433865][ T5995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.509005][ T6156] loop2: detected capacity change from 0 to 256 [ 128.511176][ T5995] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.543406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.561513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.619498][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.662888][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.713055][ T4239] ssu100: probe of 1-1:0.0 failed with error -110 [ 128.729984][ T1471] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.737102][ T1471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.762417][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.803676][ T6164] netlink: 60 bytes leftover after parsing attributes in process `syz.3.572'. [ 128.823155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.841314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.860151][ T6169] netlink: set zone limit has 8 unknown bytes [ 128.860998][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.873724][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.898929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.914274][ T6168] use of bytesused == 0 is deprecated and will be removed in the future, [ 128.942880][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 128.954268][ T6164] netlink: 60 bytes leftover after parsing attributes in process `syz.3.572'. [ 128.969709][ T6171] loop2: detected capacity change from 0 to 128 [ 128.971115][ T6168] use the actual size instead. [ 128.978167][ T6163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.572'. [ 129.008327][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.054035][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.074420][ T6171] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.092314][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.118413][ T6171] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.130699][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.145072][ T13] usb 1-1: USB disconnect, device number 7 [ 129.145580][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.181572][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.232108][ T5995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.283568][ T5995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.372870][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.381314][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.394010][ T6181] loop2: detected capacity change from 0 to 512 [ 129.437068][ T6187] loop0: detected capacity change from 0 to 2048 [ 129.439758][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.488803][ T6181] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.504359][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.522529][ T6187] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 129.547049][ T6181] EXT4-fs (loop2): 1 truncate cleaned up [ 129.559354][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.569644][ T6181] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 129.728706][ T6187] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 129.797514][ T4186] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /122/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 129.826906][ T4186] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 129.867708][ T4186] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /122/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 129.930311][ T4186] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 129.976261][ T6187] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.582: bg 0: block 234: padding at end of block bitmap is not set [ 130.028378][ T4186] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /122/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 130.077557][ T6187] EXT4-fs (loop0): Remounting filesystem read-only [ 130.121964][ T5995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.133741][ T4186] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 130.170091][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.189948][ T4183] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /104/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 130.194702][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.251941][ T6213] loop4: detected capacity change from 0 to 64 [ 130.267752][ T4186] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /122/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 130.337857][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 130.373592][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 130.439383][ T4186] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 130.479459][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 130.500286][ T4183] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /104/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 130.523706][ T4186] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /122/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 130.587167][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 130.596033][ T4186] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 130.642043][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 130.735172][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 130.742397][ T4183] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /104/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 130.858017][ T6231] netlink: 92 bytes leftover after parsing attributes in process `syz.3.591'. [ 130.890188][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 130.903275][ T6231] netem: unknown loss type 0 [ 130.932707][ T6231] netem: change failed [ 130.933091][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 131.004160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.033093][ T4853] Bluetooth: hci2: command 0x0419 tx timeout [ 131.033486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.073135][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 131.093297][ T5995] device veth0_vlan entered promiscuous mode [ 131.095017][ T4183] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /104/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 131.119523][ T5995] device veth1_vlan entered promiscuous mode [ 131.144934][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.169103][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.188791][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.246658][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 131.262199][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.262543][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 131.274382][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.347808][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.363447][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.380044][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.421911][ T5995] device veth0_macvtap entered promiscuous mode [ 131.433491][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 131.493548][ T4183] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /104/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 131.558157][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 131.570751][ T5995] device veth1_macvtap entered promiscuous mode [ 131.600036][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.642266][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.675966][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.723283][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.745835][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.758653][ T6254] binder: 6253:6254 ioctl c0306201 2000000003c0 returned -14 [ 131.778767][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.819389][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.843384][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.896751][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.929425][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.969398][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.996274][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.039908][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.051016][ T6260] loop3: detected capacity change from 0 to 256 [ 132.063791][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.092965][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.112669][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.132847][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.152675][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.173587][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.204021][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.224483][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.254707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.293740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.334745][ T6260] /dev/loop3: Can't open blockdev [ 132.455024][ T5995] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.486050][ T5995] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.515699][ T5995] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.555381][ T5995] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.698968][ T4183] syz-executor (4183) used greatest stack depth: 19624 bytes left [ 132.733503][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.740114][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.884600][ T449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.897586][ T449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.966980][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.002159][ T5136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.027426][ T5136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.087247][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.167764][ T6275] loop3: detected capacity change from 0 to 1024 [ 133.501056][ T6287] vivid-000: ================= START STATUS ================= [ 133.559165][ T6287] vivid-000: Radio HW Seek Mode: Bounded [ 133.615235][ T6287] vivid-000: Radio Programmable HW Seek: false [ 133.642782][ T6287] vivid-000: RDS Rx I/O Mode: Block I/O [ 133.653710][ T6287] vivid-000: Generate RBDS Instead of RDS: false [ 133.662451][ T6287] vivid-000: RDS Reception: true [ 133.669956][ T6288] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 133.683125][ T6288] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 133.718986][ T6287] vivid-000: RDS Program Type: 0 inactive [ 133.760080][ T6287] vivid-000: RDS PS Name: inactive [ 133.825362][ T6287] vivid-000: RDS Radio Text: inactive [ 133.861837][ T6287] vivid-000: RDS Traffic Announcement: false inactive [ 133.867987][ T6277] loop4: detected capacity change from 0 to 32768 [ 133.916942][ T6277] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.606 (6277) [ 133.930462][ T6287] vivid-000: RDS Traffic Program: false inactive [ 133.957753][ T6287] vivid-000: RDS Music: false inactive [ 133.974042][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.990421][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.008682][ T6287] vivid-000: ================== END STATUS ================== [ 134.057242][ T6277] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 134.090926][ T6278] chnl_net:caif_netlink_parms(): no params data found [ 134.102792][ T6277] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 134.120088][ T6277] BTRFS info (device loop4): use zstd compression, level 3 [ 134.141266][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.162298][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.173081][ T6277] BTRFS info (device loop4): using free space tree [ 134.173102][ T6277] BTRFS info (device loop4): has skinny extents [ 134.359769][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.426994][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.489781][ T6277] BTRFS info (device loop4): enabling ssd optimizations [ 134.549812][ T26] audit: type=1800 audit(1756520127.849:89): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.606" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 134.578114][ T6311] loop3: detected capacity change from 0 to 32768 [ 134.663548][ T6311] /dev/loop3: Can't open blockdev [ 134.820212][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.861848][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.045462][ T6347] loop3: detected capacity change from 0 to 164 [ 135.163315][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.170497][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.217662][ T6278] device bridge_slave_0 entered promiscuous mode [ 135.251863][ T6295] chnl_net:caif_netlink_parms(): no params data found [ 135.258745][ T6347] rock: directory entry would overflow storage [ 135.258847][ T6347] rock: sig=0x4f50, size=4, remaining=3 [ 135.258863][ T6347] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 135.278669][ T4680] Bluetooth: hci0: command 0x0409 tx timeout [ 135.314109][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.321191][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.375044][ T6278] device bridge_slave_1 entered promiscuous mode [ 135.551413][ T6278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.619131][ T6278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.686578][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.694086][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.702350][ T6295] device bridge_slave_0 entered promiscuous mode [ 135.770732][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.793366][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.801466][ T6295] device bridge_slave_1 entered promiscuous mode [ 135.823395][ T5947] Bluetooth: hci3: command 0x0409 tx timeout [ 135.851018][ T6278] team0: Port device team_slave_0 added [ 135.906559][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.928441][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.947730][ T6278] team0: Port device team_slave_1 added [ 136.007140][ T6295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.029926][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.042058][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.084853][ T6278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.123791][ T6295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.153407][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.161654][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.257513][ T6278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.301466][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.331258][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.418203][ T6295] team0: Port device team_slave_0 added [ 136.438779][ T6295] team0: Port device team_slave_1 added [ 136.477205][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.499307][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.578386][ T6278] device hsr_slave_0 entered promiscuous mode [ 136.595884][ T6278] device hsr_slave_1 entered promiscuous mode [ 136.610195][ T6278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.623054][ T4689] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 136.623416][ T6278] Cannot create hsr debugfs directory [ 136.653831][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.669462][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.683093][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.690061][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.700732][ T6384] loop3: detected capacity change from 0 to 32768 [ 136.722534][ T6295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.738142][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.754134][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.783598][ T6295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.943324][ T5947] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 136.954736][ T6295] device hsr_slave_0 entered promiscuous mode [ 136.979944][ T6295] device hsr_slave_1 entered promiscuous mode [ 136.999077][ T6295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.007287][ T6295] Cannot create hsr debugfs directory [ 137.056426][ T4689] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.107480][ T4689] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 137.158261][ T4689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 137.192722][ T4689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 240, setting to 64 [ 137.222803][ T4689] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.302936][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 137.315623][ T5947] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 137.325800][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.343358][ T5947] usb 5-1: config 0 descriptor?? [ 137.363268][ T6399] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 137.399477][ T4526] Bluetooth: hci0: command 0x041b tx timeout [ 137.460210][ T4689] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 137.490013][ T6409] loop3: detected capacity change from 0 to 32768 [ 137.490244][ T4689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.527229][ T4689] usb 6-1: Product: syz [ 137.531444][ T4689] usb 6-1: Manufacturer: syz [ 137.551453][ T4689] usb 6-1: SerialNumber: syz [ 137.569463][ T4689] usb 6-1: config 0 descriptor?? [ 137.600123][ T6390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.603336][ T6278] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.628811][ T6390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.657334][ T6278] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 137.674712][ T4689] ati_remote_probe: Unexpected desc.bNumEndpoints [ 137.887955][ T6417] loop3: detected capacity change from 0 to 32768 [ 137.890609][ T6390] udc-core: couldn't find an available UDC or it's busy [ 137.903248][ T5947] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 137.917948][ T5947] Bluetooth: hci3: command 0x041b tx timeout [ 137.953104][ T6390] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 137.970376][ T6278] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 137.995554][ T6278] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.125718][ T6295] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 138.138005][ T6399] elan 0003:04F3:0755.0009: pid 6399 passed too short report [ 138.184934][ T1108] usb 5-1: USB disconnect, device number 8 [ 138.220159][ T6427] fido_id[6427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 138.321319][ T6295] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 138.361551][ T6295] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 138.418273][ T6295] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 138.588376][ T5262] usb 6-1: USB disconnect, device number 2 [ 138.588952][ T6446] loop3: detected capacity change from 0 to 512 [ 138.689036][ T6278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.724375][ T6295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.843326][ T6278] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.882902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.903206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.962152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.981119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.003808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.030989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.035192][ T6459] nbd4: detected capacity change from 0 to 4 [ 139.061855][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.069058][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.081980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.107155][ T6463] block nbd4: shutting down sockets [ 139.134366][ T6295] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.173367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.195951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.221430][ C0] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.224986][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.232579][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 139.239448][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.250622][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.265985][ T263] Buffer I/O error on dev nbd4, logical block 0, async page read [ 139.276840][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.287674][ T263] Buffer I/O error on dev nbd4, logical block 0, async page read [ 139.305340][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.316324][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 139.324383][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.335210][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 139.343083][ T4175] ldm_validate_partition_table(): Disk read failed. [ 139.344291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.350420][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.369175][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 139.380450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.389339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.402166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.411021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.418886][ T4175] Dev nbd4: unable to read RDB block 0 [ 139.422834][ T4526] Bluetooth: hci0: command 0x040f tx timeout [ 139.452547][ T6278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.459400][ T4175] nbd4: unable to read partition table [ 139.468613][ T4175] nbd4: partition table beyond EOD, truncated [ 139.494258][ T6278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.533650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.553294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.630691][ T6473] loop4: detected capacity change from 0 to 2048 [ 139.639960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.662357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.724748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.740123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.751984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.763075][ T6473] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 139.830054][ T6473] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.908147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.929411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.933156][ T6473] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 139.949633][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.957345][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.982764][ T4174] Bluetooth: hci3: command 0x040f tx timeout [ 139.992019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.000890][ T6473] EXT4-fs (loop4): This should not happen!! Data will be lost [ 140.000890][ T6473] [ 140.027943][ T6473] EXT4-fs (loop4): Total free blocks count 0 [ 140.029788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.050935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.053029][ T6473] EXT4-fs (loop4): Free/Dirty block details [ 140.063009][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.072155][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.072756][ T5947] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.089562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.103399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.105441][ T6473] EXT4-fs (loop4): free_blocks=2415919104 [ 140.128161][ T6473] EXT4-fs (loop4): dirty_blocks=48 [ 140.130301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.138257][ T6473] EXT4-fs (loop4): Block reservation details [ 140.156787][ T6466] loop5: detected capacity change from 0 to 32768 [ 140.162161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.163534][ T6473] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 140.181623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.206971][ T6466] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop5 scanned by syz.5.635 (6466) [ 140.252596][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.268130][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.286513][ T6466] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 140.303236][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.310458][ T6466] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 140.321279][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.334116][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.336144][ T6466] BTRFS info (device loop5): use lzo compression, level 0 [ 140.353189][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.379424][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.392450][ T6466] BTRFS info (device loop5): using free space tree [ 140.421092][ T6466] BTRFS info (device loop5): has skinny extents [ 140.457718][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.472985][ T5947] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 140.485831][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.488742][ T5947] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.564578][ T6278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.571753][ T5947] usb 4-1: config 0 has no interface number 0 [ 140.710501][ T6466] BTRFS info (device loop5): enabling ssd optimizations [ 140.733108][ T5947] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 140.748048][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.776520][ T5947] usb 4-1: Product: syz [ 140.780726][ T5947] usb 4-1: Manufacturer: syz [ 140.809033][ T5947] usb 4-1: SerialNumber: syz [ 140.840969][ T5947] usb 4-1: config 0 descriptor?? [ 140.852836][ T5262] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.909288][ T5947] ims_pcu: probe of 4-1:0.41 failed with error -22 [ 140.922536][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.958553][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.983224][ T26] audit: type=1804 audit(1756520134.289:90): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.635" name="/newroot/10/file0/file1" dev="loop5" ino=260 res=1 errno=0 [ 141.048597][ T26] audit: type=1804 audit(1756520134.349:91): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.635" name="/newroot/10/file0/file1" dev="loop5" ino=260 res=1 errno=0 [ 141.082974][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.091763][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.122885][ T5262] usb 5-1: Using ep0 maxpacket: 8 [ 141.158074][ T6295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.176671][ T4239] usb 4-1: USB disconnect, device number 7 [ 141.225446][ T6278] device veth0_vlan entered promiscuous mode [ 141.239467][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.247716][ T5262] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 141.266197][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.274094][ T5262] usb 5-1: config 179 has no interface number 0 [ 141.280370][ T5262] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 141.303071][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.310989][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.332728][ T5262] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 141.352698][ T5262] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.390288][ T5262] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 141.429606][ T5262] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 141.450846][ T5262] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 141.472999][ T5262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.503022][ T5947] Bluetooth: hci0: command 0x0419 tx timeout [ 141.513162][ T6497] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 141.726096][ T6278] device veth1_vlan entered promiscuous mode [ 141.851492][ T144] device hsr_slave_0 left promiscuous mode [ 141.863408][ T144] device hsr_slave_1 left promiscuous mode [ 141.899373][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.909390][ T6550] loop3: detected capacity change from 0 to 256 [ 141.911273][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.936929][ T6550] /dev/loop3: Can't open blockdev [ 141.953861][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.971060][ T4680] usb 5-1: USB disconnect, device number 9 [ 141.972696][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 141.985411][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 