last executing test programs: 3m32.385797798s ago: executing program 3 (id=4): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = socket$packet(0x11, 0x3, 0x300) dup2(r1, r0) 3m32.211283332s ago: executing program 3 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000080)={0x8}) 3m31.874567281s ago: executing program 3 (id=7): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3fa, 0x400, 0x70bd2d, 0x25dfdbfe, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x20044800}, 0x20000000) 3m31.812261142s ago: executing program 3 (id=8): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0x1, 0x58c, &(0x7f0000001540)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000480)='./file0\x00') 3m31.07884702s ago: executing program 3 (id=12): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r0, &(0x7f00000008c0)={0x2, 0x4e21, @loopback}, 0x10) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) write$P9_RLOPEN(r0, &(0x7f0000000100)={0x18, 0xd, 0x2, {{0x40, 0x3, 0x1}, 0x200}}, 0x18) 3m29.218930475s ago: executing program 3 (id=17): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) process_vm_readv(0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000740)=""/146, 0x92}, {0x0}, {&(0x7f0000002200)=""/89, 0x59}, {&(0x7f0000000880)=""/117, 0x75}, {&(0x7f0000002080)=""/196, 0xc4}], 0x6, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='usbip-vudc.0\n', 0xd) write(r1, &(0x7f0000000540)='\n', 0x1) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@local, @multicast, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "4495904101bc080c"}}}}, 0x0) 3m29.104746198s ago: executing program 32 (id=17): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) process_vm_readv(0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000740)=""/146, 0x92}, {0x0}, {&(0x7f0000002200)=""/89, 0x59}, {&(0x7f0000000880)=""/117, 0x75}, {&(0x7f0000002080)=""/196, 0xc4}], 0x6, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='usbip-vudc.0\n', 0xd) write(r1, &(0x7f0000000540)='\n', 0x1) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@local, @multicast, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "4495904101bc080c"}}}}, 0x0) 2m9.427548457s ago: executing program 0 (id=236): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) readv(0xffffffffffffffff, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x2424}, {0x0}], 0x5) r1 = openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x13}) listen(0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r2, 0xc0189436, 0x1ffffffe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000005c0)=0xd) ioctl$sock_SIOCADDDLCI(r3, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x7) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 2m7.144685603s ago: executing program 0 (id=240): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x322020, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000025c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50) 2m4.40236987s ago: executing program 0 (id=246): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, &(0x7f0000000040), &(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) listen(0xffffffffffffffff, 0x5) syz_open_dev$vim2m(0x0, 0x0, 0x2) getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/46, 0x2e) socket$inet6(0xa, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42814}, 0x4000014) 2m1.9411856s ago: executing program 0 (id=251): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 2m1.466025921s ago: executing program 0 (id=253): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) vmsplice(r2, &(0x7f0000000540)=[{&(0x7f00000003c0)="16d0", 0x2}], 0x1, 0x2) 2m0.71084642s ago: executing program 0 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) timer_create(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={0x0, 0x100, 0x4, 0x0, 0x3, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={r4, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00009a9000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r5, 0x2000) 2m0.133769104s ago: executing program 33 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) timer_create(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={0x0, 0x100, 0x4, 0x0, 0x3, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={r4, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00009a9000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r5, 0x2000) 47.19332208s ago: executing program 6 (id=526): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000140)='0x17b3', 0x6) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n', 0x7) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000280), 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='ACMESynth\n', 0xa) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r3) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @mcast1={0xff, 0x5}, 0x0, 0x4, 0x0, 0x600, 0xfc8, 0x20c200a2}) 46.844461519s ago: executing program 6 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24044084, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 44.658880502s ago: executing program 6 (id=532): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x33, 0x8, 0x17, 0x7, 0x6, 0x5a, 0x6, 0xc9, 0x1}) 43.373236804s ago: executing program 6 (id=536): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f000000c2c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1401c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) open(0x0, 0x8000, 0x50) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 42.433473816s ago: executing program 6 (id=541): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0xd09ce0, 0x0, 0x86, 0x0, &(0x7f0000000440)) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000400)=@sg0, 0x0, &(0x7f0000000440)='./file0\x00') rename(&(0x7f0000000540)='./bus\x00', &(0x7f00000005c0)='./file0\x00') 41.098851119s ago: executing program 6 (id=548): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x10000008}) 40.969461792s ago: executing program 34 (id=548): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x10000008}) 8.653971399s ago: executing program 4 (id=658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0xf8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="527bcee565f4", @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x1, @private1, @mcast2, {[], {0x4e20, 0x4e23, 0x8}}}}}}}, 0x42) 8.20283639s ago: executing program 4 (id=663): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x100, @loopback, 0x6}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007600)=[{{&(0x7f0000001140)=@abs={0x0, 0x0, 0x4e20}, 0x18, 0x0, 0x0, &(0x7f0000006200)=ANY=[], 0x18, 0x4805}}], 0x1, 0x0) 7.218713984s ago: executing program 7 (id=666): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='session=0x0000000000000057,block=0x0000000000000200\x00overriderockperm,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c636865636b3d72656c6178656c2c636865636b3d7374726963744173657373696f6e3d30783030303830303030303030303030ea5a2c636865636b3d72656c617865642c696f050000007365743d63703836312c756e686964652c6e6f6f636861727365743d69736f383835392d392c6e6f6a6f910d65742c00000000000000"], 0x2, 0x699, &(0x7f0000000140)="$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") sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.178189635s ago: executing program 4 (id=667): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) 6.378016235s ago: executing program 7 (id=668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) timer_create(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0x100, 0x4, 0x0, 0x3, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={r6, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00009a9000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r7, 0x2000) syz_emit_ethernet(0x0, 0x0, 0x0) 6.228464448s ago: executing program 4 (id=669): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1, 0x6eb, &(0x7f0000001240)="$eJzs3c1vHGcdB/DvrNeON1Sp0yY0QkGYRCpIEYkTK4VwwSCEcqhQVQ49W4nTWNkkVeKitELgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmft3fX6LfFLAp9PNJ5n5nnmmd/+5pkZ7zqrCfB/6+q5NB+myNVzbz4ol1dXZturK7NH6up2krLcSJrdWYo7SfEomSvri74pffMNPl688vZnj1c/7y4166lqP7bVdiOMaLtcT5mu+5seueX4TnexXIeXl5Jcq+eDJnba10DDMmln6zkcus6gRjrLu9l8N+ct8Jzp3Z2K7n1zg6nkaJLJ+veA1FeHxsFFuKe+3ivs6ioHAAAAL6hP7x52BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDiqZ7/31pbbHRXJdMpes//n+itq8vPobkdt3y4r3EAAAAAAAAAwMH42pM8yYMcK8vjSTpF9Tf/M1XliXzRSb6U93M/C7mX83mQ+SxlKfdyMclUX0cTD+aXlu5dXNuyNHrLSyO3vHSQrxoAAAAAAAAA/uf8Mq3u3/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5USRj3Vk1najnmUqjmfW6LCf/TDJx2PHuQjFq5cODjwMAAACeyeRTbPPykzzJgxzrLXeK6j3/l6v3y5N5P3eylMUspZ2FXK/fQ5fv+hurK7Pt1ZXZ2+VULg/2+/1/7yqMibqHsWpp1J5PVS1auZHFas35XKuCuZ5Gd99nk1O9ePri6vNRGVPxvdoOI2vWaS139vvNPkXYE4MfRTS2aNlaDy5Zy8hMHVu55fFuBorqg5pkOBPDR2fDzpoDS1NVk/G1PV1MY+2TnxP7kPOj9bx8Pb/Z15zvRH8u1jLRSJWJS73RV54zW2ci+cZf//TOzfadWzdv3D93uC9pF8Y2WT88Jmb7MvHaC52J5i7bz1SZOLm2fDU/yk9yLtN5K/eymJ9mPktZSKeun6/Hc/lzautMzQ0svbVdJBP1cekes53ENJ0fVqX5nKm2PZbFFLmb61nIG9W/S7mYb+dyLudK3xE+uWnc1WurzvrG8FnfO9J/Gxn82W/WhfLq9tv1q9zcVq94s9G5V7rX/jKvx/vy2h31j9daHe87D2b6svRKLzvjIzt/mmtj8yt1odzHr7a5TxysqToT5QnUu0v0onu1m4lmdS/aOM7/0Cm3S/tOp3Nz/r1N+l8eWn69npfDauWr27XuGX0o9lY5Xl7JZH0lGRwdZd2ra1eZvrrO+lju1g3eccvtTlZ1RdE7U3+cu9UA2HimTtS/w23s6VJV99pQ3en6Gl7WneqrG/h9K3fTzvUDyB8AT+Mf76wVp3J0ovWv1qetT1q/bt1svTn5gyPfOXJ6IuN/H/9uc2bs9cbp4i/5JD9ff/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vfsffHhrvt1euDe60Ni8aqDQyvCa7XoeKhT1A31GtblVP6VgVx0ecmEyycCa6jlHBx5GaziMDYXOL5IDz0/vIYKj2/yuLDR3dLjnBtb8eWOHH20fz1iGxuEOzot9LDSyLz13Xt5kJIxl9AA4rCsScFAuLN1+78L9Dz781uLt+XcX3l24M3758pWZK5ffmL1wY7G9MNP9edhRAvth/aZ/2JEAAAAAAAAAAAAAOzXqqwJnXtruSyMbCo0kw9/x8D8LAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD1x9VyaD1Pk4sz5mXJ5dWW2XU698nrLZpJGIyl+lhSPkrl0p0z1dVfkj4/SGbGfjxevvP3Z49XP1/tqdtsnjXq+ua1rkyzXU6aTjNXzZzDQ37Vn7q/4T+81lAn7otPpzD1bfLA3/hsAAP//ShfsxA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, 0x0) 5.219338453s ago: executing program 7 (id=673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syncfs(r0) 4.812857723s ago: executing program 2 (id=677): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ecc, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x845, 0x8ef7, 0x8, 0x0, 0x9, 0xf5, 0x3, 0x39, 0x82, 0xfffffffe, 0xfffffb9a, 0xffffeffc, 0x400004, 0x0, 0x4, 0x24f5, 0x4, 0xf252, 0x0, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0xc46, 0x3ff, 0x3, 0x5, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x0, 0x1, 0x8, 0x100, 0x2, 0x0, 0x8, 0x0, 0x3, 0x199b, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x25, 0x400040, 0x9, 0x7, 0x5], [0x12, 0x1e, 0x762, 0x8000, 0x2, 0x3, 0x10000, 0x5, 0x27, 0xfffffffc, 0x9, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0xfffe, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x6, 0x981, 0x4, 0x101, 0x3fb, 0x0, 0xfffffffd, 0x0, 0x1000001, 0xa6, 0xfffffff9, 0x0, 0x957, 0x1, 0x0, 0x6, 0x7, 0x800, 0x10003, 0x6, 0x98, 0xfffffffc, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x4, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x3, 0x9, 0x9, 0xe8b, 0x5, 0x80000001, 0x893, 0x7, 0x1000, 0x2, 0xfffffffe, 0x5, 0xfffffffa, 0xe55, 0x10, 0x2, 0x400, 0x4004, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x4f, 0x2, 0x7, 0x4, 0x7, 0x6d7e, 0x81, 0x8, 0x8001, 0xbf23, 0x40000c, 0x8, 0x95a, 0xffffffff, 0x2, 0x0, 0x6, 0x100fffd, 0x1, 0x9, 0x8, 0x5, 0x9, 0x0, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x5, 0x800007f, 0x5, 0x3fa6, 0x3, 0x8e8, 0x9, 0x9, 0x4, 0xe47, 0x4, 0x0, 0xa, 0x200, 0x1000, 0x0, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x9, 0x8008a8, 0x2, 0x41, 0x7, 0x2, 0x4, 0x800, 0x10, 0x80, 0x0, 0x7fff, 0x10000005, 0xfffffff6, 0xffffffe8, 0x1, 0x10001, 0x7, 0x4edf, 0xfffffffd, 0x7, 0x9, 0x2, 0xe, 0xf, 0xa, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$netlink(0x10, 0x3, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) setgid(0xee00) r3 = syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) r5 = syz_open_procfs(r3, &(0x7f0000000400)='stat\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa10000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x86) fchdir(r7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0x5}, 0x18) 4.726743845s ago: executing program 4 (id=679): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) ptrace(0x10, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000040)={0x2}) 4.726612475s ago: executing program 7 (id=680): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 4.334792695s ago: executing program 7 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) timer_create(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0x100, 0x4, 0x0, 0x3, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={r6, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00009a9000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r7, 0x2000) syz_emit_ethernet(0x0, 0x0, 0x0) 2.153753718s ago: executing program 7 (id=685): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x0, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0], 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000401, 0x0, 0x0, 0x0) 2.123257158s ago: executing program 4 (id=686): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x568f70f1176ee2a9, 0x32, 0xffffffffffffffff, 0x852ac000) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0x2}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/243, 0xf3}, 0xf0}], 0x1, 0x22061, 0x0) 2.018157391s ago: executing program 2 (id=689): openat(0xffffffffffffff9c, &(0x7f0000020540)='mnt', 0x0, 0x0) 1.814600336s ago: executing program 2 (id=691): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$midi(0x6, 0x2b, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) pread64(0xffffffffffffffff, 0x0, 0x0, 0xf2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x1, 0x2, 0x180, 0x31b9, 0x6, 0xf1, 0x50, 0x81, 0x5, 0x0, 0x2a, 0x0, 0x2000000000006, 0x100, 0xbdb], 0xd000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x7, 0x1, 0x7fffffff}]}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x9}, 0x28) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1001000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0xeef, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0xb, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x0, 0x5, 0x5, 0xfc, 0x89}, {0x6000, 0x1, 0x0, 0x5, 0x3, 0x7, 0x1, 0x7, 0x9b, 0xa4, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x4, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x5000, 0x1, 0xe, 0x5, 0xe1, 0x15, 0x7, 0x3, 0x7, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x0, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x4c, 0xb0, 0x9}, {0x8000000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x402105, 0x1000000000000, 0x1500, 0x3000, [0x9, 0x7, 0x5, 0x81]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.749582987s ago: executing program 5 (id=693): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0x1, &(0x7f000000a000)="0f01cf00", 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x1000, &(0x7f000000a000/0x1000)=nil}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x4}, {0x12, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x3a, 0x0, 0x40001}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1000, 0x2}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfee00000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.418766676s ago: executing program 5 (id=694): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) 1.406381386s ago: executing program 1 (id=695): r0 = shmget$private(0x0, 0xc00000, 0x100, &(0x7f00003fd000/0xc00000)=nil) r1 = shmat(r0, &(0x7f00009d5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) 1.295756419s ago: executing program 5 (id=696): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8410, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000280)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x0) ftruncate(r0, 0xf50) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x1000, 0x6}) 1.281729518s ago: executing program 1 (id=697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x3f2e}, 0x30, 0x0) 979.133516ms ago: executing program 1 (id=698): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x186, 0x0, 0x430000c0}]}) 977.672726ms ago: executing program 2 (id=699): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x0, 0x80}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xc, 0x0, 0x1000000}}, @nested_vmresume={0x130, 0x18}], 0xe9}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000002000)=@vmx={0x0, 0x0, 0x2080}) 716.434222ms ago: executing program 1 (id=700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 670.431513ms ago: executing program 5 (id=701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="90", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080ae9f, &(0x7f0000000100)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff}}) 601.901585ms ago: executing program 2 (id=702): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f0000000240)=ANY=[], 0xf7, 0x1501, &(0x7f0000001980)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) 389.37279ms ago: executing program 1 (id=703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000001000)=nil}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x2, 0x40000000, 0x0, 0x0}) ioctl(r1, 0x4048aec9, &(0x7f0000000100)="01000000000000000000000000000000001000"/72) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000180)="00000000000000000000000000000000001000"/72) ioctl(r2, 0x4048aecb, &(0x7f0000000080)="070000000000000001000000ffffffff00"/69) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 180.819165ms ago: executing program 5 (id=704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@set_irq_handler={0xc8, 0x20, {0x80, 0x2}}, @uexit={0x0, 0x18, 0xaaaa}], 0x38}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0x0, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000100)=0x80) ioctl$KVM_RUN(r3, 0x0, 0x0) 164.630926ms ago: executing program 1 (id=705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000001000)=nil, 0x10000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0xffff0000, 0x10000, &(0x7f0000001000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0xfff0, 0x202}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d02, 0x0, 0x9}]}) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xf4240) ioctl$KVM_RUN(r2, 0xae80, 0x0) 122.113317ms ago: executing program 2 (id=706): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=707): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="90", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080ae9f, &(0x7f0000000000)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}}) kernel console output (not intermixed with test programs): :50:50:50:50:50 [ 77.945506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.955844][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.962104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.973368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.982372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.992262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.002035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.020602][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.031782][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.043171][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.054017][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.065132][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.076140][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.088203][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.109707][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.117598][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.138608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.157545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.188061][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.203099][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.216367][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.229346][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.246743][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.283450][ T1503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.292836][ T1503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.318038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.333329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.361215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.397152][ T4188] device veth0_macvtap entered promiscuous mode [ 78.440629][ T4277] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.470637][ T4188] device veth1_macvtap entered promiscuous mode [ 78.528424][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.557617][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.632652][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.651751][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.670493][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.694089][ T4286] loop2: detected capacity change from 0 to 8 [ 78.759418][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.772826][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.783510][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.796245][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.835090][ T4286] SQUASHFS error: Unable to read inode 0xa7 [ 78.842196][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.905824][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.937240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.952300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.993680][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.018749][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.026643][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.037421][ T4291] loop1: detected capacity change from 0 to 1024 [ 79.050749][ T4293] loop3: detected capacity change from 0 to 512 [ 79.078370][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.100259][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.111421][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.121751][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.130295][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 79.135318][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.147022][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 79.153911][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.166854][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.176965][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 79.183730][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 79.183914][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.197885][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 79.237105][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.246632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.287449][ T4293] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.297423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.303487][ T4293] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.360172][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.395416][ T4293] ======================================================= [ 79.395416][ T4293] WARNING: The mand mount option has been deprecated and [ 79.395416][ T4293] and is ignored by this kernel. Remove the mand [ 79.395416][ T4293] option from the mount to silence this warning. [ 79.395416][ T4293] ======================================================= [ 79.436441][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.445550][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.455807][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.474668][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.490175][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.499376][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.529883][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.657742][ T4198] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 4096 [ 79.710028][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.718408][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.741159][ T4198] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 4: comm syz-executor: Directory block failed checksum [ 79.755330][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 79.776015][ T4198] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 4096 [ 79.808645][ T4299] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 79.825991][ T4303] loop1: detected capacity change from 0 to 1024 [ 79.827052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.874601][ T4198] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 4: comm syz-executor: Directory block failed checksum [ 79.880073][ T1108] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 79.904697][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.907887][ T4198] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 4096 [ 79.928001][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.944943][ T1108] usb 3-1: config 0 has no interface number 0 [ 79.964689][ T4305] loop0: detected capacity change from 0 to 256 [ 79.971831][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.011926][ T4198] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 4: comm syz-executor: Directory block failed checksum [ 80.094252][ T4305] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 80.115572][ T4198] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 4096 [ 80.158984][ T1108] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 80.176190][ T4198] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 4: comm syz-executor: Directory block failed checksum [ 80.188630][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.225165][ T4198] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 4096 [ 80.236409][ T1108] usb 3-1: Product: syz [ 80.252631][ T1108] usb 3-1: Manufacturer: syz [ 80.257327][ T1108] usb 3-1: SerialNumber: syz [ 80.297131][ T1108] usb 3-1: config 0 descriptor?? [ 80.362220][ T1108] smsc95xx v2.0.0 [ 80.373700][ T9] hfsplus: b-tree write err: -5, ino 3 [ 80.484883][ T4310] loop0: detected capacity change from 0 to 2048 [ 80.573875][ T4312] Need at least one configuration in g1. [ 80.582744][ T4312] udc dummy_udc.0: failed to start g1: -22 [ 80.677100][ T4315] loop1: detected capacity change from 0 to 256 [ 80.684859][ T4313] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.761845][ T4310] attempt to access beyond end of device [ 80.761845][ T4310] loop0: rw=0, want=281474976710724, limit=2048 [ 80.790053][ T4315] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.801247][ T1108] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 80.813916][ T1108] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 80.834800][ T4315] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 80.850208][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 80.887828][ T4310] attempt to access beyond end of device [ 80.887828][ T4310] loop0: rw=0, want=281474976710724, limit=2048 [ 80.903762][ T4315] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc4d1c548, utbl_chksum : 0xe619d30d) [ 80.929654][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 80.941499][ T4310] attempt to access beyond end of device [ 80.941499][ T4310] loop0: rw=0, want=281474976710724, limit=2048 [ 80.954033][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 80.983649][ T4310] attempt to access beyond end of device [ 80.983649][ T4310] loop0: rw=0, want=281474976710724, limit=2048 [ 81.001426][ T4315] capability: warning: `syz.1.15' uses 32-bit capabilities (legacy support in use) [ 81.031891][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.053503][ T4310] attempt to access beyond end of device [ 81.053503][ T4310] loop0: rw=0, want=281474976710724, limit=2048 [ 81.072688][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.084391][ T4310] attempt to access beyond end of device [ 81.084391][ T4310] loop0: rw=0, want=281474976710724, limit=2048 [ 81.106026][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.125997][ T1108] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 81.149311][ T1108] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 81.175290][ T4310] attempt to access beyond end of device [ 81.175290][ T4310] loop0: rw=0, want=281474976710724, limit=2048 [ 81.207024][ T1108] usb 3-1: USB disconnect, device number 2 [ 81.255444][ T4317] exFAT-fs (loop1): error, found bogus dentry(16) beyond unused empty group(6) (start_clu : 6, cur_clu : 6) [ 81.280644][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.306660][ T4310] attempt to access beyond end of device [ 81.306660][ T4310] loop0: rw=0, want=281474976710724, limit=2048 [ 81.330846][ T4317] exFAT-fs (loop1): Filesystem has been set read-only [ 81.375142][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.428282][ T4198] syz-executor (4198) used greatest stack depth: 21008 bytes left [ 81.432434][ T4320] process 'syz.4.16' launched './file0' with NULL argv: empty string added [ 81.465983][ T4310] attempt to access beyond end of device [ 81.465983][ T4310] loop0: rw=0, want=281474976710724, limit=2048 [ 81.493441][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.538748][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.577170][ T4310] attempt to access beyond end of device [ 81.577170][ T4310] loop0: rw=0, want=281474976710724, limit=2048 [ 81.597009][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.607609][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.669158][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.679606][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.695571][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.715541][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.751232][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.778121][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.825226][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.856310][ T26] audit: type=1800 audit(1785271844.060:2): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 81.880760][ T4310] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 81.920218][ T4310] NILFS (loop0): error -5 truncating bmap (ino=16) [ 81.974726][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.119505][ T4310] syz.0.13 (4310) used greatest stack depth: 19056 bytes left [ 83.596833][ T4345] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 83.613213][ T4345] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 83.684177][ T4352] futex_wake_op: syz.0.22 tries to shift op by 144; fix this program [ 84.347927][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 84.561865][ T4364] loop2: detected capacity change from 0 to 4096 [ 84.642934][ T4373] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 84.654012][ T4373] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 84.799750][ T4364] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 84.893897][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.965023][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.026414][ T4337] device bridge_slave_0 entered promiscuous mode [ 