last executing test programs: 6m25.816287831s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, &(0x7f0000000000)=[@cr4={0x1, 0x20000}], 0x1) 6m25.446983289s ago: executing program 3 (id=6): socket$inet_udp(0x2, 0x2, 0x0) syz_read_part_table(0x5e8, &(0x7f0000000000)="$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") r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 6m7.854214751s ago: executing program 32 (id=6): socket$inet_udp(0x2, 0x2, 0x0) syz_read_part_table(0x5e8, &(0x7f0000000000)="$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") r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 4m50.294575952s ago: executing program 4 (id=185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x18}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x1, 0x8, 0xbccba358a7e175dd, 0xfffffffc, 0xffff7fff, 0x1, 0xffff8d17}, {0x1, 0xe, 0x0, 0xcc, 0x0, 0xa, 0x5}]}) 4m49.395369792s ago: executing program 4 (id=191): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() writev(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x47) sendfile(r2, r3, 0x0, 0xb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x25dfdbfe, {{@in6=@empty, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5b, 0xb400, 0x2, 0xdde5, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x27, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x840}, 0x0) 4m48.260778078s ago: executing program 4 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a1c000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000b17000/0x2000)=nil) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x4000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa04009078010000004700000000000000001100000000000000000000440c0001ac1414bb4e210000443c0001e0000001000000000000000000000000ac1414000bdf000000000000000000000000000000000000ac1e000100000000ac14140000000000886430"], 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x5f, 0x841df97cf26f7de9]}}, &(0x7f0000000100)=""/189, 0x2d, 0xbd, 0x1}, 0x28) 4m47.31908899s ago: executing program 4 (id=198): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r1, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 4m46.925195349s ago: executing program 4 (id=201): syz_mount_image$fuse(0x0, 0x0, 0x1810090, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m46.452426949s ago: executing program 4 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_SET_TIMERSLACK(0x1d, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='veno', 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r5 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r5) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x8000) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x304}, "3c62b8c283856312", "5ed8002558e2bb7174371336dad9ecbd", '\x00', "4c5293d719408a98"}, 0x28) read$FUSE(r7, &(0x7f0000000b80)={0x2020}, 0x2020) 4m31.057162291s ago: executing program 33 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_SET_TIMERSLACK(0x1d, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='veno', 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r5 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r5) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x8000) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x304}, "3c62b8c283856312", "5ed8002558e2bb7174371336dad9ecbd", '\x00', "4c5293d719408a98"}, 0x28) read$FUSE(r7, &(0x7f0000000b80)={0x2020}, 0x2020) 4m28.560028448s ago: executing program 5 (id=237): unshare(0x62040200) socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x7e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x70, 0x66, 0x0, 0x5, 0x1, 0x0, @remote, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x15, 0x4, 0x0, 0x17, 0x3b, 0x65, 0x7b98, 0x3e, 0xff, 0x5, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0xe4, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0x54, [@remote, @empty, @private=0xa010101, @loopback]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xa2, [@rand_addr=0x64010100, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x2, [{@empty, 0x6}, {@rand_addr=0x64010101, 0x9}]}]}}}}}}}, 0x0) 4m27.346037726s ago: executing program 5 (id=240): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x475c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000800)={0x2, 0x4e28, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 4m27.281844227s ago: executing program 5 (id=243): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = fsopen(&(0x7f0000002280)='reiserfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x7}}, {@nobarrier}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFt+IyviDxC1isbGH1sooBy8aDTxoImJFzzWthBkoYbWRAgRNAaPhsTEo/Fo4l/gSS9GPZl41bshIYaL6GnM7M6022W73ZYtK93PJ9nueztv+t533rzdN/N2AxhYo/mfJGJHRPweEbsa2aUFRhtPN29cnPrnxsWpJLLs7b+Serm/b1ycKouW+20vMmNpRPppEg+3qXfu/IXTk7XazLkiPz5/5v3xufMXnj91ZvLkzMmZsxPHjh05fOjFFyaO9iTOe/O27vtodv/e19+5+ubU8avv/vxtUsbfEkePjHba+FSW9bi6/trZlE6Gu9hhaB0bQ9fybsi7a6Q+/nfFUCx23q547ZO+Ng5YV1lhmc2XM2ADS6LfLQD6o/ygz69/y8edm3303/WXGxdAedw3i0djy3CkRZmRluvbXhqNiOOX//0qf8Tq70O4igYAVu37fP7z3C3zv62t5e6JzfW1oUqxlrI7Iu6LiD0RcX9EPBARD0bEQ+0q6bAg0LpIcuv8J7221ti6kc//XirWtpbO/8rZX1SGitzOevxH04jazMH6MYkYi5HNJ07VZg51qOOHV3/7fLltzfO//JHXX84Fi3ZcG968dJ/pyfnJ24m52fWPI/YNt4s/WVgJSCJib0TsW2Mdp575Zv9y21aOv4Nu1plWkH0d8XSj/y9HS/ylpPP65PiW/HwYz8+Cg23r+OXXK28tV/9txd8Def9va3v+L8RfSZrXa+dW898bo/vKH58te01TXdP5v/jCpuL5w8n5+XOHIjYlbzQa3fz6xOK+Zb4sn8c/dqD9+N9df84WDkR+Ej8SEY9GxGNFdI9HxBMRcaDDUfjplSff63SE2se/pcN/7J08/umW/q8sLdLS/4uJTdH6SvvE0Okfv1v6H7uJv5T3/5F6aqx4pf7+92XnuLpp12rPZgAAALhbpRGxI5K0upBO02q18R3+PbEtrc3OzT97YvaDs9ON3whUYiQt73Q17gePJOX9z0pTfqIlf7i4b/zF0NZ6vjo1W5vud/Aw4LY3j//yTme18fSnb5fAxteDdTTgLmX8w+Ay/mFwGf8wuNqM/1u+AA5sTO0+/y/1oR3Andcy/i37wQBx/Q+Da7jpR47AYGn+/PdGAANjbmus/CP5jZDIsiz7HzRj4yQi7bbwpX43deVEss6jYEe/A1x9ot/vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xXwAAAP//BL/saw==") sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600110a00000000dd1ffe1a00c399"], 0x78}}, 0x0) recvmmsg$unix(r1, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2, 0x0) 4m20.057070782s ago: executing program 5 (id=245): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000001c0)=""/106, &(0x7f0000000280)=0x6a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2$9p(0x0, 0x4880) 4m20.055923882s ago: executing program 5 (id=248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) getdents(0xffffffffffffffff, 0x0, 0xbb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sched_setaffinity(0x0, 0x0, 0x0) 4m19.564789584s ago: executing program 5 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 4m4.157587055s ago: executing program 34 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3m11.784286931s ago: executing program 1 (id=367): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0xc80, 0x55007}}, 0x20}}, 0x20000000) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 3m7.02695039s ago: executing program 1 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000480)="170000", 0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, &(0x7f0000000480)) 3m6.459308123s ago: executing program 1 (id=382): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) r5 = userfaultfd(0x80801) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, r5, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)={0x50, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 3m2.18397298s ago: executing program 1 (id=385): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0) 2m55.346406086s ago: executing program 1 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a1c000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000b17000/0x2000)=nil) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}, 0x2000c8d0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa04009078010000004700000000000000001100000000000000000000440c0001ac1414bb4e210000443c0001e0000001000000000000000000000000ac1414000bdf000000000000000000000000000000000000ac1e000100000000ac14140000000000886430"], 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x5f, 0x841df97cf26f7de9]}}, &(0x7f0000000100)=""/189, 0x2d, 0xbd, 0x1}, 0x28) 2m53.03151499s ago: executing program 1 (id=402): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() writev(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x47) sendfile(r2, r3, 0x0, 0xb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x25dfdbfe, {{@in6=@empty, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5b, 0xb400, 0x2, 0xdde5, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x27, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m36.884619908s ago: executing program 35 (id=402): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() writev(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x47) sendfile(r2, r3, 0x0, 0xb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x25dfdbfe, {{@in6=@empty, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5b, 0xb400, 0x2, 0xdde5, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x27, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m12.000440166s ago: executing program 8 (id=431): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, 0x0, 0x0, 0x60, 0x2732bd8c) getpid() r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r1, &(0x7f0000000b00), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m56.368300753s ago: executing program 36 (id=431): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, 0x0, 0x0, 0x60, 0x2732bd8c) getpid() r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r1, &(0x7f0000000b00), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 51.617156371s ago: executing program 9 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 