142.001480][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.038360][ T144] device bridge_slave_1 left promiscuous mode [ 142.058128][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.066315][ T4249] Bluetooth: hci3: command 0x0419 tx timeout [ 142.113351][ T144] device bridge_slave_0 left promiscuous mode [ 142.116600][ T6554] loop3: detected capacity change from 0 to 1024 [ 142.119609][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.184530][ T144] device hsr_slave_0 left promiscuous mode [ 142.199219][ T144] device hsr_slave_1 left promiscuous mode [ 142.220052][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.231647][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.250378][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.294988][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.326134][ T144] device bridge_slave_1 left promiscuous mode [ 142.332422][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.395012][ T144] device bridge_slave_0 left promiscuous mode [ 142.414114][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.537686][ T144] device veth1_macvtap left promiscuous mode [ 142.567551][ T144] device veth0_macvtap left promiscuous mode [ 142.588927][ T144] device veth1_vlan left promiscuous mode [ 142.605577][ T144] device veth0_vlan left promiscuous mode [ 142.659819][ T144] device veth1_macvtap left promiscuous mode [ 142.692709][ T144] device veth0_macvtap left promiscuous mode [ 142.699038][ T144] device veth1_vlan left promiscuous mode [ 142.711039][ T144] device veth0_vlan left promiscuous mode [ 143.222069][ T144] team0 (unregistering): Port device team_slave_1 removed [ 143.254999][ T144] team0 (unregistering): Port device team_slave_0 removed [ 143.277954][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.301698][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.450395][ T144] bond0 (unregistering): Released all slaves [ 143.568675][ T6545] syz.5.642 (6545): drop_caches: 1 [ 143.587474][ T6542] syz.5.642 (6542): drop_caches: 1 [ 143.742706][ T144] team0 (unregistering): Port device team_slave_1 removed [ 143.786484][ T144] team0 (unregistering): Port device team_slave_0 removed [ 143.816158][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.870982][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.890848][ T6582] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 143.959174][ T6576] loop3: detected capacity change from 0 to 32768 [ 144.050020][ T144] bond0 (unregistering): Released all slaves [ 144.152670][ T6278] device veth0_macvtap entered promiscuous mode [ 144.209215][ T6591] loop3: detected capacity change from 0 to 128 [ 144.209255][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.249056][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.280670][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.335174][ T6278] device veth1_macvtap entered promiscuous mode [ 144.455213][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.458405][ T6595] loop5: detected capacity change from 0 to 512 [ 144.506900][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.541329][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.572709][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.600811][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.628219][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.640121][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.648847][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.658725][ T6595] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.683831][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.702376][ T6595] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.724135][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.769121][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.807805][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.850766][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.865722][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.882868][ T6602] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 144.888694][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.923337][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.960352][ T6589] loop4: detected capacity change from 0 to 32768 [ 144.964744][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.983785][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.021899][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.093881][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.251373][ T6589] XFS (loop4): Mounting V5 Filesystem [ 145.265101][ T6612] loop3: detected capacity change from 0 to 32768 [ 145.324727][ T6589] XFS (loop4): Ending clean mount [ 145.343848][ T6278] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.356560][ T6278] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.362887][ T6612] /dev/loop3: Can't open blockdev [ 145.365971][ T6278] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.383787][ T6278] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.414579][ T6589] XFS (loop4): Quotacheck needed: Please wait. [ 145.435021][ T6295] device veth0_vlan entered promiscuous mode [ 145.442103][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.479080][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.558978][ T6295] device veth1_vlan entered promiscuous mode [ 145.603922][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.612559][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.700346][ T6589] XFS (loop4): Quotacheck: Done. [ 145.773480][ T6295] device veth0_macvtap entered promiscuous mode [ 145.819790][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.914535][ T4196] XFS (loop4): Unmounting Filesystem [ 145.934871][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.013726][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.068038][ T6295] device veth1_macvtap entered promiscuous mode [ 146.088153][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.121243][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.200158][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.201284][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.231987][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.242869][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.262679][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.273595][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.283786][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.294561][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.304851][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.315628][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.353721][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.362224][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.371700][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.380342][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.415695][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.433417][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.459028][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.481447][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.503116][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.522693][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.554377][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.569217][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.580118][ T6639] loop5: detected capacity change from 0 to 40427 [ 146.585393][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.598295][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.607697][ T6639] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 146.609947][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.624082][ T6639] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 146.626650][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.672491][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.711655][ T6295] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.721612][ T6295] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.730941][ T6295] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.739958][ T6295] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.747548][ T6639] F2FS-fs (loop5): Found nat_bits in checkpoint [ 146.907182][ T6653] loop4: detected capacity change from 0 to 1024 [ 146.936994][ T6655] loop3: detected capacity change from 0 to 1 [ 146.958949][ T6639] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 146.988619][ T3561] Dev loop3: unable to read RDB block 1 [ 146.990715][ T6653] EXT4-fs (loop4): Test dummy encryption mode enabled [ 147.004622][ T3561] loop3: unable to read partition table [ 147.014995][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.035068][ T6639] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 147.053893][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.061861][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.072019][ T3561] loop3: partition table beyond EOD, truncated [ 147.098298][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.111715][ T6653] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,barrier=0x00000000000083fc,noblock_validity,discard,acl,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 147.149199][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.167549][ T3561] Dev loop3: unable to read RDB block 1 [ 147.193379][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.210885][ T3561] loop3: unable to read partition table [ 147.228138][ T3561] loop3: partition table beyond EOD, truncated [ 147.415235][ T6653] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 147.506841][ T6679] loop7: detected capacity change from 0 to 256 [ 147.540482][ T6655] Dev loop3: unable to read RDB block 1 [ 147.542591][ T5995] attempt to access beyond end of device [ 147.542591][ T5995] loop5: rw=2049, want=45104, limit=40427 [ 147.612795][ T6655] loop3: unable to read partition table [ 147.618863][ T6655] loop3: partition table beyond EOD, truncated [ 147.622960][ T6653] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 147.643006][ T6655] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 147.864078][ T6689] loop7: detected capacity change from 0 to 1024 [ 148.141427][ T6700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.629045][ T6722] netlink: 'syz.5.683': attribute type 12 has an invalid length. [ 148.695249][ T6722] netlink: 'syz.5.683': attribute type 29 has an invalid length. [ 148.739374][ T4249] libceph: connect (1)[b::]:6789 error -101 [ 148.739374][ T5048] libceph: connect (1)[c::]:6789 error -101 [ 148.740006][ T5048] libceph: mon0 (1)[c::]:6789 connect error [ 148.746475][ T4249] libceph: mon0 (1)[b::]:6789 connect error [ 148.773737][ T6722] netlink: 148 bytes leftover after parsing attributes in process `syz.5.683'. [ 148.802782][ T6730] mmap: syz.3.674 (6730) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 148.820484][ T4854] libceph: connect (1)[c::]:6789 error -101 [ 148.828076][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.683'. [ 148.829627][ T4854] libceph: mon0 (1)[c::]:6789 connect error [ 149.042124][ T5262] libceph: connect (1)[b::]:6789 error -101 [ 149.064147][ T5262] libceph: mon0 (1)[b::]:6789 connect error [ 149.112854][ T5048] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 149.186035][ T4853] libceph: connect (1)[c::]:6789 error -101 [ 149.192814][ T4853] libceph: mon0 (1)[c::]:6789 connect error [ 149.374411][ T6723] ceph: No mds server is up or the cluster is laggy [ 149.374411][ T6717] ceph: No mds server is up or the cluster is laggy [ 149.413869][ T5048] usb 7-1: Using ep0 maxpacket: 8 [ 149.562926][ T5048] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 149.582441][ T5048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.593770][ T4249] libceph: connect (1)[b::]:6789 error -101 [ 149.605432][ T4249] libceph: mon0 (1)[b::]:6789 connect error [ 149.622881][ T4853] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 149.643199][ T5048] usb 7-1: config 0 descriptor?? [ 149.811063][ T6760] sch_fq: defrate 4294967295 ignored. [ 149.856376][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 149.913522][ T5048] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 149.923489][ T4853] usb 6-1: Using ep0 maxpacket: 32 [ 150.001396][ T6767] loop3: detected capacity change from 0 to 1024 [ 150.069162][ T6771] loop7: detected capacity change from 0 to 128 [ 150.073098][ T4853] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.116206][ T4853] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 150.165509][ T4853] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.180013][ T4853] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.212549][ T4853] usb 6-1: config 1 interface 1 has no altsetting 0 [ 150.287177][ T6775] device syz_tun entered promiscuous mode [ 150.303591][ T6775] device syz_tun left promiscuous mode [ 150.337845][ T6776] attempt to access beyond end of device [ 150.337845][ T6776] loop7: rw=2049, want=617, limit=128 [ 150.422979][ T4853] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.432050][ T4853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.490444][ T4853] usb 6-1: Product: syz [ 150.502809][ T4853] usb 6-1: Manufacturer: syz [ 150.512452][ T4853] usb 6-1: SerialNumber: syz [ 150.564477][ T4305] attempt to access beyond end of device [ 150.564477][ T4305] loop7: rw=1, want=1041, limit=128 [ 150.732798][ T4249] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 150.986210][ T4853] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 151.007373][ T4853] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 151.015983][ T5048] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 151.039002][ T5048] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 151.055379][ T5048] asix: probe of 7-1:0.0 failed with error -71 [ 151.078204][ T5048] usb 7-1: USB disconnect, device number 2 [ 151.102908][ T4249] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 151.121103][ T4249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.142807][ T1108] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 