85.090452][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.097844][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.107280][ T4337] device bridge_slave_1 entered promiscuous mode [ 85.160943][ T4364] EXT4-fs (loop2): Test dummy encryption mode enabled [ 85.241076][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.317549][ T4364] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 85.367923][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.450402][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 85.713819][ T4337] team0: Port device team_slave_0 added [ 85.794539][ T4337] team0: Port device team_slave_1 added [ 85.935664][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.988753][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.100800][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.162782][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.201645][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.327655][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.473907][ T154] device hsr_slave_0 left promiscuous mode [ 86.529009][ T154] device hsr_slave_1 left promiscuous mode [ 86.537728][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.564633][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.599058][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.756958][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.871527][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.940830][ T13] usb 1-1: Dual-Role OTG device on HNP port [ 86.980322][ T13] usb 1-1: New USB device found, idVendor=17b3, idProduct=0000, bcdDevice= 5.15 [ 87.102559][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.219890][ T7] cfg80211: failed to load regulatory.db [ 87.392464][ T154] device bridge_slave_1 left promiscuous mode [ 87.401332][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.569534][ T154] device bridge_slave_0 left promiscuous mode [ 87.575839][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.692838][ T4388] loop2: detected capacity change from 0 to 32768 [ 87.785251][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 88.130257][ T154] device veth1_macvtap left promiscuous mode [ 88.137087][ T154] device veth0_macvtap left promiscuous mode [ 88.155318][ T4388] JBD2: Ignoring recovery information on journal [ 88.207814][ T4418] loop0: detected capacity change from 0 to 1024 [ 88.235066][ T154] device veth1_vlan left promiscuous mode [ 88.241545][ T154] device veth0_vlan left promiscuous mode [ 88.367188][ T4418] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 88.482769][ T4388] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 88.493757][ T4418] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.968545][ T4384] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 89.064839][ T4200] ocfs2: Unmounting device (7,2) on (node local) [ 89.841342][ T4444] loop2: detected capacity change from 0 to 4096 [ 89.848479][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 89.911555][ T4444] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 89.911571][ T154] team0 (unregistering): Port device team_slave_1 removed [ 89.940981][ T4444] EXT4-fs (loop2): Test dummy encryption mode enabled [ 89.950334][ T154] team0 (unregistering): Port device team_slave_0 removed [ 89.984872][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.026117][ T4444] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 90.056668][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.449763][ T154] bond0 (unregistering): Released all slaves [ 90.541088][ T4453] futex_wake_op: syz.2.39 tries to shift op by 144; fix this program [ 90.724360][ T4337] device hsr_slave_0 entered promiscuous mode [ 90.752567][ T4337] device hsr_slave_1 entered promiscuous mode [ 90.905391][ T4455] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 90.915072][ T4455] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 91.852083][ T4337] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.977064][ T4337] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.005046][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 92.035144][ T4469] gfs2: not a GFS2 filesystem [ 92.228544][ T4337] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.435635][ T4337] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.849452][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.943570][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.976689][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.026448][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.165546][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.285442][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.462871][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.470189][ T4401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.021299][ T4490] loop0: detected capacity change from 0 to 4096 [ 94.038520][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.067835][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.167068][ T4490] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 94.194317][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.200718][ T4490] EXT4-fs (loop0): Test dummy encryption mode enabled [ 94.235412][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.242671][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.279063][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.339773][ T4490] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 94.374605][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.426549][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.496991][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.541105][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.570811][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.594242][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.651187][ T4337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.688432][ T4337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.728172][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.748395][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.792869][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.916790][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.005103][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.032190][ T4504] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 95.042799][ T4504] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 95.603777][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.626958][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.779348][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.971357][ T4524] loop1: detected capacity change from 0 to 128 [ 96.337444][ T4534] loop0: detected capacity change from 0 to 1024 [ 96.907324][ T4534] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 97.038999][ T4534] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.054458][ T155] handle_bad_sector: 7 callbacks suppressed [ 97.054479][ T155] attempt to access beyond end of device [ 97.054479][ T155] loop1: rw=1, want=177, limit=128 [ 97.108719][ T4539] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 97.251808][ T4539] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 97.303836][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.375732][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.460704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.477026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.516865][ T4337] device veth0_vlan entered promiscuous mode [ 97.533763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.555103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.619602][ T4337] device veth1_vlan entered promiscuous mode [ 97.717462][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.737569][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.807775][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.847899][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.031465][ T4337] device veth0_macvtap entered promiscuous mode [ 98.082367][ T4555] gfs2: not a GFS2 filesystem [ 98.218034][ T4337] device veth1_macvtap entered promiscuous mode [ 98.347429][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.431569][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.057380][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.229055][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.239539][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.250187][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.260101][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.270717][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.280772][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.291469][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.303158][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.318816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.396649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.447719][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.459826][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.481906][ T4572] loop4: detected capacity change from 0 to 4096 [ 99.503883][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.568350][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.608446][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.647031][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.693409][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.736267][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.758853][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.774532][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.800696][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.838123][ T4572] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 99.861456][ T4337] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.893722][ T4572] EXT4-fs (loop4): Test dummy encryption mode enabled [ 99.910908][ T4337] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.955370][ T4337] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.966375][ T4572] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 100.013270][ T4337] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.178676][ T4498] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 100.476406][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.498715][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.520880][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.573918][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.595349][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.622805][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.862750][ T26] audit: type=1800 audit(1785271863.070:3): pid=4591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.18" name="max_speed" dev="configfs" ino=34562 res=0 errno=0 [ 101.250221][ T4596] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 101.260009][ T4596] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 103.609103][ T4632] loop5: detected capacity change from 0 to 4096 [ 103.708268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 103.718295][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 103.728261][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 103.738260][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 103.758284][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 103.768264][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 103.778258][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 103.788252][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 103.798251][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 103.837797][ T4637] gfs2: not a GFS2 filesystem [ 103.918264][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 104.150295][ T4632] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 104.176474][ T4632] EXT4-fs (loop5): Test dummy encryption mode enabled [ 104.292148][ T4632] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 105.235633][ T4645] loop1: detected capacity change from 0 to 32768 [ 105.310666][ T4666] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 105.320808][ T4666] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 105.671882][ T4645] JBD2: Ignoring recovery information on journal [ 105.814035][ T4672] loop4: detected capacity change from 0 to 1024 [ 105.835885][ T4645] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 106.360307][ T4194] ocfs2: Unmounting device (7,1) on (node local) [ 106.524030][ T4672] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 106.668535][ T4672] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.689693][ T4686] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 107.704278][ T4694] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 109.216205][ T4709] gfs2: not a GFS2 filesystem [ 109.274270][ T4707] loop1: detected capacity change from 0 to 4096 [ 109.513392][ T4707] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 109.555859][ T4707] EXT4-fs (loop1): Test dummy encryption mode enabled [ 109.788857][ T4707] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 110.722834][ T4740] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 110.732990][ T4740] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 111.713243][ T4753] gfs2: not a GFS2 filesystem [ 112.294676][ T4749] loop1: detected capacity change from 0 to 32768 [ 112.397542][ T4774] loop0: detected capacity change from 0 to 1024 [ 112.441625][ T4749] JBD2: Ignoring recovery information on journal [ 112.647163][ T4749] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 112.723010][ T4774] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 112.896642][ T4774] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.235371][ T4782] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 113.413579][ T4194] ocfs2: Unmounting device (7,1) on (node local) [ 113.721962][ T4787] loop2: detected capacity change from 0 to 4096 [ 113.808601][ T4787] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 113.843321][ T4787] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.031333][ T4787] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 114.446414][ T4810] gfs2: not a GFS2 filesystem [ 114.827961][ T4818] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 114.837731][ T4818] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 115.720993][ T4827] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 115.758731][ T4827] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 117.170797][ T4840] loop2: detected capacity change from 0 to 1024 [ 117.316517][ T4840] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 117.429719][ T4840] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.142988][ T4831] loop0: detected capacity change from 0 to 32768 [ 118.289259][ T4831] JBD2: Ignoring recovery information on journal [ 118.609839][ T4831] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.710047][ T4856] loop2: detected capacity change from 0 to 4096 [ 118.766141][ T4856] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 118.807006][ T4856] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.887408][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 118.915312][ T4856] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 118.940620][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.424095][ T4886] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 120.435120][ T4886] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 120.729182][ T4895] loop0: detected capacity change from 0 to 128 [ 120.927756][ T4900] loop1: detected capacity change from 0 to 