151.193783][ T4249] usb 4-1: config 0 descriptor?? [ 151.223556][ T4853] usb 6-1: USB disconnect, device number 3 [ 151.384999][ T1108] usb 8-1: Using ep0 maxpacket: 16 [ 151.473810][ T6820] loop4: detected capacity change from 0 to 128 [ 151.503940][ T1108] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.526162][ T1108] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.542792][ T4249] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 151.551326][ T4249] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 151.573787][ T6820] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.588389][ T4311] udevd[4311]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.625780][ T6820] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.692601][ T4249] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 151.741378][ T4249] [drm] Initialized udl on minor 2 [ 151.773016][ T1108] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.791438][ T1108] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.833651][ T1108] usb 8-1: Product: syz [ 151.837841][ T1108] usb 8-1: Manufacturer: syz [ 151.858891][ T1108] usb 8-1: SerialNumber: syz [ 152.092893][ T4249] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 152.111739][ T4249] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 152.143142][ T4249] usb 4-1: USB disconnect, device number 8 [ 152.149407][ T5947] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 152.169666][ T5947] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 152.194585][ T5947] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 152.270819][ T6828] loop5: detected capacity change from 0 to 32768 [ 152.353016][ T1108] usb 8-1: 0:2 : does not exist [ 152.362743][ T5947] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 152.431847][ T6828] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 152.515091][ T6828] (syz.5.709,6828,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 152.716147][ T5995] ocfs2: Unmounting device (7,5) on (node local) [ 152.722921][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 152.750447][ T5947] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 152.790113][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.831325][ T4853] usb 8-1: USB disconnect, device number 2 [ 152.840945][ T5947] usb 5-1: config 0 descriptor?? [ 152.873015][ T6846] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 152.933281][ T6871] loop6: detected capacity change from 0 to 512 [ 153.038469][ T6871] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 153.156077][ T6871] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.228084][ T6871] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #2: comm syz.6.716: corrupted inode contents [ 153.287201][ T6871] EXT4-fs error (device loop6): ext4_dirty_inode:6040: inode #2: comm syz.6.716: mark_inode_dirty error [ 153.304594][ T6871] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #2: comm syz.6.716: corrupted inode contents [ 153.330605][ T6871] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.716: mark_inode_dirty error [ 153.336350][ T5947] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 153.473029][ T4853] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 153.803545][ T6916] loop6: detected capacity change from 0 to 512 [ 153.839241][ T6916] EXT4-fs (loop6): Ignoring removed nobh option [ 153.872795][ T5947] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 153.892934][ T4853] usb 6-1: config 0 has no interfaces? [ 153.898647][ T4853] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 153.928418][ T6916] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #3: comm syz.6.725: corrupted inode contents [ 153.938481][ T4853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.958422][ T4853] usb 6-1: config 0 descriptor?? [ 154.028843][ T6916] EXT4-fs error (device loop6): ext4_dirty_inode:6040: inode #3: comm syz.6.725: mark_inode_dirty error [ 154.047580][ T6916] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #3: comm syz.6.725: corrupted inode contents [ 154.106494][ T6916] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #3: comm syz.6.725: mark_inode_dirty error [ 154.125717][ T4853] usb 5-1: USB disconnect, device number 10 [ 154.137470][ T6916] Quota error (device loop6): write_blk: dquota write failed [ 154.198204][ T6916] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 154.224543][ T6916] EXT4-fs error (device loop6): ext4_acquire_dquot:6209: comm syz.6.725: Failed to acquire dquot type 0 [ 154.236294][ T5947] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 154.249765][ T5048] usb 6-1: USB disconnect, device number 4 [ 154.256119][ T5947] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.324228][ T5947] usb 8-1: config 0 descriptor?? [ 154.336175][ T6916] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #16: comm syz.6.725: corrupted inode contents [ 154.385214][ T6916] EXT4-fs error (device loop6): ext4_dirty_inode:6040: inode #16: comm syz.6.725: mark_inode_dirty error [ 154.431981][ T6933] netlink: 132 bytes leftover after parsing attributes in process `syz.3.726'. [ 154.447642][ T6916] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #16: comm syz.6.725: corrupted inode contents [ 154.491000][ T6916] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.725: mark_inode_dirty error [ 154.523316][ T6916] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #16: comm syz.6.725: corrupted inode contents [ 154.570529][ T6916] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 154.590073][ T6916] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #16: comm syz.6.725: corrupted inode contents [ 154.662787][ T5947] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 154.671702][ T6916] EXT4-fs error (device loop6): ext4_truncate:4273: inode #16: comm syz.6.725: mark_inode_dirty error [ 154.681809][ T5947] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 154.710527][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.726554][ T6916] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 154.736918][ T5947] [drm] Initialized udl 0.0.1 20120220 for 8-1:0.0 on minor 2 [ 154.748259][ T6916] EXT4-fs (loop6): 1 truncate cleaned up [ 154.751226][ T5947] [drm] Initialized udl on minor 2 [ 154.769964][ T6916] EXT4-fs (loop6): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback. [ 154.793331][ T6943] O3ãc¤±: renamed from bridge_slave_0 [ 154.862753][ T6916] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.091730][ T6962] loop5: detected capacity change from 0 to 512 [ 155.175859][ T5947] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 155.204986][ T5947] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 155.235513][ T5947] usb 8-1: USB disconnect, device number 3 [ 155.294662][ T6962] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 155.317165][ T4174] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 155.350318][ T4174] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 155.408717][ T6962] EXT4-fs (loop5): Remounting filesystem read-only [ 155.416957][ T6962] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.734: invalid indirect mapped block 4278190080 (level 0) [ 155.440837][ T6962] EXT4-fs (loop5): Remounting filesystem read-only [ 155.459446][ T6962] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.734: invalid indirect mapped block 1 (level 1) [ 155.467272][ T4174] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 155.487657][ T6962] EXT4-fs (loop5): Remounting filesystem read-only [ 155.546041][ T6962] EXT4-fs (loop5): 1 truncate cleaned up [ 155.555303][ T6962] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x00000000000000cb,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 155.690674][ T6962] EXT4-fs error (device loop5): __ext4_iget:4894: inode #12: block 2: comm syz.5.734: invalid block [ 155.749853][ T6978] loop3: detected capacity change from 0 to 4096 [ 155.757688][ T6962] EXT4-fs (loop5): Remounting filesystem read-only [ 155.831421][ T6962] EXT4-fs error (device loop5): __ext4_iget:4894: inode #12: block 2: comm syz.5.734: invalid block [ 155.863676][ T6978] /dev/loop3: Can't open blockdev [ 155.892800][ T6962] EXT4-fs (loop5): Remounting filesystem read-only [ 155.969585][ T6956] loop4: detected capacity change from 0 to 32768 [ 156.049499][ T6956] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.733 (6956) [ 156.198780][ T6956] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 156.255682][ T6956] BTRFS info (device loop4): setting nodatacow, compression disabled [ 156.269835][ T6968] loop6: detected capacity change from 0 to 32768 [ 156.292975][ T6956] BTRFS info (device loop4): setting datacow [ 156.299132][ T6956] BTRFS info (device loop4): doing ref verification [ 156.397240][ T6956] BTRFS info (device loop4): force clearing of disk cache [ 156.412104][ T6968] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 156.458636][ T6956] BTRFS info (device loop4): turning off barriers [ 156.531438][ T6956] BTRFS info (device loop4): enabling ssd optimizations [ 156.557052][ T6968] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 156.592773][ T6956] BTRFS info (device loop4): using spread ssd allocation scheme [ 156.611496][ T6956] BTRFS info (device loop4): not using ssd optimizations [ 156.652976][ T6956] BTRFS info (device loop4): not using spread ssd allocation scheme [ 156.704699][ T6956] BTRFS info (device loop4): using free space tree [ 156.732109][ T6956] BTRFS info (device loop4): has skinny extents [ 157.027636][ T6956] BTRFS info (device loop4): clearing free space tree [ 157.072918][ T6956] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.126106][ T6956] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.168474][ T6278] ocfs2: Unmounting device (7,6) on (node local) [ 157.198435][ T6956] BTRFS info (device loop4): creating free space tree [ 157.261239][ T6956] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.407521][ T6956] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.551076][ T7095] loop5: detected capacity change from 0 to 256 [ 157.576164][ T7096] loop3: detected capacity change from 0 to 512 [ 157.670012][ T26] audit: type=1800 audit(1756520150.969:92): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.733" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 157.994491][ T7106] loop6: detected capacity change from 0 to 512 [ 158.123363][ T7106] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 158.313272][ T7106] UDF-fs: error (device loop6): udf_read_inode: (ino 19) failed ident=264 [ 158.363952][ T7106] binfmt_misc: register: failed to install interpreter file ./file0 [ 158.567577][ T7120] loop3: detected capacity change from 0 to 32768 [ 158.821964][ T4175] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4175) [ 158.867878][ T7139] 9pnet: p9_errstr2errno: server reported unknown error @íÎhQ$I¸ñº6‚}hñEÒŒ¸i) [ 158.961434][ T7146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.028910][ T7146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.067672][ T7146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.088334][ T7146] device bridge_slave_0 left promiscuous mode [ 159.163424][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.209644][ T7146] device bridge_slave_1 left promiscuous mode [ 159.229924][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.255461][ T7146] bond0: (slave bond_slave_0): Releasing backup interface [ 159.355523][ T7146] bond0: (slave bond_slave_1): Releasing backup interface [ 159.508448][ T7146] team0: Port device team_slave_0 removed [ 159.565012][ T7146] team0: Port device team_slave_1 removed [ 159.593757][ T7146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.615687][ T7146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.640383][ T7146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.665802][ T7146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.791888][ T7162] loop6: detected capacity change from 0 to 40427 [ 159.841499][ T7162] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff [ 159.850083][ T5048] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 159.902935][ T7162] F2FS-fs (loop6): invalid crc value [ 159.980118][ T7162] F2FS-fs (loop6): Found nat_bits in checkpoint [ 160.158240][ T7162] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 160.228058][ T5048] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.239924][ T5048] usb 8-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 160.256988][ T5048] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.269584][ T5048] usb 8-1: config 0 descriptor?? [ 160.319083][ T6278] attempt to access beyond end of device [ 160.319083][ T6278] loop6: rw=2049, want=45104, limit=40427 [ 160.370490][ T7194] loop5: detected capacity change from 0 to 2048 [ 160.509903][ T7194] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.549719][ T7175] loop3: detected capacity change from 0 to 32768 [ 160.888682][ T5048] wacom 0003:056A:00BC.000B: collection stack underflow [ 160.936336][ T5048] wacom 0003:056A:00BC.000B: item 0 2 0 12 parsing failed [ 161.043052][ T5048] wacom 0003:056A:00BC.000B: parse failed [ 161.048838][ T5048] wacom: probe of 0003:056A:00BC.000B failed with error -22 [ 161.741994][ T4174] usb 8-1: USB disconnect, device number 4 [ 161.766639][ T4177] udevd[4177]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [7204] terminated by signal 1 (Hangup) [ 165.199924][ T7232] loop4: detected capacity change from 0 to 1024 [ 165.223287][ T7235] loop5: detected capacity change from 0 to 512 [ 165.286106][ T7232] EXT4-fs (loop4): Ignoring removed orlov option [ 165.293211][ T7235] EXT4-fs (loop5): Test dummy encryption mode enabled [ 165.300600][ T7235] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.372986][ T7232] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 165.411817][ T26] audit: type=1800 audit(1756520158.719:93): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.789" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 165.443784][ T7235] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.791: bad orphan inode 131083 [ 165.528765][ T7247] netlink: 32 bytes leftover after parsing attributes in process `syz.7.794'. [ 165.559800][ T7235] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 165.582853][ T1108] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 165.787417][ T7258] netlink: 'syz.4.795': attribute type 39 has an invalid length. [ 165.811017][ T7235] overlayfs: upper fs needs to support d_type. [ 165.848832][ T7258] device veth0_macvtap left promiscuous mode [ 165.901688][ T7235] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.791: path /: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 165.953111][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 165.956673][ T7261] loop7: detected capacity change from 0 to 256 [ 165.981063][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 166.008655][ T7261] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.037043][ T7261] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 166.062335][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.118385][ T5995] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /49/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 166.153151][ T7261] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 166.337315][ T1108] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 166.358110][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.372820][ T1108] usb 4-1: Product: syz [ 166.377011][ T1108] usb 4-1: Manufacturer: syz [ 166.392203][ T1108] usb 4-1: SerialNumber: syz [ 166.416611][ T1108] usb 4-1: config 0 descriptor?? [ 166.435424][ T7241] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 166.769542][ T5262] usb 4-1: USB disconnect, device number 9 [ 167.086969][ T7298] loop6: detected capacity change from 0 to 512 [ 167.203004][ T7298] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 167.203004][ T7298] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 167.203004][ T7298] [ 167.237517][ T7271] loop4: detected capacity change from 0 to 40427 [ 167.356444][ T7298] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 167.391788][ T7298] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.809: invalid indirect mapped block 2683928664 (level 1) [ 167.451038][ T7271] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 167.461147][ T7298] EXT4-fs (loop6): 1 truncate cleaned up [ 167.498948][ T7271] F2FS-fs (loop4): invalid crc value [ 167.504485][ T7298] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,bsddf,data_err=ignore,noacl,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,nodelalloc,,,errors=continue. Quota mode: writeback. [ 167.642835][ T7271] F2FS-fs (loop4): Found nat_bits in checkpoint [ 167.807309][ T7319] loop7: detected capacity change from 0 to 512 [ 167.842860][ T7271] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 167.890961][ T7319] EXT4-fs (loop7): Test dummy encryption mode enabled [ 167.937073][ T7319] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 167.956065][ T26] audit: type=1800 audit(1756520161.259:94): pid=7298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.809" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 167.994820][ T7319] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.812: bad orphan inode 131083 [ 168.013958][ T7271] attempt to access beyond end of device [ 168.013958][ T7271] loop4: rw=2049, want=45112, limit=40427 [ 168.054108][ T7271] attempt to access beyond end of device [ 168.054108][ T7271] loop4: rw=2049, want=77848, limit=40427 [ 168.096441][ T7319] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 168.218933][ T4196] attempt to access beyond end of device [ 168.218933][ T4196] loop4: rw=2049, want=45120, limit=40427 [ 168.299865][ T7332] loop6: detected capacity change from 0 to 512 [ 168.317489][ T7319] overlayfs: upper fs needs to support d_type. [ 168.357374][ T7319] overlayfs: conflicting lowerdir path [ 168.406498][ T7332] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 168.435644][ T7309] chnl_net:caif_netlink_parms(): no params data found [ 168.440201][ T7332] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.517620][ T7332] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2228: inode #15: comm syz.6.813: corrupted in-inode xattr [ 168.545692][ T7339] loop3: detected capacity change from 0 to 512 [ 168.571303][ T7332] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.813: couldn't read orphan inode 15 (err -117) [ 168.592702][ T7332] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 168.784900][ T7346] loop7: detected capacity change from 0 to 2048 [ 168.856386][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.869254][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.891615][ T7309] device bridge_slave_0 entered promiscuous mode [ 168.918917][ T7346] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 168.919798][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.957041][ T7351] loop4: detected capacity change from 0 to 8192 [ 168.965778][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.975527][ T7309] device bridge_slave_1 entered promiscuous mode [ 168.976376][ T7346] NILFS (loop7): mounting unchecked fs [ 169.056854][ T7309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.121140][ T7346] NILFS (loop7): recovery complete [ 169.139530][ T7309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.159924][ T7351] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 169.168716][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop7 [ 169.182092][ T7354] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.205601][ T7351] REISERFS (device loop4): using ordered data mode [ 169.212450][ T7351] reiserfs: using flush barriers [ 169.242900][ T7351] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 169.254247][ T26] audit: type=1800 audit(1756520162.549:95): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.816" name="file1" dev="loop7" ino=12 res=0 errno=0 [ 169.260014][ T7309] team0: Port device team_slave_0 added [ 169.298223][ T7351] REISERFS (device loop4): checking transaction log (loop4) [ 169.309765][ T7309] team0: Port device team_slave_1 added [ 169.376196][ T7351] REISERFS (device loop4): Using r5 hash to sort names [ 169.399947][ T7351] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 169.476086][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.520928][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.638142][ T7309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.737266][ T7351] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "." [ 169.747305][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.748029][ T4525] Bluetooth: hci2: command 0x0409 tx timeout [ 169.804201][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.895123][ T7372] loop6: detected capacity change from 0 to 128 [ 169.909338][ T7309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.047288][ T7372] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 170.083608][ T7372] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.140256][ T7309] device hsr_slave_0 entered promiscuous mode [ 170.170470][ T7309] device hsr_slave_1 entered promiscuous mode [ 170.299086][ T7381] loop4: detected capacity change from 0 to 256 [ 170.305752][ T4525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.396807][ T7391] loop6: detected capacity change from 0 to 512 [ 170.461235][ T7381] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 170.477204][ T7391] EXT4-fs (loop6): Test dummy encryption mode enabled [ 170.502889][ T7391] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 170.575306][ T7391] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.826: bad orphan inode 131083 [ 170.593301][ T7391] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 170.709342][ T13] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 170.718379][ T7391] overlayfs: upper fs needs to support d_type. [ 170.794841][ T7309] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 170.807047][ T7391] overlayfs: conflicting lowerdir path [ 170.820829][ T7309] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 170.850481][ T7309] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 170.874021][ T7403] loop3: detected capacity change from 0 to 128 [ 170.898619][ T7309] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 170.973199][ T4690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.992841][ T13] usb 8-1: Using ep0 maxpacket: 32 [ 171.132917][ T13] usb 8-1: config 0 has no interfaces? [ 171.148898][ T13] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 171.181559][ T7309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.199229][ T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.226369][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.243298][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.258871][ T13] usb 8-1: config 0 descriptor?? [ 171.285643][ T7309] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.310681][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.343188][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.356408][ T7427] loop3: detected capacity change from 0 to 512 [ 171.362740][ T1108] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 171.376047][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.431074][ T7078] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.438258][ T7078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.463327][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.509013][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.547519][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.566989][ T7078] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.574216][ T7078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.595602][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.606981][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 171.630524][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.659805][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.682167][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.712478][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.728887][ T1108] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 171.740821][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.760312][ T1108] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.771773][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.791101][ T1108] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.803542][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.812037][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.841105][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.863595][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.890175][ T7427] loop3: detected capacity change from 0 to 32768 [ 171.894392][ T7309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.904254][ T5947] Bluetooth: hci2: command 0x041b tx timeout [ 171.924746][ T7427] /dev/loop3: Can't open blockdev [ 171.960457][ T7425] loop6: detected capacity change from 0 to 32768 [ 171.983310][ T1108] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.992382][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.031425][ T1108] usb 5-1: Product: syz [ 172.040883][ T1108] usb 5-1: Manufacturer: syz [ 172.068611][ T1108] usb 5-1: SerialNumber: syz [ 172.119662][ T4249] usb 8-1: USB disconnect, device number 5 [ 172.383771][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.440656][ T7080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.487076][ T7080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.539674][ T7309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.583194][ T1108] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 172.743068][ T7458] device syzkaller1 entered promiscuous mode [ 173.007225][ T7481] loop7: detected capacity change from 0 to 128 [ 173.028126][ T4853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.038187][ T4689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.229813][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.250491][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.334141][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.372091][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.388690][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.420778][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.423199][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.452330][ T7309] device veth0_vlan entered promiscuous mode [ 173.462802][ T1108] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 173.534416][ T1108] usb 5-1: USB disconnect, device number 11 [ 173.675022][ T7309] device veth1_vlan entered promiscuous mode [ 173.756715][ T7080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.769267][ T7080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.792016][ T7309] device veth0_macvtap entered promiscuous mode [ 173.824620][ T7309] device veth1_macvtap entered promiscuous mode [ 173.906729][ T7080] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.992724][ T4174] Bluetooth: hci2: command 0x040f tx timeout [ 174.014770][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.072836][ T7507] serio: Serial port ptm0 [ 174.076554][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.114762][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.145880][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.174728][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.218367][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.254546][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.296791][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.307074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.324765][ T4853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.389053][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.462491][ T7080] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.473643][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.600943][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.656113][ T7535] loop6: detected capacity change from 0 to 1024 [ 