1024 [ 121.308702][ T26] audit: type=1800 audit(1785271883.330:4): pid=4903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.122" name="file1" dev="loop0" ino=1048597 res=0 errno=0 [ 121.484910][ T4900] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 121.843120][ T4900] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.196926][ T4918] loop5: detected capacity change from 0 to 4096 [ 123.245387][ T4918] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 123.279007][ T4918] EXT4-fs (loop5): Test dummy encryption mode enabled [ 123.363021][ T4918] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 123.710873][ T4909] loop0: detected capacity change from 0 to 32768 [ 124.336438][ T4909] JBD2: Ignoring recovery information on journal [ 124.625238][ T4909] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 124.855204][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 125.146818][ T4956] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 125.195668][ T4956] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 125.269321][ T4960] loop4: detected capacity change from 0 to 128 [ 125.986583][ T4967] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 125.997576][ T4967] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 127.192799][ T4977] loop0: detected capacity change from 0 to 1024 [ 127.225382][ T4981] xt_TPROXY: Can be used only with -p tcp or -p udp [ 127.244178][ T4980] loop4: detected capacity change from 0 to 4096 [ 127.310296][ T4980] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 127.317841][ T4980] EXT4-fs (loop4): Test dummy encryption mode enabled [ 127.336934][ T4977] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 127.389894][ T4977] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.464105][ T4980] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 128.089219][ T4845] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 130.448140][ T5023] gfs2: not a GFS2 filesystem [ 130.570497][ T4999] loop4: detected capacity change from 0 to 32768 [ 130.734142][ T4999] JBD2: Ignoring recovery information on journal [ 131.072306][ T5034] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 131.082545][ T5034] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 131.121128][ T4999] JBD2: recovery failed [ 131.160217][ T4999] (syz.4.142,4999,1):ocfs2_journal_load:1106 ERROR: Failed to load journal! [ 131.217804][ T4999] (syz.4.142,4999,0):ocfs2_check_volume:2435 ERROR: ocfs2 journal load failed! -5 [ 131.346482][ T4999] (syz.4.142,4999,0):ocfs2_check_volume:2491 ERROR: status = -5 [ 131.511050][ T4999] (syz.4.142,4999,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 132.032795][ T4999] (syz.4.142,4999,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 133.301496][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.308028][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.870127][ T5068] loop5: detected capacity change from 0 to 1024 [ 133.920955][ T5066] loop4: detected capacity change from 0 to 4096 [ 133.970920][ T5066] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 133.979355][ T5066] EXT4-fs (loop4): Test dummy encryption mode enabled [ 134.009334][ T5068] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 134.051932][ T5066] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 134.098497][ T5068] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.118442][ T5072] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 136.535238][ T5105] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 136.544985][ T5105] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 136.832684][ T5111] xt_TPROXY: Can be used only with -p tcp or -p udp [ 137.775473][ T5114] loop1: detected capacity change from 0 to 32768 [ 138.078978][ T5114] JBD2: Ignoring recovery information on journal [ 138.442735][ T5114] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 139.240415][ T4194] ocfs2: Unmounting device (7,1) on (node local) [ 140.510030][ T5170] gfs2: not a GFS2 filesystem [ 140.708026][ T5175] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 140.718629][ T5175] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 141.304816][ T5188] loop0: detected capacity change from 0 to 1024 [ 141.428043][ T5188] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 141.502991][ T5188] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.648668][ T5194] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 142.785495][ T5217] xt_TPROXY: Can be used only with -p tcp or -p udp [ 145.243861][ T5240] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 145.253676][ T5240] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 147.889916][ T5270] gfs2: not a GFS2 filesystem [ 151.183376][ T5292] xt_TPROXY: Can be used only with -p tcp or -p udp [ 153.516172][ T5312] loop4: detected capacity change from 0 to 4096 [ 153.551521][ T5312] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 153.566587][ T5312] EXT4-fs (loop4): Test dummy encryption mode enabled [ 153.599413][ T5312] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 159.303573][ T5355] loop4: detected capacity change from 0 to 4096 [ 159.361656][ T5355] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 159.380332][ T5355] EXT4-fs (loop4): Test dummy encryption mode enabled [ 159.424160][ T5355] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 159.636326][ T5371] gfs2: not a GFS2 filesystem [ 160.890069][ T5387] loop2: detected capacity change from 0 to 1024 [ 161.024729][ T5387] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 161.168631][ T5387] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.270733][ T5369] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 165.466354][ T5407] loop0: detected capacity change from 0 to 4096 [ 166.009278][ T5407] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 166.022456][ T5407] EXT4-fs (loop0): Test dummy encryption mode enabled [ 166.102340][ T5407] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 168.822129][ T5450] loop0: detected capacity change from 0 to 128 [ 168.916967][ T5450] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 168.948532][ T5450] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.097427][ T5455] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.388037][ T5460] sd 0:0:1:0: PR command failed: 2 [ 169.398164][ T5460] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 169.415760][ T5460] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 169.636079][ T5465] loop4: detected capacity change from 0 to 512 [ 169.812529][ T5465] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.254: iget: bad i_size value: 38620345925642 [ 169.867262][ T4403] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.952879][ T4403] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.959492][ T5465] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.254: couldn't read orphan inode 15 (err -117) [ 170.071072][ T5465] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.142212][ T5467] loop1: detected capacity change from 0 to 4096 [ 170.232726][ T5467] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 170.276214][ T4403] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.298735][ T5467] EXT4-fs (loop1): Test dummy encryption mode enabled [ 170.317148][ T5473] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.254: bg 0: block 5: invalid block bitmap [ 170.420813][ T5467] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 170.489133][ T5473] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 52 with error 28 [ 170.502446][ T5473] EXT4-fs (loop4): This should not happen!! Data will be lost [ 170.502446][ T5473] [ 170.513887][ T5473] EXT4-fs (loop4): Total free blocks count 0 [ 170.520076][ T5473] EXT4-fs (loop4): Free/Dirty block details [ 170.526758][ T5473] EXT4-fs (loop4): free_blocks=0 [ 170.532217][ T5473] EXT4-fs (loop4): dirty_blocks=52 [ 170.537377][ T5473] EXT4-fs (loop4): Block reservation details [ 170.544003][ T5473] EXT4-fs (loop4): i_reserved_data_blocks=52 [ 170.601333][ T4403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.524851][ T5515] loop1: detected capacity change from 0 to 4096 [ 174.608623][ T5515] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 174.707234][ T5515] EXT4-fs (loop1): Test dummy encryption mode enabled [ 174.765653][ T5491] chnl_net:caif_netlink_parms(): no params data found [ 174.800489][ T5515] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 175.272528][ T5491] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.283737][ T5538] loop1: detected capacity change from 0 to 1024 [ 175.292753][ T5491] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.337636][ T5491] device bridge_slave_0 entered promiscuous mode [ 175.434796][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.448392][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.482581][ T26] audit: type=1800 audit(1785271937.690:5): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.272" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 175.513005][ T5491] device bridge_slave_1 entered promiscuous mode [ 175.618622][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 176.253323][ T5491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.798813][ T5491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.268122][ T5491] team0: Port device team_slave_0 added [ 177.580328][ T5491] team0: Port device team_slave_1 added [ 177.737848][ T4403] device hsr_slave_0 left promiscuous mode [ 177.848940][ T4403] device hsr_slave_1 left promiscuous mode [ 177.858831][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 177.920161][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.977103][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.059338][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.119980][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.197647][ T4403] device bridge_slave_1 left promiscuous mode [ 178.253244][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.360045][ T4403] device bridge_slave_0 left promiscuous mode [ 178.366822][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.367679][ T5554] loop5: detected capacity change from 0 to 512 [ 178.469309][ T5554] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.508483][ T4403] device veth1_macvtap left promiscuous mode [ 178.514702][ T4403] device veth0_macvtap left promiscuous mode [ 178.627330][ T4403] device veth1_vlan left promiscuous mode [ 178.645078][ T4403] device veth0_vlan left promiscuous mode [ 179.590083][ T5572] loop1: detected capacity change from 0 to 4096 [ 179.661605][ T5576] xt_TPROXY: Can be used only with -p tcp or -p udp [ 179.707925][ T5572] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 179.793380][ T5572] EXT4-fs (loop1): Test dummy encryption mode enabled [ 180.005380][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 180.043732][ T5572] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 180.073415][ T5580] gfs2: not a GFS2 filesystem [ 180.127795][ T4403] team0 (unregistering): Port device team_slave_1 removed [ 180.158078][ T4403] team0 (unregistering): Port device team_slave_0 removed [ 180.194767][ T4403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.245193][ T4403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.358416][ T5584] loop1: detected capacity change from 0 to 1024 [ 180.458299][ T5584] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 180.492928][ T5584] hfsplus: xattr searching failed [ 180.512033][ T4403] bond0 (unregistering): Released all slaves [ 180.537733][ T5584] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 180.568344][ T5584] hfsplus: xattr searching failed [ 180.686425][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.750644][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.810910][ T5491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.829332][ T4404] hfsplus: b-tree write err: -5, ino 25 [ 180.835220][ T4404] hfsplus: b-tree write err: -5, ino 4 [ 180.868510][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.894697][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.948671][ T4404] hfsplus: b-tree write err: -5, ino 2 [ 180.958584][ T5491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.114751][ T4404] hfsplus: b-tree write err: -5, ino 20 [ 181.925062][ T5491] device hsr_slave_0 entered promiscuous mode [ 182.040013][ T5491] device hsr_slave_1 entered promiscuous mode [ 182.098583][ T5491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.101121][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 182.128528][ T5491] Cannot create hsr debugfs directory [ 182.143517][ T5599] loop4: detected capacity change from 0 to 512 [ 182.247801][ T5599] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 182.335261][ T5599] EXT4-fs (loop4): orphan cleanup on readonly fs [ 182.384050][ T5599] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 182.406811][ T5491] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.413848][ T5599] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 182.447989][ T5491] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.478948][ T5599] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 182.501616][ T5491] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.567472][ T5491] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.598153][ T5599] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.285: bg 0: block 40: padding at end of block bitmap is not set [ 182.729153][ T5599] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 183.045250][ T5599] EXT4-fs (loop4): 1 truncate cleaned up [ 183.079419][ T5599] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x00000000000000ad,errors=remount-ro,errors=continue,noinit_itable,. Quota mode: writeback. [ 183.451465][ T5491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.545557][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.562040][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.612505][ T5491] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.652628][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.714525][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.782187][ T4966] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.789453][ T4966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.869068][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.935796][ T5628] loop4: detected capacity change from 0 to 4096 [ 183.954155][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.969875][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.018811][ T1503] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.026033][ T1503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.067286][ T5628] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 184.080894][ T5628] EXT4-fs (loop4): Test dummy encryption mode enabled [ 184.095165][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.142917][ T5628] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 184.200719][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.219573][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.246872][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.310049][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.346130][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.384254][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.370032][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.389415][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.407457][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.416705][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.449319][ T5491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.606055][ T5652] loop5: detected capacity change from 0 to 256 [ 185.665205][ T5652] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.934925][ T5659] xt_TPROXY: Can be used only with -p tcp or -p udp [ 186.341389][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.400287][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.460413][ T5491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.509257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.524403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.825726][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.859472][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.921988][ T5491] device veth0_vlan entered promiscuous mode [ 187.964040][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.140276][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.154842][ T5491] device veth1_vlan entered promiscuous mode [ 188.289868][ T5491] device veth0_macvtap entered promiscuous mode [ 188.879286][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.904825][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.100176][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.154680][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.179821][ T5714] loop4: detected capacity change from 0 to 4096 [ 189.208938][ T5714] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 189.245384][ T5714] EXT4-fs (loop4): Test dummy encryption mode enabled [ 189.256270][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.483571][ T5491] device veth1_macvtap entered promiscuous mode [ 190.691252][ T5714] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 190.732699][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.790608][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.841784][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.925966][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.953802][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.984468][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.015624][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.039816][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.056776][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.078392][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.087709][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.152766][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.188245][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.218299][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.267132][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.308062][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.324371][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.340230][ T5728] loop1: detected capacity change from 0 to 512 [ 191.346664][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.382026][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.395631][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.405284][ T5728] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.306: iget: bad i_size value: 38620345925642 [ 191.409995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.429598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.447557][ T5491] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.457563][ T5491] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.467788][ T5491] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.477079][ T5491] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.602990][ T5728] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.306: couldn't read orphan inode 15 (err -117) [ 191.670007][ T5728] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.767903][ T5737] loop5: detected capacity change from 0 to 256 [ 192.777389][ T5738] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.306: bg 0: block 5: invalid block bitmap [ 192.805104][ T5738] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1012 with error 28 [ 192.820300][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.843876][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.896161][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.904903][ T5737] exfat: Deprecated parameter 'namecase' [ 192.911277][ T5738] EXT4-fs (loop1): This should not happen!! Data will be lost [ 192.911277][ T5738] [ 192.933027][ T5737] exfat: Deprecated parameter 'namecase' [ 193.005883][ T5737] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x93e0b04e, utbl_chksum : 0xe619d30d) [ 193.019093][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.026963][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.034640][ T5738] EXT4-fs (loop1): Total free blocks count 0 [ 193.092204][ T5738] EXT4-fs (loop1): Free/Dirty block details [ 193.102178][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.152875][ T5737] exFAT-fs (loop5): invalid start cluster (4278190088) [ 193.163167][ T5738] EXT4-fs (loop1): free_blocks=0 [ 193.193385][ T5738] EXT4-fs (loop1): dirty_blocks=1012 [ 193.223864][ T5738] EXT4-fs (loop1): Block reservation details [ 193.398393][ T5738] EXT4-fs (loop1): i_reserved_data_blocks=1012 [ 194.744783][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.755168][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.709290][ T5769] gfs2: not a GFS2 filesystem [ 195.794795][ T5768] loop5: detected capacity change from 0 to 256 [ 195.884008][ T5774] loop1: detected capacity change from 0 to 8 [ 196.055203][ T5768] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 196.638295][ T4278] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 196.866081][ T4238] Bluetooth: hci2: command 0x0406 tx timeout [ 196.872298][ T4238] Bluetooth: hci1: command 0x0406 tx timeout [ 196.878809][ T4238] Bluetooth: hci4: command 0x0406 tx timeout [ 197.015299][ T5793] netlink: 165 bytes leftover after parsing attributes in process `syz.5.318'. [ 197.699091][ T4278] usb 2-1: Using ep0 maxpacket: 16 [ 197.731179][ T5796] UHID_CREATE from different security context by process 164 (syz.5.319), this is not allowed. [ 197.858558][ T4278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 197.867650][ T4238] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 198.038636][ T4278] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 198.055432][ T4278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.088319][ T4278] usb 2-1: Product: syz [ 198.104573][ T4278] usb 2-1: Manufacturer: syz [ 198.119623][ T4278] usb 2-1: SerialNumber: syz [ 198.134010][ T4238] usb 3-1: Using ep0 maxpacket: 32 [ 198.149513][ T4278] usb 2-1: config 0 descriptor?? [ 198.200590][ T4278] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 198.209021][ T5813] loop4: detected capacity change from 0 to 1024 [ 198.229864][ T4278] usb 2-1: Detected FT232RL [ 198.411141][ T5813] hfsplus: b-tree write err: -5, ino 3 [ 198.418854][ T4278] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 198.438901][ T4278] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 198.468861][ T4278] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 198.493295][ T4278] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 198.538462][ T4238] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 198.557686][ T4278] usb 2-1: USB disconnect, device number 2 [ 198.563833][ T4238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.594353][ T4238] usb 3-1: Product: syz [ 198.779561][ T4238] usb 3-1: Manufacturer: syz [ 198.784257][ T4238] usb 3-1: SerialNumber: syz [ 198.789857][ T4278] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 198.803188][ T4278] ftdi_sio 2-1:0.0: device disconnected [ 198.925333][ T5827] gfs2: not a GFS2 filesystem [ 199.652677][ T4238] snd-usb-audio: probe of 3-1:1.1 failed with error -2 [ 199.737213][ T4238] usb 3-1: USB disconnect, device number 3 [ 200.340984][ T26] audit: type=1326 audit(1785271962.540:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.334" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e181ade99 code=0x7ffc0000 [ 200.434640][ T26] audit: type=1326 audit(1785271962.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.334" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f1e1816a2ec code=0x7ffc0000 [ 200.575259][ T5864] loop6: detected capacity change from 0 to 1024 [ 200.603283][ T26] audit: type=1326 audit(1785271962.590:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.334" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1e1816a34e code=0x7ffc0000 [ 200.677078][ T26] audit: type=1326 audit(1785271962.590:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.334" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e181adb2b code=0x7ffc0000 [ 200.707697][ T5865] loop5: detected capacity change from 0 to 4096 [ 200.828321][ T26] audit: type=1326 audit(1785271962.590:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.334" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f1e181ade99 code=0x7ffc0000 [ 200.829097][ T5864] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80000) [ 201.632649][ T5865] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 201.642487][ T26] audit: type=1326 audit(1785271962.590:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.334" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e181ade99 code=0x7ffc0000 [ 201.667960][ T5865] EXT4-fs (loop5): Test dummy encryption mode enabled [ 201.781300][ T5865] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 201.945107][ T26] audit: type=1326 audit(1785271962.610:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.334" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1e181ade99 code=0x7ffc0000 [ 202.115191][ T26] audit: type=1326 audit(1785271962.610:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.334" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1e181ade99 code=0x7ffc0000 [ 202.488710][ T1111] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 202.738677][ T1111] usb 6-1: Using ep0 maxpacket: 32 [ 202.879685][ T1111] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 203.128910][ T1111] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 203.191202][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.330693][ T1111] usb 6-1: Product: syz [ 203.401152][ T1111] usb 6-1: Manufacturer: syz [ 203.504121][ T1111] usb 6-1: SerialNumber: syz [ 203.779176][ T1111] usb 6-1: config 0 descriptor?? [ 203.815491][ T5909] capability: warning: `syz.6.348' uses deprecated v2 capabilities in a way that may be insecure [ 203.862517][ T5892] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 204.171919][ T1111] usb 6-1: USB disconnect, device number 2 [ 204.625410][ T5892] loop5: detected capacity change from 0 to 8 [ 204.914958][ T5892] unable to read id index table [ 205.225219][ T5925] loop2: detected capacity change from 0 to 4096 [ 205.301129][ T5925] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 205.317442][ T5925] EXT4-fs (loop2): Test dummy encryption mode enabled [ 205.403902][ T5929] device wlan0 entered promiscuous mode [ 205.421464][ T5925] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 205.708653][ T5940] loop5: detected capacity change from 0 to 512 [ 205.726495][ T5942] loop6: detected capacity change from 0 to 1024 [ 205.906812][ T5942] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 206.693753][ T5942] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.718915][ T5940] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.357: invalid indirect mapped block 256 (level 2) [ 207.088445][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 207.225619][ T5954] loop2: detected capacity change from 0 to 512 [ 207.300432][ T5954] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 207.568665][ T5940] EXT4-fs (loop5): 2 truncates cleaned up [ 207.879354][ T5940] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 207.914535][ T5954] EXT4-fs (loop2): orphan cleanup on readonly fs [ 207.921799][ T5954] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.358: bad orphan inode 15 [ 207.939301][ T5954] ext4_test_bit(bit=14, block=18) = 1 [ 207.944774][ T5954] is_bad_inode(inode)=0 [ 207.949606][ T5954] NEXT_ORPHAN(inode)=1023 [ 207.954099][ T5954] max_ino=32 [ 207.957349][ T5954] i_nlink=0 [ 207.966359][ T5954] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.358: bg 0: block 161: padding at end of block bitmap is not set [ 207.986299][ T5954] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 208.028320][ T5954] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 208.104762][ T5958] loop6: detected capacity change from 0 to 512 [ 208.119476][ T5963] cgroup: Name too long [ 209.591212][ T5958] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.623491][ T5958] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.752972][ T26] audit: type=1800 audit(1785271972.440:14): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.360" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 212.398498][ T4581] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 212.778577][ T4581] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.838444][ T4581] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 213.958840][ T4581] usb 2-1: string descriptor 0 read error: -71 [ 213.965197][ T4581] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.974766][ T4581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.079069][ T4581] usb 2-1: can't set config #1, error -71 [ 214.099740][ T6007] loop6: detected capacity change from 0 to 512 [ 214.108741][ T4581] usb 2-1: USB disconnect, device number 3 [ 214.271976][ T6007] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.374: invalid indirect mapped block 256 (level 2) [ 214.397825][ T6019] loop2: detected capacity change from 0 to 1024 [ 214.414602][ T6007] EXT4-fs (loop6): 2 truncates cleaned up [ 214.469272][ T6007] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 214.651837][ T6019] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 214.828723][ T6019] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.786562][ T6032] xt_TPROXY: Can be used only with -p tcp or -p udp [ 216.627521][ T6044] loop6: detected capacity change from 0 to 1024 [ 216.822451][ T6044] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 216.885607][ T6044] hfsplus: xattr searching failed [ 217.037297][ T6047] loop4: detected capacity change from 0 to 4096 [ 217.188337][ T6047] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 217.195875][ T6047] EXT4-fs (loop4): Test dummy encryption mode enabled [ 217.262180][ T6056] input: syz1 as /devices/virtual/input/input5 [ 217.485209][ T6047] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 217.634472][ T6065] loop5: detected capacity change from 0 to 512 [ 217.744517][ T6065] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 217.797812][ T6065] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 217.867327][ T6065] EXT4-fs error (device loop5): __ext4_iget:4919: inode #11: block 56337: comm syz.5.386: invalid block [ 217.904558][ T6065] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.386: couldn't read orphan inode 11 (err -117) [ 217.974367][ T6065] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.267410][ T6067] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 218.292080][ T6065] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.386: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 218.309886][ T6067] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 218.449997][ T6076] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.386: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 218.740184][ T6084] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.155223][ T26] audit: type=1326 audit(1785271981.360:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.6.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ec22ee99 code=0x7ffc0000 [ 219.430874][ T26] audit: type=1326 audit(1785271981.360:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.6.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ec22ee99 code=0x7ffc0000 [ 219.567021][ T26] audit: type=1326 audit(1785271981.360:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.6.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ec22ee99 code=0x7ffc0000 [ 219.778660][ T26] audit: type=1326 audit(1785271981.360:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.6.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ec22ee99 code=0x7ffc0000 [ 219.841616][ T26] audit: type=1326 audit(1785271981.390:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.6.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f39ec22ee99 code=0x7ffc0000 [ 220.008081][ T26] audit: type=1326 audit(1785271981.390:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.6.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ec22ee99 code=0x7ffc0000 [ 220.082456][ T26] audit: type=1326 audit(1785271981.390:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.6.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ec22ee99 code=0x7ffc0000 [ 220.113810][ T26] audit: type=1326 audit(1785271981.400:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.6.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ec22ee99 code=0x7ffc0000 [ 220.201907][ T26] audit: type=1326 audit(1785271981.400:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.6.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ec22ee99 code=0x7ffc0000 [ 220.256640][ T6119] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.359225][ T26] audit: type=1326 audit(1785271981.400:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.6.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f39ec22ee99 code=0x7ffc0000 [ 220.459564][ T6119] loop1: detected capacity change from 0 to 1024 [ 222.488385][ T6139] loop1: detected capacity change from 0 to 16 [ 222.559835][ T6139] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿ0177777777777777777777700000000000000000000000' [ 222.898855][ T2308] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 223.138880][ T2308] usb 2-1: Using ep0 maxpacket: 32 [ 223.259119][ T2308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.315737][ T2308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.348096][ T2308] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 223.367558][ T6155] loop4: detected capacity change from 0 to 1024 [ 223.388706][ T2308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.436087][ T2308] usb 2-1: config 0 descriptor?? [ 223.510065][ T2308] hub 2-1:0.0: USB hub found [ 223.544349][ T6155] EXT4-fs (loop4): Ignoring removed orlov option [ 223.590519][ T6155] EXT4-fs (loop4): Ignoring removed oldalloc option [ 223.628269][ T6155] EXT4-fs (loop4): Ignoring removed orlov option [ 223.736552][ T2308] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 223.778573][ T6155] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 223.794206][ T6155] System zones: 0-1, 3-12 [ 224.029595][ T6155] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,debug,max_dir_size_kb=0x0000000000000003,orlov,oldalloc,orlov,nogrpid,resuid=0x0000000000000000,grpjquota=,,errors=continue. Quota mode: none. [ 224.040051][ T2308] usbhid 2-1:0.0: can't add hid device: -71 [ 224.110204][ T6173] xt_TPROXY: Can be used only with -p tcp or -p udp [ 224.559045][ T2308] usbhid: probe of 2-1:0.0 failed with error -71 [ 224.574136][ T6179] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 224.650781][ T2308] usb 2-1: USB disconnect, device number 4 [ 225.214158][ T6199] loop1: detected capacity change from 0 to 8192 [ 225.234630][ T4581] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 225.619103][ T4581] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 225.667352][ T4581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.721910][ T4581] usb 5-1: config 0 descriptor?? [ 225.779606][ T4581] cp210x 5-1:0.0: cp210x converter detected [ 226.228899][ T4581] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 226.316780][ T4581] usb 5-1: cp210x converter now attached to ttyUSB0 [ 226.562724][ T4581] usb 5-1: USB disconnect, device number 2 [ 226.587228][ T4581] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 226.723375][ T4581] cp210x 5-1:0.0: device disconnected [ 226.959230][ T6229] loop1: detected capacity change from 0 to 1024 [ 227.034264][ T6233] xt_TPROXY: Can be used only with -p tcp or -p udp [ 227.447053][ T6229] EXT4-fs (loop1): Ignoring removed bh option [ 227.500674][ T6229] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,nolazytime,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 227.906438][ T6253] loop6: detected capacity change from 0 to 1024 [ 228.107176][ T26] kauditd_printk_skb: 175 callbacks suppressed [ 228.107194][ T26] audit: type=1800 audit(1785271990.310:200): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.430" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 228.241729][ T6263] loop4: detected capacity change from 0 to 1024 [ 228.274409][ T6259] loop2: detected capacity change from 0 to 2048 [ 228.437668][ T6259] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 228.463267][ T6263] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 228.495706][ T6263] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.095024][ T6274] loop1: detected capacity change from 0 to 2048 [ 229.285937][ T6282] loop2: detected capacity change from 0 to 1024 [ 229.461242][ T26] audit: type=1800 audit(1785271991.670:201): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.438" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 229.509180][ T6274] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 229.625775][ T6274] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.043806][ T6310] device bridge1 entered promiscuous mode [ 230.307136][ T6324] loop2: detected capacity change from 0 to 1024 [ 230.452765][ T26] audit: type=1800 audit(1785271992.660:202): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.449" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 231.351923][ T6337] loop4: detected capacity change from 0 to 1024 [ 231.572122][ T6349] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 231.581692][ T6349] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 231.659538][ T6337] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 231.807157][ T6337] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.789151][ T6389] loop6: detected capacity change from 0 to 512 [ 233.797313][ T6390] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 233.806315][ T6388] loop1: detected capacity change from 0 to 1024 [ 233.944907][ T26] audit: type=1800 audit(1785271996.150:203): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.462" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 233.985898][ T6389] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 234.600352][ T6389] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 234.628695][ T6389] EXT4-fs (loop6): 1 truncate cleaned up [ 234.634749][ T6389] EXT4-fs (loop6): mounted filesystem without journal. Opts: noquota,nogrpid,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,stripe=0x0000000000000001,. Quota mode: none. [ 234.705919][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 235.290410][ T6415] loop4: detected capacity change from 0 to 512 [ 235.346454][ T6420] loop6: detected capacity change from 0 to 256 [ 235.372385][ T6415] EXT4-fs (loop4): Ignoring removed oldalloc option [ 235.416824][ T6415] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 235.421713][ T6420] exfat: Deprecated parameter 'namecase' [ 235.454158][ T6420] exfat: Unknown parameter 'keep_last_dots' [ 235.688057][ T6430] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 235.699136][ T6430] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 236.023422][ T6437] loop5: detected capacity change from 0 to 256 [ 236.343972][ T26] audit: type=1800 audit(1785271998.550:204): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.477" name="UDC" dev="configfs" ino=40071 res=0 errno=0 [ 236.439799][ T6444] xt_hashlimit: size too large, truncated to 1048576 [ 236.916035][ T6467] loop6: detected capacity change from 0 to 128 [ 237.056005][ T6472] loop4: detected capacity change from 0 to 256 [ 237.106342][ T6467] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.136145][ T6472] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 237.180693][ T6467] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.807266][ T6491] loop6: detected capacity change from 0 to 1024 [ 237.916090][ T6491] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 238.072913][ T6491] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.141641][ T6501] input: syz0 as /devices/virtual/input/input6 [ 239.275067][ T6518] loop4: detected capacity change from 0 to 1024 [ 239.766076][ T6518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.497'. [ 240.242384][ T6542] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 240.263964][ T6547] loop6: detected capacity change from 0 to 512 [ 240.398513][ T6547] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 240.453578][ T6547] EXT4-fs (loop6): orphan cleanup on readonly fs [ 240.495645][ T6547] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.502: bad orphan inode 15 [ 240.511670][ T6547] ext4_test_bit(bit=14, block=18) = 1 [ 240.562261][ T6547] is_bad_inode(inode)=0 [ 240.566865][ T6547] NEXT_ORPHAN(inode)=1023 [ 240.586954][ T6553] loop4: detected capacity change from 0 to 512 [ 240.628493][ T6547] max_ino=32 [ 240.631775][ T6547] i_nlink=0 [ 240.666764][ T6547] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.502: bg 0: block 161: padding at end of block bitmap is not set [ 240.690975][ T6553] EXT4-fs (loop4): Ignoring removed orlov option [ 240.697433][ T6553] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 240.726611][ T6547] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 240.783620][ T6553] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.504: corrupted in-inode xattr [ 240.814968][ T6547] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 240.865140][ T6553] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.504: couldn't read orphan inode 15 (err -117) [ 240.960023][ T6553] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,norecovery,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 241.211246][ T6562] loop6: detected capacity change from 0 to 512 [ 241.353008][ T6562] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.443975][ T6562] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.337894][ T6580] loop6: detected capacity change from 0 to 256 [ 242.402245][ T6580] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.463346][ T6580] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 242.517506][ T6580] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 244.590974][ T6624] loop5: detected capacity change from 0 to 1024 [ 246.251036][ T6629] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 246.309890][ T6624] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.429313][ T6624] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 246.548721][ T6624] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 246.864552][ T6640] loop5: detected capacity change from 0 to 1024 [ 246.888536][ T23] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 247.806590][ T6650] loop6: detected capacity change from 0 to 16 [ 247.932182][ T6650] erofs: (device loop6): mounted with root inode @ nid 36. [ 247.968575][ T23] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 247.976869][ T23] usb 5-1: config 0 has no interface number 0 [ 247.988678][ T23] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 248.000541][ T23] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 248.011575][ T23] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 248.023005][ T23] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 248.188571][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 248.235112][ T23] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 248.285274][ T5491] erofs: (device loop6): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 248.290413][ T23] usb 5-1: Product: syz [ 248.324115][ T5491] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 248.342068][ T5491] erofs: (device loop6): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 248.374596][ T5491] erofs: (device loop6): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 248.466745][ T6660] device batadv_slave_1 entered promiscuous mode [ 248.492309][ T23] usb 5-1: Manufacturer: syz [ 248.497480][ T23] usb 5-1: SerialNumber: syz [ 248.516537][ T23] usb 5-1: config 0 descriptor?? [ 248.538133][ T6660] IPv6: sit1: Disabled Multicast RS [ 248.560878][ T23] xpad: probe of 5-1:0.237 failed with error -5 [ 249.273373][ T23] usb 5-1: USB disconnect, device number 3 [ 249.286376][ T6668] loop2: detected capacity change from 0 to 512 [ 249.327988][ T6659] device batadv_slave_1 left promiscuous mode [ 249.348366][ T6668] EXT4-fs (loop2): Ignoring removed oldalloc option [ 249.386576][ T6670] loop5: detected capacity change from 0 to 16 [ 249.406471][ T6668] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 249.456745][ T6670] erofs: (device loop5): mounted with root inode @ nid 36. [ 249.481995][ T4677] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.592419][ T4195] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 249.711360][ T6670] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 249.771403][ T26] audit: type=1800 audit(1785272011.980:205): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.545" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 249.854555][ T4677] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.003602][ T4677] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.116065][ T4677] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.964179][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 254.602998][ T6690] chnl_net:caif_netlink_parms(): no params data found [ 254.998510][ T6690] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.031079][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.048782][ T2308] Bluetooth: hci0: command 0x041b tx timeout [ 255.059462][ T6690] device bridge_slave_0 entered promiscuous mode [ 255.120899][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.175696][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.200642][ T6690] device bridge_slave_1 entered promiscuous mode [ 255.449237][ T6690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.461480][ T6690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.514900][ T6690] team0: Port device team_slave_0 added [ 256.190814][ T6690] team0: Port device team_slave_1 added [ 256.228843][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.235311][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.393802][ T6778] loop5: detected capacity change from 0 to 1024 [ 256.483492][ T6778] EXT4-fs (loop5): Ignoring removed orlov option [ 256.554998][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.627482][ T6778] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 256.679601][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.846970][ T6690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.915126][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.930626][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.023114][ T6690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.129077][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 257.348615][ T6690] device hsr_slave_0 entered promiscuous mode [ 257.411133][ T6805] loop2: detected capacity change from 0 to 256 [ 257.419275][ T6690] device hsr_slave_1 entered promiscuous mode [ 257.471768][ T6690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.502323][ T6690] Cannot create hsr debugfs directory [ 257.521992][ T6805] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 257.552482][ T6808] loop5: detected capacity change from 0 to 256 [ 257.563871][ T4677] device hsr_slave_0 left promiscuous mode [ 259.123112][ T4677] device hsr_slave_1 left promiscuous mode [ 259.142071][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.180609][ T4677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.208470][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 259.216145][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.240159][ T6808] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 259.245161][ T4677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.349803][ T4677] device bridge_slave_1 left promiscuous mode [ 259.356275][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.364985][ T6808] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008) [ 259.420556][ T6808] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805f5a2ee0 iblock : 8, err : -5) [ 259.429768][ T4677] device bridge_slave_0 left promiscuous mode [ 259.437240][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.479822][ T6808] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008) [ 259.540314][ T4677] device veth1_macvtap left promiscuous mode [ 259.546446][ T4677] device veth0_macvtap left promiscuous mode [ 259.650280][ T4677] device veth1_vlan left promiscuous mode [ 259.656211][ T4677] device veth0_vlan left promiscuous mode [ 260.323587][ T6836] xt_TPROXY: Can be used only with -p tcp or -p udp [ 261.806284][ T4677] team0 (unregistering): Port device team_slave_1 removed [ 261.824951][ T4677] team0 (unregistering): Port device team_slave_0 removed [ 261.843506][ T4677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.875976][ T4677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.005296][ T4677] bond0 (unregistering): Released all slaves [ 262.375763][ T6857] loop1: detected capacity change from 0 to 1024 [ 262.538796][ T26] audit: type=1800 audit(1785272024.750:206): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.589" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 262.872309][ T6865] loop5: detected capacity change from 0 to 256 [ 263.191917][ T6865] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 263.427080][ T6874] loop2: detected capacity change from 0 to 512 [ 263.435619][ T6690] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 263.449452][ T6873] loop4: detected capacity change from 0 to 128 [ 263.491571][ T6690] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 263.502525][ T6690] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 263.538256][ T6690] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 263.600546][ T6877] loop1: detected capacity change from 0 to 512 [ 263.622525][ T6874] EXT4-fs (loop2): Ignoring removed oldalloc option [ 263.668047][ T6873] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000005,,errors=continue. Quota mode: none. [ 263.721314][ T6877] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 263.741559][ T6874] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 263.757932][ T6882] loop5: detected capacity change from 0 to 1024 [ 263.764695][ T6873] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.889196][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.905965][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.959863][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.973245][ T6690] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.001109][ T6882] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 264.027821][ T6877] EXT4-fs (loop1): 1 truncate cleaned up [ 264.035288][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.046645][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.055474][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.062632][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.078402][ T6877] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,nogrpid,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,stripe=0x0000000000000001,. Quota mode: none. [ 264.089213][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.108496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.117724][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.127679][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.134853][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.144634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.158468][ T6882] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.181859][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.226763][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.266390][ T6873] fscrypt (loop4, inode 12): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 264.359499][ T6873] fscrypt (loop4, inode 12): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 264.391248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.773073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.106722][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.162617][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.252811][ T6690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.355034][ T6690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.431283][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.454069][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.498094][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.549829][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.589394][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.730743][ T6919] loop5: detected capacity change from 0 to 2048 [ 266.843081][ T6919] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 266.925625][ T6919] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.599: bg 0: block 240: padding at end of block bitmap is not set [ 267.078781][ T6919] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 267.134196][ T6919] EXT4-fs (loop5): This should not happen!! Data will be lost [ 267.134196][ T6919] [ 267.144843][ T6919] EXT4-fs (loop5): Total free blocks count 0 [ 267.152747][ T6934] xt_TPROXY: Can be used only with -p tcp or -p udp [ 267.348826][ T6919] EXT4-fs (loop5): Free/Dirty block details [ 267.416780][ T6919] EXT4-fs (loop5): free_blocks=0 [ 267.485342][ T6919] EXT4-fs (loop5): dirty_blocks=16 [ 267.568291][ T6919] EXT4-fs (loop5): Block reservation details [ 267.574475][ T6919] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 267.594377][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.681146][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.703932][ T6942] loop4: detected capacity change from 0 to 1024 [ 267.754221][ T6690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.844032][ T26] audit: type=1800 audit(1785272030.050:207): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.603" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 268.589407][ T6951] loop5: detected capacity change from 0 to 256 [ 268.808446][ T6951] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 269.629410][ T6960] loop4: detected capacity change from 0 to 1024 [ 269.739366][ T6960] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 269.832076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.878020][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.533755][ T6690] device veth0_vlan entered promiscuous mode [ 270.611209][ T6690] device veth1_vlan entered promiscuous mode [ 270.756096][ T6690] device veth0_macvtap entered promiscuous mode [ 270.824098][ T6690] device veth1_macvtap entered promiscuous mode [ 270.928543][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.981840][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.032754][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.087859][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.133626][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.209665][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.263536][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.315675][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.386340][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.537886][ T6960] loop4: detected capacity change from 0 to 512 [ 271.613552][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.633917][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.637014][ T6960] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 271.887381][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 271.947818][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.009452][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.039400][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.056040][ T6960] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 272.084526][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.105497][ T6994] loop5: detected capacity change from 0 to 2048 [ 272.112129][ T6960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 272.147418][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.160645][ T6960] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 272.198874][ T6960] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 272.205602][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.247093][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.262865][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.280119][ T6960] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 272.324860][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.358911][ T6994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.382471][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.443402][ T6998] loop2: detected capacity change from 0 to 1024 [ 272.458251][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.537884][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.570501][ T26] audit: type=1800 audit(1785272034.780:208): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.616" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 272.591269][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.591291][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.591309][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.591341][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.591355][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.618850][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.672645][ T6690] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.718347][ T6690] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.727137][ T6690] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.787091][ T6690] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.821407][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.839407][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.006519][ T7004] loop4: detected capacity change from 0 to 4096 [ 273.052166][ T7010] loop1: detected capacity change from 0 to 1024 [ 273.070730][ T7004] EXT4-fs (loop4): Test dummy encryption mode enabled [ 273.084834][ T7004] EXT4-fs (loop4): Ignoring removed orlov option [ 273.252119][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.262495][ T7004] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 273.279069][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.356306][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.636635][ T6903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.658980][ T6903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.705272][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.792140][ T7004] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 274.108276][ T7004] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 274.353785][ T7049] loop2: detected capacity change from 0 to 256 [ 274.731916][ T7055] loop5: detected capacity change from 0 to 512 [ 274.792636][ T7055] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 274.812027][ T7055] EXT4-fs (loop5): orphan cleanup on readonly fs [ 274.819573][ T7055] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.627: bad orphan inode 15 [ 274.832584][ T7055] ext4_test_bit(bit=14, block=18) = 1 [ 274.838024][ T7055] is_bad_inode(inode)=0 [ 274.842284][ T7055] NEXT_ORPHAN(inode)=1023 [ 274.846812][ T7055] max_ino=32 [ 274.850141][ T7055] i_nlink=0 [ 274.856001][ T7055] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.627: bg 0: block 161: padding at end of block bitmap is not set [ 274.881836][ T7055] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 274.892046][ T7055] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 275.022907][ T7049] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 275.061630][ T7049] FAT-fs (loop2): Filesystem has been set read-only [ 275.105661][ T7049] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 275.128437][ T7049] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 275.258456][ T26] audit: type=1800 audit(1785272037.450:209): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.625" name="file1" dev="loop2" ino=1048651 res=0 errno=0 [ 275.283956][ T7072] loop4: detected capacity change from 0 to 1024 [ 275.320189][ T7069] loop1: detected capacity change from 0 to 4096 [ 275.378781][ T7069] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 275.489524][ T26] audit: type=1800 audit(1785272037.690:210): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.631" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 275.513637][ T7069] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,lazytime,mblk_io_submit,resuid=0x0000000000000000,block_validity,abort,,errors=continue. Quota mode: writeback. [ 277.336957][ T7105] IPv6: sit1: Disabled Multicast RS [ 277.754377][ T7114] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 278.003482][ T7117] loop1: detected capacity change from 0 to 512 [ 278.014811][ T7117] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 278.035544][ T7117] EXT4-fs (loop1): orphan cleanup on readonly fs [ 278.042503][ T7117] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.640: bad orphan inode 15 [ 278.057283][ T7117] ext4_test_bit(bit=14, block=18) = 1 [ 278.063039][ T7117] is_bad_inode(inode)=0 [ 278.067247][ T7117] NEXT_ORPHAN(inode)=1023 [ 278.071886][ T7117] max_ino=32 [ 278.075113][ T7117] i_nlink=0 [ 278.085283][ T7117] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.640: bg 0: block 161: padding at end of block bitmap is not set [ 278.102814][ T7117] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 278.112339][ T7117] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 278.194464][ T7124] loop2: detected capacity change from 0 to 256 [ 278.354220][ T7124] FAT-fs (loop2): Directory bread(block 64) failed [ 278.388495][ T7124] FAT-fs (loop2): Directory bread(block 65) failed [ 278.395195][ T7124] FAT-fs (loop2): Directory bread(block 66) failed [ 278.495430][ T7124] FAT-fs (loop2): Directory bread(block 67) failed [ 278.516588][ T7124] FAT-fs (loop2): Directory bread(block 68) failed [ 278.540287][ T7124] FAT-fs (loop2): Directory bread(block 69) failed [ 278.574887][ T7124] FAT-fs (loop2): Directory bread(block 70) failed [ 278.613453][ T7124] FAT-fs (loop2): Directory bread(block 71) failed [ 278.634825][ T7124] FAT-fs (loop2): Directory bread(block 72) failed [ 278.648302][ T4581] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 278.658520][ T7124] FAT-fs (loop2): Directory bread(block 73) failed [ 279.128982][ T4581] usb 5-1: unable to get BOS descriptor or descriptor too short [ 279.211535][ T4581] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.244042][ T4581] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.331451][ T7156] loop2: detected capacity change from 0 to 256 [ 279.382714][ T7158] loop1: detected capacity change from 0 to 128 [ 279.458805][ T4581] usb 5-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 279.488254][ T4581] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.492345][ T7156] FAT-fs (loop2): Directory bread(block 64) failed [ 279.496512][ T4581] usb 5-1: Product: syz [ 279.496536][ T4581] usb 5-1: Manufacturer: syz [ 279.496553][ T4581] usb 5-1: SerialNumber: syz [ 279.517771][ T7156] FAT-fs (loop2): Directory bread(block 65) failed [ 279.548856][ T7156] FAT-fs (loop2): Directory bread(block 66) failed [ 279.590044][ T7156] FAT-fs (loop2): Directory bread(block 67) failed [ 279.597267][ T7156] FAT-fs (loop2): Directory bread(block 68) failed [ 279.646579][ T7156] FAT-fs (loop2): Directory bread(block 69) failed [ 279.679473][ T7156] FAT-fs (loop2): Directory bread(block 70) failed [ 279.714987][ T7156] FAT-fs (loop2): Directory bread(block 71) failed [ 279.751724][ T7156] FAT-fs (loop2): Directory bread(block 72) failed [ 279.775813][ T7156] FAT-fs (loop2): Directory bread(block 73) failed [ 280.020730][ T4581] usb 5-1: 0:1 : does not exist [ 280.081528][ T4581] usb 5-1: USB disconnect, device number 4 [ 280.210924][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 280.545714][ T7179] No such timeout policy "syz1" [ 282.194980][ T7195] loop1: detected capacity change from 0 to 4096 [ 282.303424][ T7195] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.485374][ T4581] kernel write not supported for file /snd/seq (pid: 4581 comm: kworker/1:7) [ 282.498816][ T7210] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 283.401027][ T7226] loop1: detected capacity change from 0 to 128 [ 283.606457][ T7226] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 283.641843][ T7228] loop7: detected capacity change from 0 to 164 [ 283.733789][ T7226] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 284.218171][ C0] sched: RT throttling activated [ 285.472519][ T7250] loop4: detected capacity change from 0 to 1024 [ 285.532818][ T7253] loop2: detected capacity change from 0 to 256 [ 285.632027][ T7253] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 285.647762][ T26] audit: type=1800 audit(1785272047.860:211): pid=7250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.669" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 285.715898][ T7261] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 286.003577][ T7274] input: syz1 as /devices/virtual/input/input7 [ 286.134357][ T7281] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 286.153247][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.545594][ T7304] loop7: detected capacity change from 0 to 512 [ 288.620370][ T7307] loop1: detected capacity change from 0 to 256 [ 288.627951][ T7304] EXT4-fs (loop7): Test dummy encryption mode enabled [ 288.739551][ T7304] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.685: inode has both inline data and extents flags [ 288.758007][ T7307] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 288.835089][ T7304] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.685: couldn't read orphan inode 15 (err -117) [ 288.905215][ T7304] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 289.358469][ T4176] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 289.460954][ T7339] loop5: detected capacity change from 0 to 128 [ 289.588798][ T7339] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.616228][ T7339] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 289.788563][ T4176] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.810851][ T7349] kvm [7348]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x430000c0 [ 289.818547][ T4176] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.938552][ T4176] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 289.947724][ T4176] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 289.985964][ T4176] usb 8-1: SerialNumber: syz [ 290.122865][ T7363] loop2: detected capacity change from 0 to 256 [ 290.264110][ T7363] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 290.291373][ T4176] usb 8-1: 0:2 : does not exist [ 290.358043][ T4176] usb 8-1: USB disconnect, device number 2 [ 290.645033][ T7375] user requested TSC rate below hardware speed [ 290.657384][ T7375] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 290.662073][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 290.726626][ T7375] ------------[ cut here ]------------ [ 290.750917][ T7375] WARNING: CPU: 1 PID: 7375 at arch/x86/kvm/../../../virt/kvm/kvm_main.c:3087 kvm_write_guest_offset_cached+0x507/0x5d0 [ 290.813014][ T7375] Modules linked in: [ 290.860126][ T7375] CPU: 1 PID: 7375 Comm: syz.1.705 Not tainted syzkaller #0 [ 290.920002][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 290.963110][ T7375] RIP: 0010:kvm_write_guest_offset_cached+0x507/0x5d0 [ 290.994854][ T7375] Code: 00 c6 05 1e 8e 6e 0c 01 48 c7 c7 00 ee 21 8a be 7a 03 00 00 48 c7 c2 a0 cd 21 8a e8 43 9e ac 08 e9 a1 fb ff ff e8 29 58 70 00 <0f> 0b b8 ea ff ff ff eb b0 e8 1b 58 70 00 48 8b 7c 24 08 48 89 ee [ 291.044885][ T7375] RSP: 0018:ffffc90003437108 EFLAGS: 00010287 [ 291.052161][ T7375] RAX: ffffffff8108a957 RBX: 0000000000000004 RCX: 0000000000080000 [ 291.076745][ T7375] RDX: ffffc90003c93000 RSI: 0000000000005a1c RDI: 0000000000005a1d [ 291.086041][ T7375] RBP: 0000000000000000 R08: ffffc90003443f4b R09: 1ffff920006887e9 [ 291.113464][ T7375] R10: dffffc0000000000 R11: fffff520006887ea R12: 0000000000000000 [ 291.125494][ T7375] R13: 0000000000000000 R14: ffff88805f879cd8 R15: dffffc0000000000 [ 291.138357][ T7375] FS: 00007fb591fa16c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 291.151265][ T7375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.162528][ T7375] CR2: 00007f2e5a8ba158 CR3: 0000000067a13000 CR4: 00000000003526f0 [ 291.173758][ T7375] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.186484][ T7375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.197674][ T7375] Call Trace: [ 291.205514][ T7375] [ 291.212553][ T7375] kvm_arch_async_page_not_present+0x354/0x5e0 [ 291.223220][ T7375] ? lockdep_softirqs_off+0x430/0x430 [ 291.233271][ T7375] ? slab_post_alloc_hook+0x68/0x380 [ 291.241309][ T7375] ? kvm_can_do_async_pf+0x350/0x350 [ 291.247154][ T7375] ? rcu_is_watching+0x11/0xa0 [ 291.252631][ T7375] ? kvm_setup_async_pf+0xa6/0x480 [ 291.257928][ T7375] ? kvm_setup_async_pf+0x16e/0x480 [ 291.264143][ T7375] kvm_setup_async_pf+0x39c/0x480 [ 291.269730][ T7375] kvm_faultin_pfn+0x730/0xb80 [ 291.274706][ T7375] ? __mmu_unsync_walk+0x4c0/0x4c0 [ 291.280789][ T7375] ? walk_shadow_page_lockless_begin+0x1ed/0x2d0 [ 291.287441][ T7375] ? walk_shadow_page_lockless_end+0x150/0x230 [ 291.294401][ T7375] ? lockdep_hardirqs_on+0x94/0x140 [ 291.305564][ T7375] ? kvm_mmu_topup_memory_cache+0x1a0/0x200 [ 291.321985][ T7375] direct_page_fault+0x1252/0x1750 [ 291.327640][ T7375] ? kvm_tdp_page_fault+0xa0/0xa0 [ 291.333485][ T7375] ? kvm_tdp_page_fault+0x40/0xa0 [ 291.341866][ T7375] kvm_mmu_page_fault+0x126/0x5b0 [ 291.347112][ T7375] ? handle_desc+0x70/0x70 [ 291.353995][ T7375] vmx_handle_exit+0xc44/0x18a0 [ 291.360058][ T7375] ? vtime_guest_exit+0x1fa/0x2f0 [ 291.365292][ T7375] vcpu_enter_guest+0x60cd/0x6f70 [ 291.371536][ T7375] ? local_bh_enable+0x20/0x20 [ 291.376486][ T7375] ? is_bpf_text_address+0x254/0x270 [ 291.382886][ T7375] ? __kernel_text_address+0x9a/0x100 [ 291.388944][ T7375] ? mark_lock+0x94/0x320 [ 291.393454][ T7375] ? __lock_acquire+0x13dc/0x7b50 [ 291.399130][ T7375] ? stack_trace_snprint+0xe0/0xe0 [ 291.405244][ T7375] ? slab_free_freelist_hook+0xec/0x170 [ 291.411529][ T7375] ? do_syscall_64+0x4c/0xa0 [ 291.416316][ T7375] ? mark_lock+0x94/0x320 [ 291.422197][ T7375] ? __lock_acquire+0x1305/0x7b50 [ 291.434870][ T7375] ? verify_lock_unused+0x140/0x140 [ 291.442076][ T7375] ? verify_lock_unused+0x140/0x140 [ 291.447635][ T7375] ? vmx_vcpu_load_vmcs+0x4ac/0x790 [ 291.455173][ T7375] ? mark_lock+0x94/0x320 [ 291.461459][ T7375] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 291.467857][ T7375] ? __local_bh_enable_ip+0x136/0x1c0 [ 291.473984][ T7375] ? lockdep_hardirqs_on+0x94/0x140 [ 291.480198][ T7375] ? read_lock_is_recursive+0x10/0x10 [ 291.485867][ T7375] ? __local_bh_enable_ip+0x136/0x1c0 [ 291.491876][ T7375] ? _local_bh_enable+0xa0/0xa0 [ 291.497089][ T7375] kvm_arch_vcpu_ioctl_run+0x804/0x1e40 [ 291.503696][ T7375] kvm_vcpu_ioctl+0x8f2/0xc10 [ 291.509158][ T7375] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 291.515116][ T7375] ? bpf_lsm_file_ioctl+0x5/0x10 [ 291.521452][ T7375] ? security_file_ioctl+0x7c/0xa0 [ 291.526889][ T7375] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 291.539061][ T7375] __se_sys_ioctl+0xfa/0x170 [ 291.545980][ T7375] do_syscall_64+0x4c/0xa0 [ 291.551138][ T7375] ? clear_bhb_loop+0x30/0x80 [ 291.555987][ T7375] ? clear_bhb_loop+0x30/0x80 [ 291.563322][ T7375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.570714][ T7375] RIP: 0033:0x7fb593d48e99 [ 291.575602][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.596596][ T7375] RSP: 002b:00007fb591fa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.610206][ T7375] RAX: ffffffffffffffda RBX: 00007fb593fd0fa0 RCX: 00007fb593d48e99 [ 291.618786][ T7375] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 291.627299][ T7375] RBP: 00007fb593ddeeaf R08: 0000000000000000 R09: 0000000000000000 [ 291.636470][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.645170][ T7375] R13: 00007fb593fd1038 R14: 00007fb593fd0fa0 R15: 00007ffc28911bf8 [ 291.655950][ T7375] [ 291.659513][ T7375] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 291.666920][ T7375] CPU: 1 PID: 7375 Comm: syz.1.705 Not tainted syzkaller #0 [ 291.674342][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 291.684436][ T7375] Call Trace: [ 291.687738][ T7375] [ 291.690673][ T7375] dump_stack_lvl+0x188/0x250 [ 291.695375][ T7375] ? show_regs_print_info+0x20/0x20 [ 291.700786][ T7375] ? load_image+0x410/0x410 [ 291.705385][ T7375] panic+0x2f8/0x850 [ 291.709448][ T7375] ? bpf_jit_dump+0xd0/0xd0 [ 291.714029][ T7375] ? kvm_write_guest_offset_cached+0x507/0x5d0 [ 291.720249][ T7375] __warn+0x248/0x2b0 [ 291.724294][ T7375] ? kvm_write_guest_offset_cached+0x507/0x5d0 [ 291.730513][ T7375] report_bug+0x1b9/0x2e0 [ 291.735007][ T7375] handle_bug+0x3a/0x70 [ 291.739217][ T7375] exc_invalid_op+0x16/0x40 [ 291.744004][ T7375] asm_exc_invalid_op+0x16/0x20 [ 291.749058][ T7375] RIP: 0010:kvm_write_guest_offset_cached+0x507/0x5d0 [ 291.755901][ T7375] Code: 00 c6 05 1e 8e 6e 0c 01 48 c7 c7 00 ee 21 8a be 7a 03 00 00 48 c7 c2 a0 cd 21 8a e8 43 9e ac 08 e9 a1 fb ff ff e8 29 58 70 00 <0f> 0b b8 ea ff ff ff eb b0 e8 1b 58 70 00 48 8b 7c 24 08 48 89 ee [ 291.776026][ T7375] RSP: 0018:ffffc90003437108 EFLAGS: 00010287 [ 291.782154][ T7375] RAX: ffffffff8108a957 RBX: 0000000000000004 RCX: 0000000000080000 [ 291.790254][ T7375] RDX: ffffc90003c93000 RSI: 0000000000005a1c RDI: 0000000000005a1d [ 291.798348][ T7375] RBP: 0000000000000000 R08: ffffc90003443f4b R09: 1ffff920006887e9 [ 291.806440][ T7375] R10: dffffc0000000000 R11: fffff520006887ea R12: 0000000000000000 [ 291.814569][ T7375] R13: 0000000000000000 R14: ffff88805f879cd8 R15: dffffc0000000000 [ 291.822674][ T7375] ? kvm_write_guest_offset_cached+0x507/0x5d0 [ 291.828903][ T7375] ? kvm_write_guest_offset_cached+0x507/0x5d0 [ 291.835105][ T7375] kvm_arch_async_page_not_present+0x354/0x5e0 [ 291.841407][ T7375] ? lockdep_softirqs_off+0x430/0x430 [ 291.846823][ T7375] ? slab_post_alloc_hook+0x68/0x380 [ 291.852261][ T7375] ? kvm_can_do_async_pf+0x350/0x350 [ 291.857729][ T7375] ? rcu_is_watching+0x11/0xa0 [ 291.862651][ T7375] ? kvm_setup_async_pf+0xa6/0x480 [ 291.867994][ T7375] ? kvm_setup_async_pf+0x16e/0x480 [ 291.873460][ T7375] kvm_setup_async_pf+0x39c/0x480 [ 291.879262][ T7375] kvm_faultin_pfn+0x730/0xb80 [ 291.884098][ T7375] ? __mmu_unsync_walk+0x4c0/0x4c0 [ 291.889281][ T7375] ? walk_shadow_page_lockless_begin+0x1ed/0x2d0 [ 291.895639][ T7375] ? walk_shadow_page_lockless_end+0x150/0x230 [ 291.901832][ T7375] ? lockdep_hardirqs_on+0x94/0x140 [ 291.907059][ T7375] ? kvm_mmu_topup_memory_cache+0x1a0/0x200 [ 291.912972][ T7375] direct_page_fault+0x1252/0x1750 [ 291.918366][ T7375] ? kvm_tdp_page_fault+0xa0/0xa0 [ 291.923458][ T7375] ? kvm_tdp_page_fault+0x40/0xa0 [ 291.928546][ T7375] kvm_mmu_page_fault+0x126/0x5b0 [ 291.933629][ T7375] ? handle_desc+0x70/0x70 [ 291.938082][ T7375] vmx_handle_exit+0xc44/0x18a0 [ 291.942971][ T7375] ? vtime_guest_exit+0x1fa/0x2f0 [ 291.948303][ T7375] vcpu_enter_guest+0x60cd/0x6f70 [ 291.953389][ T7375] ? local_bh_enable+0x20/0x20 [ 291.958206][ T7375] ? is_bpf_text_address+0x254/0x270 [ 291.963548][ T7375] ? __kernel_text_address+0x9a/0x100 [ 291.969116][ T7375] ? mark_lock+0x94/0x320 [ 291.973600][ T7375] ? __lock_acquire+0x13dc/0x7b50 [ 291.978898][ T7375] ? stack_trace_snprint+0xe0/0xe0 [ 291.984045][ T7375] ? slab_free_freelist_hook+0xec/0x170 [ 291.989621][ T7375] ? do_syscall_64+0x4c/0xa0 [ 291.994333][ T7375] ? mark_lock+0x94/0x320 [ 291.998790][ T7375] ? __lock_acquire+0x1305/0x7b50 [ 292.003865][ T7375] ? verify_lock_unused+0x140/0x140 [ 292.009322][ T7375] ? verify_lock_unused+0x140/0x140 [ 292.014548][ T7375] ? vmx_vcpu_load_vmcs+0x4ac/0x790 [ 292.019785][ T7375] ? mark_lock+0x94/0x320 [ 292.024169][ T7375] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 292.030207][ T7375] ? __local_bh_enable_ip+0x136/0x1c0 [ 292.035708][ T7375] ? lockdep_hardirqs_on+0x94/0x140 [ 292.040939][ T7375] ? read_lock_is_recursive+0x10/0x10 [ 292.046324][ T7375] ? __local_bh_enable_ip+0x136/0x1c0 [ 292.051796][ T7375] ? _local_bh_enable+0xa0/0xa0 [ 292.057118][ T7375] kvm_arch_vcpu_ioctl_run+0x804/0x1e40 [ 292.063422][ T7375] kvm_vcpu_ioctl+0x8f2/0xc10 [ 292.068431][ T7375] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 292.074233][ T7375] ? bpf_lsm_file_ioctl+0x5/0x10 [ 292.079220][ T7375] ? security_file_ioctl+0x7c/0xa0 [ 292.084389][ T7375] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 292.090057][ T7375] __se_sys_ioctl+0xfa/0x170 [ 292.094781][ T7375] do_syscall_64+0x4c/0xa0 [ 292.099214][ T7375] ? clear_bhb_loop+0x30/0x80 [ 292.104014][ T7375] ? clear_bhb_loop+0x30/0x80 [ 292.108822][ T7375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.114722][ T7375] RIP: 0033:0x7fb593d48e99 [ 292.119151][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.139366][ T7375] RSP: 002b:00007fb591fa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.147913][ T7375] RAX: ffffffffffffffda RBX: 00007fb593fd0fa0 RCX: 00007fb593d48e99 [ 292.155941][ T7375] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 292.163940][ T7375] RBP: 00007fb593ddeeaf R08: 0000000000000000 R09: 0000000000000000 [ 292.171976][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.180012][ T7375] R13: 00007fb593fd1038 R14: 00007fb593fd0fa0 R15: 00007ffc28911bf8 [ 292.188197][ T7375] [ 292.191649][ T7375] Kernel Offset: disabled [ 292.196328][ T7375] Rebooting in 86400 seconds..