174.667791][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.676970][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.689000][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.753085][ T7080] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.893777][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.938134][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.971834][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.989740][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.005254][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.021471][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.032939][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.043892][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.058804][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.084263][ T7084] hfsplus: b-tree write err: -5, ino 3 [ 175.099159][ T6278] hfsplus: node 4:3 still has 1 user(s)! [ 175.153238][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.161986][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.186230][ T7309] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.243543][ T7309] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.252308][ T7309] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.298263][ T7309] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.344588][ T7080] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.503331][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.690619][ T7574] device batadv_slave_1 entered promiscuous mode [ 175.711386][ T7087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.716038][ T7573] device batadv_slave_1 left promiscuous mode [ 175.733683][ T7087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.885244][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.941740][ T7078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.993553][ T7078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.046233][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.062864][ T5947] Bluetooth: hci2: command 0x0419 tx timeout [ 176.150028][ T7529] chnl_net:caif_netlink_parms(): no params data found [ 176.593046][ T7611] loop8: detected capacity change from 0 to 1024 [ 176.622412][ T7611] EXT4-fs (loop8): inline encryption not supported [ 176.645219][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.662580][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.668649][ T7611] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 176.713176][ T4850] Bluetooth: hci3: command 0x0409 tx timeout [ 176.714166][ T7529] device bridge_slave_0 entered promiscuous mode [ 176.772133][ T7618] loop6: detected capacity change from 0 to 512 [ 176.814172][ T7611] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 176.821198][ T7595] loop4: detected capacity change from 0 to 32768 [ 176.911247][ T26] audit: type=1800 audit(1756520176.209:96): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.878" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 176.929072][ T7618] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 176.949279][ T7529] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.962763][ T7618] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 176.978509][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.014241][ T7529] device bridge_slave_1 entered promiscuous mode [ 177.020768][ T7618] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 177.123031][ T7618] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 177.298694][ T7618] EXT4-fs (loop6): failed to initialize system zone (-117) [ 177.308657][ T7618] EXT4-fs (loop6): mount failed [ 177.526488][ T7529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.586117][ T4525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.634334][ T7529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.768735][ T7529] team0: Port device team_slave_0 added [ 177.880473][ T7529] team0: Port device team_slave_1 added [ 177.927080][ T7529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.952066][ T7529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.003445][ T7529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.022106][ T4249] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 178.048896][ T7529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.061976][ T7529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.104705][ T7529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.152150][ T4850] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 178.272110][ T4249] usb 7-1: Using ep0 maxpacket: 32 [ 178.280924][ T7080] device hsr_slave_0 left promiscuous mode [ 178.289236][ T7080] device hsr_slave_1 left promiscuous mode [ 178.307669][ T7080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.322002][ T7080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.338923][ T7080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.354891][ T7080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.370087][ T7080] device bridge_slave_1 left promiscuous mode [ 178.392094][ T4249] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 178.393773][ T4850] usb 5-1: Using ep0 maxpacket: 8 [ 178.408315][ T4249] usb 7-1: config 0 has no interface number 0 [ 178.418423][ T4249] usb 7-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 178.423034][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.438525][ T4249] usb 7-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 178.463793][ T7080] device bridge_slave_0 left promiscuous mode [ 178.480225][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.527871][ T7080] device veth1_macvtap left promiscuous mode [ 178.534012][ T7080] device veth0_macvtap left promiscuous mode [ 178.540090][ T7080] device veth1_vlan left promiscuous mode [ 178.562348][ T4850] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 178.591288][ T7080] device veth0_vlan left promiscuous mode [ 178.602020][ T4850] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 178.612198][ T4249] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 178.612226][ T4249] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.612243][ T4249] usb 7-1: Product: syz [ 178.612256][ T4249] usb 7-1: Manufacturer: syz [ 178.612268][ T4249] usb 7-1: SerialNumber: syz [ 178.621422][ T4249] usb 7-1: config 0 descriptor?? [ 178.657277][ T7675] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.666384][ T4850] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.686155][ T4525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.702232][ T4850] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.723492][ T4249] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 178.746537][ T4850] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.768873][ T4850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.787890][ T4525] Bluetooth: hci3: command 0x041b tx timeout [ 178.934932][ T4249] usb 7-1: qt2_setup_urbs - submit read urb failed -90 [ 178.948253][ T4249] quatech2: probe of 7-1:0.51 failed with error -90 [ 179.081792][ T4850] usb 5-1: GET_CAPABILITIES returned 0 [ 179.089498][ T4850] usbtmc 5-1:16.0: can't read capabilities [ 179.115719][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.140629][ T4249] usb 7-1: USB disconnect, device number 3 [ 179.309065][ T7667] loop3: detected capacity change from 0 to 32768 [ 179.323463][ T13] usb 5-1: USB disconnect, device number 12 [ 179.333942][ T7667] XFS: attr2 mount option is deprecated. [ 179.342022][ T7667] /dev/loop3: Can't open blockdev [ 179.446016][ T7080] team0 (unregistering): Port device team_slave_1 removed [ 179.481140][ T7080] team0 (unregistering): Port device team_slave_0 removed [ 179.509865][ T7080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.527848][ T7080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.678621][ T7080] bond0 (unregistering): Released all slaves [ 179.741751][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.802936][ T7684] bridge0: port 3(syz_tun) entered blocking state [ 179.831435][ T7684] bridge0: port 3(syz_tun) entered disabled state [ 179.842470][ T7684] device syz_tun entered promiscuous mode [ 179.855789][ T7684] bridge0: port 3(syz_tun) entered blocking state [ 179.862935][ T7684] bridge0: port 3(syz_tun) entered forwarding state [ 179.938553][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'. [ 180.027436][ T7691] netlink: 'syz.6.897': attribute type 3 has an invalid length. [ 180.039379][ T7691] netlink: 'syz.6.897': attribute type 3 has an invalid length. [ 180.049766][ T7691] netlink: 'syz.6.897': attribute type 3 has an invalid length. [ 180.058591][ T7691] netlink: 'syz.6.897': attribute type 3 has an invalid length. [ 180.069890][ T7691] netlink: 'syz.6.897': attribute type 3 has an invalid length. [ 180.077916][ T7691] netlink: 'syz.6.897': attribute type 3 has an invalid length. [ 180.086101][ T7691] netlink: 'syz.6.897': attribute type 3 has an invalid length. [ 180.094810][ T7691] netlink: 'syz.6.897': attribute type 3 has an invalid length. [ 180.103054][ T7691] netlink: 'syz.6.897': attribute type 3 has an invalid length. [ 180.111393][ T7691] netlink: 'syz.6.897': attribute type 3 has an invalid length. [ 180.124251][ T7529] device hsr_slave_0 entered promiscuous mode [ 180.134828][ T7529] device hsr_slave_1 entered promiscuous mode [ 180.142735][ T7529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.154836][ T7529] Cannot create hsr debugfs directory [ 180.226146][ T7706] loop6: detected capacity change from 0 to 512 [ 180.326405][ T7706] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 180.410674][ T7706] EXT4-fs (loop6): 1 truncate cleaned up [ 180.441943][ T7713] [ 180.444306][ T7713] ===================================================== [ 180.451324][ T7713] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 180.458790][ T7713] syzkaller #0 Not tainted [ 180.463201][ T7713] ----------------------------------------------------- [ 180.468730][ T7706] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 180.470180][ T7713] syz.3.901/7713 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 180.498441][ T7713] ffff88801eb312b8 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x16d/0x490 [ 180.507156][ T7713] [ 180.507156][ T7713] and this task is already holding: [ 180.514613][ T7713] ffff888077816028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0 [ 180.524378][ T7713] which would create a new lock dependency: [ 180.530278][ T7713] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 180.538384][ T7713] [ 180.538384][ T7713] but this new dependency connects a HARDIRQ-irq-safe lock: [ 180.547835][ T7713] (&dev->event_lock#2){-.-.}-{2:2} [ 180.547869][ T7713] [ 180.547869][ T7713] ... which became HARDIRQ-irq-safe at: [ 180.548668][ T7529] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 180.553052][ T7713] lock_acquire+0x197/0x3f0 [ 180.553075][ T7713] _raw_spin_lock_irqsave+0xa4/0xf0 [ 180.553092][ T7713] input_event+0x76/0xb0 [ 180.553109][ T7713] psmouse_report_standard_packet+0x4f/0x200 [ 180.553127][ T7713] psmouse_process_byte+0x42b/0x620 [ 180.553144][ T7713] psmouse_handle_byte+0x43/0x490 [ 180.598130][ T7713] psmouse_interrupt+0x699/0x1130 [ 180.603244][ T7713] serio_interrupt+0x87/0x130 [ 180.608027][ T7713] i8042_interrupt+0x369/0x710 [ 180.612882][ T7713] __handle_irq_event_percpu+0x291/0x9b0 [ 180.618616][ T7713] handle_irq_event+0xa5/0x220 [ 180.621410][ T6278] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /46/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 180.623466][ T7713] handle_edge_irq+0x243/0xb20 [ 180.649625][ T7713] __common_interrupt+0xd7/0x1e0 [ 180.654678][ T7713] common_interrupt+0xb0/0xd0 [ 180.659439][ T7713] asm_common_interrupt+0x22/0x40 [ 180.664548][ T7713] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 180.670364][ T7713] i8042_aux_write+0x105/0x170 [ 180.675214][ T7713] ps2_do_sendbyte+0x1fb/0x6c0 [ 180.677750][ T6278] EXT4-fs (loop6): Remounting filesystem read-only [ 180.680057][ T7713] ps2_sendbyte+0x5b/0x110 [ 180.687399][ T6278] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 180.691038][ T7713] cypress_send_ext_cmd+0x239/0x910 [ 180.691059][ T7713] cypress_detect+0x89/0x190 [ 180.691074][ T7713] psmouse_extensions+0xcf3/0x1430 [ 180.691087][ T7713] psmouse_switch_protocol+0x2e7/0x870 [ 180.691099][ T7713] psmouse_connect+0x923/0x1430 [ 180.736146][ T7713] serio_driver_probe+0x76/0x90 [ 180.740879][ T6278] EXT4-fs (loop6): Remounting filesystem read-only [ 180.741088][ T7713] really_probe+0x284/0xc80 [ 180.747919][ T6278] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /46/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 180.752154][ T7713] __driver_probe_device+0x18c/0x330 [ 180.752175][ T7713] driver_probe_device+0x4f/0x420 [ 180.752188][ T7713] __driver_attach+0x46b/0x670 [ 180.752201][ T7713] bus_for_each_dev+0x175/0x1e0 [ 180.752213][ T7713] serio_handle_event+0x29c/0x840 [ 180.752230][ T7713] process_one_work+0x863/0x1000 [ 180.752246][ T7713] worker_thread+0xaa8/0x12a0 [ 180.752259][ T7713] kthread+0x436/0x520 [ 180.752273][ T7713] ret_from_fork+0x1f/0x30 [ 180.752290][ T7713] [ 180.752290][ T7713] to a HARDIRQ-irq-unsafe lock: [ 180.752297][ T7713] (tasklist_lock){.+.+}-{2:2} [ 180.752316][ T7713] [ 180.752316][ T7713] ... which became HARDIRQ-irq-unsafe at: [ 180.752321][ T7713] ... [ 180.752324][ T7713] lock_acquire+0x197/0x3f0 [ 180.752341][ T7713] _raw_read_lock+0x32/0x40 [ 180.808942][ T6278] EXT4-fs (loop6): Remounting filesystem read-only [ 180.812994][ T7713] do_wait+0x293/0xac0 [ 180.813017][ T7713] kernel_wait+0xa8/0x160 [ 180.813034][ T7713] call_usermodehelper_exec_work+0xb5/0x220 [ 180.813053][ T7713] process_one_work+0x863/0x1000 [ 180.813067][ T7713] worker_thread+0xaa8/0x12a0 [ 180.813082][ T7713] kthread+0x436/0x520 [ 180.818376][ T6278] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 180.824570][ T7713] ret_from_fork+0x1f/0x30 [ 180.824590][ T7713] [ 180.824590][ T7713] other info that might help us debug this: [ 180.824590][ T7713] [ 180.824595][ T7713] Chain exists of: [ 180.824595][ T7713] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 180.824595][ T7713] [ 180.824628][ T7713] Possible interrupt unsafe locking scenario: [ 180.824628][ T7713] [ 180.843423][ T6278] EXT4-fs (loop6): Remounting filesystem read-only [ 180.844372][ T7713] CPU0 CPU1 [ 180.844379][ T7713] ---- ---- [ 180.849228][ T6278] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /46/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 180.855422][ T7713] lock(tasklist_lock); [ 180.855436][ T7713] local_irq_disable(); [ 180.855441][ T7713] lock(&dev->event_lock#2); [ 180.855455][ T7713] lock(&client->buffer_lock); [ 180.855467][ T7713] [ 180.855470][ T7713] lock(&dev->event_lock#2); [ 180.855484][ T7713] [ 180.855484][ T7713] *** DEADLOCK *** [ 180.855484][ T7713] [ 180.855488][ T7713] 7 locks held by syz.3.901/7713: [ 180.855499][ T7713] #0: [ 180.860711][ T4525] Bluetooth: hci3: command 0x040f tx timeout [ 180.864009][ T7713] ffff888025749110 (&evdev->mutex){+.+.}-{3:3} [ 180.878332][ T7717] loop8: detected capacity change from 0 to 32768 [ 180.879724][ T7713] , at: evdev_write+0x177/0x470 [ 180.884068][ T4525] Bluetooth: hci4: command 0x0406 tx timeout [ 180.903381][ T7713] #1: ffff888146c7e230 (&dev->event_lock#2){-.-.}-{2:2}, at: input_inject_event+0x9e/0x2c0 [ 180.903436][ T7713] #2: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 180.903472][ T7713] #3: ffffffff8c11c460 [ 180.908787][ T6278] EXT4-fs (loop6): Remounting filesystem read-only [ 180.918274][ T7713] (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 180.918312][ T7713] #4: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 181.104249][ T7713] #5: ffff888077816028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0 [ 181.114416][ T7713] #6: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 181.123709][ T7713] [ 181.123709][ T7713] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 181.134115][ T7713] -> (&dev->event_lock#2){-.-.}-{2:2} { [ 181.139757][ T7713] IN-HARDIRQ-W at: [ 181.143801][ T7713] lock_acquire+0x197/0x3f0 [ 181.150125][ T7713] _raw_spin_lock_irqsave+0xa4/0xf0 [ 181.157217][ T7713] input_event+0x76/0xb0 [ 181.163272][ T7713] psmouse_report_standard_packet+0x4f/0x200 [ 181.171059][ T7713] psmouse_process_byte+0x42b/0x620 [ 181.178066][ T7713] psmouse_handle_byte+0x43/0x490 [ 181.184922][ T7713] psmouse_interrupt+0x699/0x1130 [ 181.191746][ T7713] serio_interrupt+0x87/0x130 [ 181.198231][ T7713] i8042_interrupt+0x369/0x710 [ 181.204800][ T7713] __handle_irq_event_percpu+0x291/0x9b0 [ 181.212243][ T7713] handle_irq_event+0xa5/0x220 [ 181.218809][ T7713] handle_edge_irq+0x243/0xb20 [ 181.225396][ T7713] __common_interrupt+0xd7/0x1e0 [ 181.232136][ T7713] common_interrupt+0xb0/0xd0 [ 181.238634][ T7713] asm_common_interrupt+0x22/0x40 [ 181.245463][ T7713] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 181.252988][ T7713] i8042_aux_write+0x105/0x170 [ 181.259557][ T7713] ps2_do_sendbyte+0x1fb/0x6c0 [ 181.266124][ T7713] ps2_sendbyte+0x5b/0x110 [ 181.272347][ T7713] cypress_send_ext_cmd+0x239/0x910 [ 181.279361][ T7713] cypress_detect+0x89/0x190 [ 181.285759][ T7713] psmouse_extensions+0xcf3/0x1430 [ 181.292672][ T7713] psmouse_switch_protocol+0x2e7/0x870 [ 181.299931][ T7713] psmouse_connect+0x923/0x1430 [ 181.306581][ T7713] serio_driver_probe+0x76/0x90 [ 181.313240][ T7713] really_probe+0x284/0xc80 [ 181.319549][ T7713] __driver_probe_device+0x18c/0x330 [ 181.326642][ T7713] driver_probe_device+0x4f/0x420 [ 181.333476][ T7713] __driver_attach+0x46b/0x670 [ 181.340047][ T7713] bus_for_each_dev+0x175/0x1e0 [ 181.346733][ T7713] serio_handle_event+0x29c/0x840 [ 181.353565][ T7713] process_one_work+0x863/0x1000 [ 181.360310][ T7713] worker_thread+0xaa8/0x12a0 [ 181.366799][ T7713] kthread+0x436/0x520 [ 181.372683][ T7713] ret_from_fork+0x1f/0x30 [ 181.378909][ T7713] IN-SOFTIRQ-W at: [ 181.382956][ T7713] lock_acquire+0x197/0x3f0 [ 181.389267][ T7713] _raw_spin_lock_irqsave+0xa4/0xf0 [ 181.396287][ T7713] input_event+0x76/0xb0 [ 181.402336][ T7713] hidinput_report_event+0x9d/0xf0 [ 181.409259][ T7713] hid_report_raw_event+0x142d/0x1640 [ 181.416443][ T7713] hid_input_report+0x424/0x4e0 [ 181.423099][ T7713] hid_ctrl+0x241/0x540 [ 181.429061][ T7713] __usb_hcd_giveback_urb+0x35f/0x520 [ 181.436244][ T7713] dummy_timer+0x827/0x2e10 [ 181.442552][ T7713] call_timer_fn+0x16c/0x530 [ 181.448946][ T7713] __run_timers+0x525/0x7c0 [ 181.455257][ T7713] run_timer_softirq+0x63/0xf0 [ 181.461829][ T7713] handle_softirqs+0x328/0x820 [ 181.468396][ T7713] __irq_exit_rcu+0x12f/0x220 [ 181.474879][ T7713] irq_exit_rcu+0x5/0x20 [ 181.480923][ T7713] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 181.488358][ T7713] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 181.496142][ T7713] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 181.503669][ T7713] rcu_preempt_deferred_qs_irqrestore+0x859/0xc10 [ 181.511905][ T7713] rcu_read_unlock_special+0x3cc/0x480 [ 181.519174][ T7713] __rcu_read_unlock+0x78/0xd0 [ 181.525748][ T7713] xa_load+0x271/0x2a0 [ 181.531619][ T7713] page_cache_ra_unbounded+0x22a/0x930 [ 181.538901][ T7713] f2fs_readdir+0x471/0xd40 [ 181.545212][ T7713] iterate_dir+0x218/0x560 [ 181.551441][ T7713] __se_sys_getdents+0xe5/0x250 [ 181.558098][ T7713] do_syscall_64+0x4c/0xa0 [ 181.564326][ T7713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.572028][ T7713] INITIAL USE at: [ 181.576001][ T7713] lock_acquire+0x197/0x3f0 [ 181.582224][ T7713] _raw_spin_lock_irqsave+0xa4/0xf0 [ 181.589142][ T7713] input_inject_event+0x9e/0x2c0 [ 181.595800][ T7713] led_trigger_event+0x10a/0x1e0 [ 181.602474][ T7713] kbd_led_trigger_activate+0xb9/0x100 [ 181.609666][ T7713] led_trigger_set+0x504/0x900 [ 181.616153][ T7713] led_trigger_set_default+0x19c/0x1e0 [ 181.623333][ T7713] led_classdev_register_ext+0x68f/0x870 [ 181.630681][ T7713] input_leds_connect+0x51d/0x750 [ 181.637448][ T7713] input_register_device+0xda7/0x1140 [ 181.644540][ T7713] atkbd_connect+0x759/0xa10 [ 181.650849][ T7713] serio_driver_probe+0x76/0x90 [ 181.657424][ T7713] really_probe+0x284/0xc80 [ 181.663669][ T7713] __driver_probe_device+0x18c/0x330 [ 181.670677][ T7713] driver_probe_device+0x4f/0x420 [ 181.677422][ T7713] __driver_attach+0x46b/0x670 [ 181.683906][ T7713] bus_for_each_dev+0x175/0x1e0 [ 181.690487][ T7713] serio_handle_event+0x29c/0x840 [ 181.697229][ T7713] process_one_work+0x863/0x1000 [ 181.703885][ T7713] worker_thread+0xaa8/0x12a0 [ 181.710542][ T7713] kthread+0x436/0x520 [ 181.716331][ T7713] ret_from_fork+0x1f/0x30 [ 181.722467][ T7713] } [ 181.725031][ T7713] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 181.734125][ T7713] -> (&client->buffer_lock){....}-{2:2} { [ 181.739852][ T7713] INITIAL USE at: [ 181.743730][ T7713] lock_acquire+0x197/0x3f0 [ 181.749782][ T7713] _raw_spin_lock+0x2a/0x40 [ 181.755833][ T7713] evdev_pass_values+0xcb/0xab0 [ 181.762228][ T7713] evdev_events+0x1c0/0x2f0 [ 181.768278][ T7713] input_pass_values+0x880/0x1220 [ 181.774850][ T7713] input_handle_event+0xb3f/0x1490 [ 181.781510][ T7713] input_inject_event+0x1b9/0x2c0 [ 181.788104][ T7713] evdev_write+0x326/0x470 [ 181.794065][ T7713] vfs_write+0x300/0xd00 [ 181.799852][ T7713] ksys_write+0x14d/0x250 [ 181.805725][ T7713] do_syscall_64+0x4c/0xa0 [ 181.811686][ T7713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.819121][ T7713] } [ 181.821599][ T7713] ... key at: [] evdev_open.__key.22+0x0/0x20 [ 181.829738][ T7713] ... acquired at: [ 181.833515][ T7713] _raw_spin_lock+0x2a/0x40 [ 181.838179][ T7713] evdev_pass_values+0xcb/0xab0 [ 181.843182][ T7713] evdev_events+0x1c0/0x2f0 [ 181.847838][ T7713] input_pass_values+0x880/0x1220 [ 181.853016][ T7713] input_handle_event+0xb3f/0x1490 [ 181.858632][ T7713] input_inject_event+0x1b9/0x2c0 [ 181.863809][ T7713] evdev_write+0x326/0x470 [ 181.868385][ T7713] vfs_write+0x300/0xd00 [ 181.872782][ T7713] ksys_write+0x14d/0x250 [ 181.877274][ T7713] do_syscall_64+0x4c/0xa0 [ 181.881847][ T7713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.887998][ T7713] [ 181.890311][ T7713] [ 181.890311][ T7713] the dependencies between the lock to be acquired [ 181.890318][ T7713] and HARDIRQ-irq-unsafe lock: [ 181.903790][ T7713] -> (tasklist_lock){.+.+}-{2:2} { [ 181.909073][ T7713] HARDIRQ-ON-R at: [ 181.913207][ T7713] lock_acquire+0x197/0x3f0 [ 181.919694][ T7713] _raw_read_lock+0x32/0x40 [ 181.926177][ T7713] do_wait+0x293/0xac0 [ 181.932289][ T7713] kernel_wait+0xa8/0x160 [ 181.938599][ T7713] call_usermodehelper_exec_work+0xb5/0x220 [ 181.946470][ T7713] process_one_work+0x863/0x1000 [ 181.953385][ T7713] worker_thread+0xaa8/0x12a0 [ 181.960038][ T7713] kthread+0x436/0x520 [ 181.966084][ T7713] ret_from_fork+0x1f/0x30 [ 181.972486][ T7713] SOFTIRQ-ON-R at: [ 181.976618][ T7713] lock_acquire+0x197/0x3f0 [ 181.983099][ T7713] _raw_read_lock+0x32/0x40 [ 181.989581][ T7713] do_wait+0x293/0xac0 [ 181.995632][ T7713] kernel_wait+0xa8/0x160 [ 182.002032][ T7713] call_usermodehelper_exec_work+0xb5/0x220 [ 182.009906][ T7713] process_one_work+0x863/0x1000 [ 182.016823][ T7713] worker_thread+0xaa8/0x12a0 [ 182.023479][ T7713] kthread+0x436/0x520 [ 182.029535][ T7713] ret_from_fork+0x1f/0x30 [ 182.035938][ T7713] INITIAL USE at: [ 182.039983][ T7713] lock_acquire+0x197/0x3f0 [ 182.046381][ T7713] _raw_write_lock_irq+0x9f/0xe0 [ 182.053210][ T7713] copy_process+0x234a/0x3e00 [ 182.059780][ T7713] kernel_clone+0x219/0x930 [ 182.066174][ T7713] kernel_thread+0xc8/0x120 [ 182.072676][ T7713] rest_init+0x21/0x330 [ 182.078744][ T7713] start_kernel+0x486/0x530 [ 182.085155][ T7713] secondary_startup_64_no_verify+0xb1/0xbb [ 182.092944][ T7713] INITIAL READ USE at: [ 182.097425][ T7713] lock_acquire+0x197/0x3f0 [ 182.104255][ T7713] _raw_read_lock+0x32/0x40 [ 182.111189][ T7713] do_wait+0x293/0xac0 [ 182.117587][ T7713] kernel_wait+0xa8/0x160 [ 182.124242][ T7713] call_usermodehelper_exec_work+0xb5/0x220 [ 182.132573][ T7713] process_one_work+0x863/0x1000 [ 182.139856][ T7713] worker_thread+0xaa8/0x12a0 [ 182.146861][ T7713] kthread+0x436/0x520 [ 182.153258][ T7713] ret_from_fork+0x1f/0x30 [ 182.160005][ T7713] } [ 182.162677][ T7713] ... key at: [] tasklist_lock+0x18/0x40 [ 182.170557][ T7713] ... acquired at: [ 182.174512][ T7713] _raw_read_lock+0x32/0x40 [ 182.179172][ T7713] send_sigurg+0xcb/0x390 [ 182.183656][ T7713] sk_send_sigurg+0x6b/0xc0 [ 182.188312][ T7713] queue_oob+0x620/0x800 [ 182.192719][ T7713] unix_stream_sendmsg+0xb5d/0xc80 [ 182.197984][ T7713] ____sys_sendmsg+0x5a2/0x8c0 [ 182.202902][ T7713] ___sys_sendmsg+0x1f0/0x260 [ 182.207819][ T7713] __sys_sendmmsg+0x27c/0x4a0 [ 182.212650][ T7713] __x64_sys_sendmmsg+0x9c/0xb0 [ 182.217669][ T7713] do_syscall_64+0x4c/0xa0 [ 182.222236][ T7713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.228301][ T7713] [ 182.230606][ T7713] -> (&f->f_owner.lock){...-}-{2:2} { [ 182.236083][ T7713] IN-SOFTIRQ-R at: [ 182.240133][ T7713] lock_acquire+0x197/0x3f0 [ 182.246445][ T7713] _raw_read_lock_irqsave+0xac/0xf0 [ 182.253453][ T7713] send_sigurg+0x25/0x390 [ 182.259591][ T7713] sk_send_sigurg+0x6b/0xc0 [ 182.265903][ T7713] tcp_urg+0x2bc/0xb10 [ 182.271779][ T7713] tcp_rcv_established+0xac5/0x1cb0 [ 182.278784][ T7713] tcp_v4_do_rcv+0x44b/0x9b0 [ 182.285181][ T7713] tcp_v4_rcv+0x268f/0x2cb0 [ 182.291493][ T7713] ip_protocol_deliver_rcu+0x3ad/0x770 [ 182.298765][ T7713] ip_local_deliver_finish+0x1d5/0x320 [ 182.306031][ T7713] NF_HOOK+0x2d6/0x360 [ 182.311905][ T7713] NF_HOOK+0x2d6/0x360 [ 182.317781][ T7713] __netif_receive_skb+0xcc/0x290 [ 182.324613][ T7713] process_backlog+0x364/0x780 [ 182.331184][ T7713] __napi_poll+0xc0/0x430 [ 182.337320][ T7713] net_rx_action+0x4a8/0x9c0 [ 182.343713][ T7713] handle_softirqs+0x328/0x820 [ 182.350281][ T7713] do_softirq+0x13b/0x200 [ 182.356419][ T7713] __local_bh_enable_ip+0x174/0x1b0 [ 182.363424][ T7713] sk_stream_wait_memory+0x6d8/0xe50 [ 182.370515][ T7713] tcp_sendmsg_locked+0x1c9f/0x3590 [ 182.377521][ T7713] tcp_sendmsg+0x2b/0x40 [ 182.383577][ T7713] __sys_sendto+0x423/0x580 [ 182.389886][ T7713] __x64_sys_sendto+0xda/0xf0 [ 182.396377][ T7713] do_syscall_64+0x4c/0xa0 [ 182.402597][ T7713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.410295][ T7713] INITIAL USE at: [ 182.414267][ T7713] lock_acquire+0x197/0x3f0 [ 182.420492][ T7713] _raw_write_lock_irq+0x9f/0xe0 [ 182.427157][ T7713] __f_setown+0x37/0x330 [ 182.433121][ T7713] fcntl_dirnotify+0x6a7/0x8b0 [ 182.439625][ T7713] do_fcntl+0x56b/0x12d0 [ 182.445586][ T7713] __se_sys_fcntl+0xcc/0x190 [ 182.451896][ T7713] do_syscall_64+0x4c/0xa0 [ 182.458038][ T7713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.465650][ T7713] INITIAL READ USE at: [ 182.470047][ T7713] lock_acquire+0x197/0x3f0 [ 182.476731][ T7713] _raw_read_lock_irqsave+0xac/0xf0 [ 182.484169][ T7713] send_sigurg+0x25/0x390 [ 182.490655][ T7713] sk_send_sigurg+0x6b/0xc0 [ 182.497308][ T7713] tcp_urg+0x2bc/0xb10 [ 182.503527][ T7713] tcp_rcv_established+0xac5/0x1cb0 [ 182.510876][ T7713] tcp_v4_do_rcv+0x44b/0x9b0 [ 182.517620][ T7713] __release_sock+0x1b9/0x420 [ 182.524447][ T7713] release_sock+0x5b/0x1b0 [ 182.531013][ T7713] sk_stream_wait_memory+0x6d8/0xe50 [ 182.538448][ T7713] tcp_sendmsg_locked+0x1c9f/0x3590 [ 182.545802][ T7713] tcp_sendmsg+0x2b/0x40 [ 182.552199][ T7713] __sys_sendto+0x423/0x580 [ 182.558878][ T7713] __x64_sys_sendto+0xda/0xf0 [ 182.565709][ T7713] do_syscall_64+0x4c/0xa0 [ 182.572276][ T7713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.580323][ T7713] } [ 182.582888][ T7713] ... key at: [] __alloc_file.__key+0x0/0x10 [ 182.591026][ T7713] ... acquired at: [ 182.594891][ T7713] _raw_read_lock_irqsave+0xac/0xf0 [ 182.600250][ T7713] send_sigio+0x2f/0x330 [ 182.604646][ T7713] kill_fasync+0x20a/0x490 [ 182.609216][ T7713] lease_break_callback+0x22/0x30 [ 182.614400][ T7713] __break_lease+0x4a3/0x12b0 [ 182.619228][ T7713] do_dentry_open+0x771/0xf80 [ 182.624064][ T7713] path_openat+0x2682/0x2f30 [ 182.628833][ T7713] do_filp_open+0x1b3/0x3e0 [ 182.633492][ T7713] do_sys_openat2+0x142/0x4a0 [ 182.638326][ T7713] __x64_sys_openat+0x135/0x160 [ 182.643328][ T7713] do_syscall_64+0x4c/0xa0 [ 182.647897][ T7713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.653943][ T7713] [ 182.656254][ T7713] -> (&new->fa_lock){....}-{2:2} { [ 182.661356][ T7713] INITIAL USE at: [ 182.665225][ T7713] lock_acquire+0x197/0x3f0 [ 182.671314][ T7713] _raw_write_lock_irq+0x9f/0xe0 [ 182.677795][ T7713] fasync_remove_entry+0xf0/0x1c0 [ 182.684452][ T7713] lease_modify+0x1a2/0x390 [ 182.690504][ T7713] locks_remove_file+0x492/0xdf0 [ 182.696987][ T7713] __fput+0x18d/0x930 [ 182.702516][ T7713] task_work_run+0x125/0x1a0 [ 182.708658][ T7713] exit_to_user_mode_loop+0x10f/0x130 [ 182.715579][ T7713] exit_to_user_mode_prepare+0xb1/0x140 [ 182.722671][ T7713] syscall_exit_to_user_mode+0x16/0x40 [ 182.729675][ T7713] do_syscall_64+0x58/0xa0 [ 182.735634][ T7713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.743071][ T7713] INITIAL READ USE at: [ 182.747379][ T7713] lock_acquire+0x197/0x3f0 [ 182.753869][ T7713] _raw_read_lock_irqsave+0xac/0xf0 [ 182.761049][ T7713] kill_fasync+0x16d/0x490 [ 182.767454][ T7713] lease_break_callback+0x22/0x30 [ 182.774457][ T7713] __break_lease+0x4a3/0x12b0 [ 182.781115][ T7713] do_dentry_open+0x771/0xf80 [ 182.787772][ T7713] path_openat+0x2682/0x2f30 [ 182.794339][ T7713] do_filp_open+0x1b3/0x3e0 [ 182.800819][ T7713] do_sys_openat2+0x142/0x4a0 [ 182.807476][ T7713] __x64_sys_openat+0x135/0x160 [ 182.814304][ T7713] do_syscall_64+0x4c/0xa0 [ 182.820695][ T7713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.828565][ T7713] } [ 182.831039][ T7713] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 182.839697][ T7713] ... acquired at: [ 182.843474][ T7713] _raw_read_lock_irqsave+0xac/0xf0 [ 182.848827][ T7713] kill_fasync+0x16d/0x490 [ 182.853420][ T7713] evdev_pass_values+0x54b/0xab0 [ 182.858514][ T7713] evdev_events+0x1c0/0x2f0 [ 182.863170][ T7713] input_pass_values+0x880/0x1220 [ 182.868354][ T7713] input_handle_event+0xb3f/0x1490 [ 182.873632][ T7713] input_inject_event+0x1b9/0x2c0 [ 182.878813][ T7713] evdev_write+0x326/0x470 [ 182.883385][ T7713] vfs_write+0x300/0xd00 [ 182.887802][ T7713] ksys_write+0x14d/0x250 [ 182.892285][ T7713] do_syscall_64+0x4c/0xa0 [ 182.896854][ T7713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.902899][ T7713] [ 182.905200][ T7713] [ 182.905200][ T7713] stack backtrace: [ 182.911071][ T7713] CPU: 0 PID: 7713 Comm: syz.3.901 Not tainted syzkaller #0 [ 182.918335][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.928381][ T7713] Call Trace: [ 182.931645][ T7713] [ 182.934560][ T7713] dump_stack_lvl+0x168/0x230 [ 182.939222][ T7713] ? load_image+0x3b0/0x3b0 [ 182.943709][ T7713] ? show_regs_print_info+0x20/0x20 [ 182.948888][ T7713] ? load_image+0x3b0/0x3b0 [ 182.953376][ T7713] ? print_shortest_lock_dependencies+0xf0/0x160 [ 182.959691][ T7713] __lock_acquire+0x65dd/0x7c60 [ 182.964527][ T7713] ? cpufreq_update_util+0x91/0x230 [ 182.969712][ T7713] ? verify_lock_unused+0x140/0x140 [ 182.974903][ T7713] ? verify_lock_unused+0x140/0x140 [ 182.980088][ T7713] ? do_raw_spin_unlock+0x11d/0x230 [ 182.985270][ T7713] lock_acquire+0x197/0x3f0 [ 182.989790][ T7713] ? kill_fasync+0x16d/0x490 [ 182.994372][ T7713] ? read_lock_is_recursive+0x10/0x10 [ 182.999733][ T7713] _raw_read_lock_irqsave+0xac/0xf0 [ 183.004919][ T7713] ? kill_fasync+0x16d/0x490 [ 183.009495][ T7713] ? _raw_read_lock+0x40/0x40 [ 183.014159][ T7713] ? do_raw_spin_lock+0x11d/0x280 [ 183.019172][ T7713] kill_fasync+0x16d/0x490 [ 183.023579][ T7713] evdev_pass_values+0x54b/0xab0 [ 183.028511][ T7713] ? evdev_pass_values+0x5c1/0xab0 [ 183.033606][ T7713] evdev_events+0x1c0/0x2f0 [ 183.038092][ T7713] ? evdev_event+0xd0/0xd0 [ 183.042499][ T7713] input_pass_values+0x880/0x1220 [ 183.047521][ T7713] ? read_lock_is_recursive+0x10/0x10 [ 183.052878][ T7713] input_handle_event+0xb3f/0x1490 [ 183.057975][ T7713] input_inject_event+0x1b9/0x2c0 [ 183.062985][ T7713] evdev_write+0x326/0x470 [ 183.067384][ T7713] ? evdev_read+0xb50/0xb50 [ 183.071868][ T7713] ? end_current_label_crit_section+0x14b/0x170 [ 183.078137][ T7713] ? common_file_perm+0x171/0x1c0 [ 183.083142][ T7713] ? fsnotify_perm+0x5d/0x560 [ 183.087800][ T7713] ? security_file_permission+0x75/0xa0 [ 183.093326][ T7713] ? evdev_read+0xb50/0xb50 [ 183.097813][ T7713] vfs_write+0x300/0xd00 [ 183.102036][ T7713] ? file_end_write+0x250/0x250 [ 183.106890][ T7713] ? __fget_files+0x40f/0x480 [ 183.111552][ T7713] ? __fdget_pos+0x1e2/0x370 [ 183.116123][ T7713] ? ksys_write+0x71/0x250 [ 183.120518][ T7713] ksys_write+0x14d/0x250 [ 183.124827][ T7713] ? __ia32_sys_read+0x80/0x80 [ 183.129569][ T7713] ? lockdep_hardirqs_on+0x94/0x140 [ 183.134749][ T7713] do_syscall_64+0x4c/0xa0 [ 183.139151][ T7713] ? clear_bhb_loop+0x30/0x80 [ 183.143810][ T7713] ? clear_bhb_loop+0x30/0x80 [ 183.148467][ T7713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.154353][ T7713] RIP: 0033:0x7fd8f8f51be9 [ 183.158750][ T7713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.178345][ T7713] RSP: 002b:00007fd8f71b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.186742][ T7713] RAX: ffffffffffffffda RBX: 00007fd8f9188fa0 RCX: 00007fd8f8f51be9 [ 183.194713][ T7713] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000006 [ 183.202669][ T7713] RBP: 00007fd8f8fd4e19 R08: 0000000000000000 R09: 0000000000000000 [ 183.210725][ T7713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.218690][ T7713] R13: 00007fd8f9189038 R14: 00007fd8f9188fa0 R15: 00007ffd12682198 [ 183.226668][ T7713] [ 183.241280][ T5048] Bluetooth: hci1: command 0x0406 tx timeout [ 183.246900][ T5048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.265722][ T4249] Bluetooth: hci3: command 0x0419 tx timeout [ 183.291844][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.292829][ T6278] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 183.292929][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.292999][ T6278] EXT4-fs (loop6): Remounting filesystem read-only [ 183.293266][ T6278] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /46/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 183.294279][ T6278] EXT4-fs (loop6): Remounting filesystem read-only [ 183.294440][ T6278] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 183.295441][ T7529] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 183.298394][ T6278] EXT4-fs (loop6): Remounting filesystem read-only [ 183.298655][ T6278] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /46/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 183.298793][ T6278] EXT4-fs (loop6): Remounting filesystem read-only [ 183.298963][ T6278] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 183.299124][ T6278] EXT4-fs (loop6): Remounting filesystem read-only [ 183.306942][ T7529] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 183.314559][ T7529] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 183.523947][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.597016][ T7717] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 183.614010][ T7717] BTRFS info (device loop8): force clearing of disk cache [ 183.638584][ T7717] BTRFS info (device loop8): use zlib compression, level 3 [ 183.648697][ T7717] BTRFS info (device loop8): enabling auto defrag [ 183.666148][ T7717] BTRFS info (device loop8): max_inline at 0 [ 183.689197][ T7717] BTRFS info (device loop8): enabling disk space caching [ 183.696767][ T7717] BTRFS info (device loop8): disk space caching is enabled [ 183.719241][ T7717] BTRFS info (device loop8): has skinny extents [ 183.732406][ T7717] BTRFS error (device loop8): open_ctree failed: -12 [ 183.888832][ T7529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.903077][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.916454][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.937715][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.953561][ T7529] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.970106][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.978738][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.991649][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.998929][ T7087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.049244][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.057332][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.099560][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.118679][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.125803][ T7087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.149300][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.158147][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.168722][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.179614][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.188476][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.213833][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.242398][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.254507][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.269420][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.295474][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.308843][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.319833][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.458228][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.469128][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.481048][ T7529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.660472][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.679380][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.706669][ T7080] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.736038][ T7529] device veth0_vlan entered promiscuous mode [ 184.749459][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.757752][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.772773][ T7529] device veth1_vlan entered promiscuous mode [ 184.781314][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.789948][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.797652][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.814913][ T7080] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.837076][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.847976][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.858110][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.871681][ T7529] device veth0_macvtap entered promiscuous mode [ 184.883640][ T7080] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.898071][ T7529] device veth1_macvtap entered promiscuous mode [ 184.915451][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.927027][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.937104][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.962595][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.978597][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.990124][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.000010][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.010517][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.021383][ T7529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.033981][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.046543][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.062636][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.086862][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.099146][ T7080] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.115068][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.126036][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.136145][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.147357][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.157951][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.175938][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.190567][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.203081][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.214135][ T7529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.239488][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.250691][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.263729][ T7529] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.274017][ T7529] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.288198][ T7529] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.301981][ T7529] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.405646][ T7529] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 185.453699][ T7078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.454487][ T7529] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 185.467289][ T7078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.490151][ T7084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.490745][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.497981][ T7084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.514758][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.182671][ T7080] device hsr_slave_0 left promiscuous mode [ 186.190040][ T7080] device hsr_slave_1 left promiscuous mode [ 186.210170][ T7080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.217838][ T7080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.227465][ T7080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.235360][ T7080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.244923][ T7080] device bridge_slave_1 left promiscuous mode [ 186.251162][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.261702][ T7080] device bridge_slave_0 left promiscuous mode [ 186.268088][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.280460][ T7080] device veth1_macvtap left promiscuous mode [ 186.286483][ T7080] device veth0_macvtap left promiscuous mode [ 186.294759][ T7080] device veth1_vlan left promiscuous mode [ 186.303580][ T7080] device veth0_vlan left promiscuous mode [ 186.454558][ T7080] team0 (unregistering): Port device team_slave_1 removed [ 186.469528][ T7080] team0 (unregistering): Port device team_slave_0 removed [ 186.481365][ T7080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.495289][ T7080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.565234][ T7080] bond0 (unregistering): Released all slaves