50.046826477s ago: executing program 9 (id=641): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) syz_open_procfs$userns(0x0, &(0x7f0000000100)) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) 39.874554709s ago: executing program 0 (id=670): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) read$FUSE(r4, &(0x7f0000006780)={0x2020}, 0x2020) 38.51227922s ago: executing program 0 (id=671): syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0xd3, 0xc, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36.490599336s ago: executing program 9 (id=676): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockname$netlink(r1, 0x0, &(0x7f0000000040)) 36.390447139s ago: executing program 9 (id=678): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r0, 0x0, 0x0, 0x4001a061, 0x0) 36.226375773s ago: executing program 9 (id=679): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, '\a\x00'}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) setreuid(0x0, 0xee01) add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) 35.87769491s ago: executing program 0 (id=680): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200700, &(0x7f0000000040)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpquota}, {@nombcache}, {@nolazytime}, {@nobh}]}, 0x0, 0x478, &(0x7f00000014c0)="$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") 34.482637572s ago: executing program 0 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) 34.010039863s ago: executing program 0 (id=685): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000001980)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,\x00\x00\x00\x00\x00\x00', @ANYBLOB="f9ee7ee6616006527905abd668ea17e382e0c83dc34879c344093674bfcb9afe6942e93d2c31ef3422c5857ce514a621738e2e0ca9f3b51f9577ee83ca37bd7a2dda7be50c9438a6731ec6303c2b70c0282527857939030300203de5ad9ccf10f399d47a553c3815a8140e156f525b62a6c34f36a440f37ac333648bccb6c848db175245696642c3000000000000", @ANYRES64, @ANYRES16=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX], 0xc1, 0x151f, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) 32.641323684s ago: executing program 9 (id=686): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) syz_open_procfs$userns(0x0, &(0x7f0000000100)) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) 31.53245744s ago: executing program 0 (id=692): fsopen(0x0, 0x1) lseek(0xffffffffffffffff, 0xfe, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000300)={[{@journal_async_commit}, {@nombcache}, {}], [{@euid_eq}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getitimer(0x0, 0x0) 31.236377627s ago: executing program 37 (id=692): fsopen(0x0, 0x1) lseek(0xffffffffffffffff, 0xfe, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000300)={[{@journal_async_commit}, {@nombcache}, {}], [{@euid_eq}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getitimer(0x0, 0x0) 18.162336275s ago: executing program 6 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2$9p(0x0, 0x4880) 17.184889857s ago: executing program 38 (id=686): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) syz_open_procfs$userns(0x0, &(0x7f0000000100)) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) 17.160128977s ago: executing program 6 (id=724): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x4001a061, 0x0) 16.918404683s ago: executing program 6 (id=725): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc1ffb}]}) readv(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 15.792630409s ago: executing program 6 (id=726): inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$getregs(0xe, r0, 0xb, &(0x7f00000014c0)=""/4096) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) 13.13846243s ago: executing program 6 (id=728): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x51e, &(0x7f0000000640)="$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") 9.804236316s ago: executing program 6 (id=730): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/1, 0x1) 7.501712988s ago: executing program 7 (id=734): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) creat(&(0x7f00000000c0)='./bus\x00', 0x182) 7.277050633s ago: executing program 7 (id=735): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@oldalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@block_validity}, {}, {@dioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFxGkCCIWxD/Au8fiP+BfIWihSAl68BKZzWy7TXa7yXZrUufzgWnfm5nkO2/fvJfvzOyyARTWWPZPKeLliPg6iTjYtm048o1ja/utPLg2nS1JrK5+8mcSSb6utX+S/78/r7wUEb98EXG8tDFufWl5rlKtpgt5fbwxf3m8vrR84uJ8ZTadTS9NTk2demtq8t133h5YW18/9/d3H9/94NSXR1e+/eneodtJnIkD+bb2djyFG+2VsRjLX5OROLNux4kBBNtJkl47dDgH2H5D+TgfiWwOOBhD+agH/v+uR8QqUFCJ8Q8F1coDWtf2A7oOfm7cf3/tAqi9/V81b4IMr90biT3Na6N9K8ljV0bZ9e7oAOJnMX7+487tbIke9yGuDyAeQMuNmxFxcnh44/yf5PNf/05u4q7f+hhF+/sD2+lulv+80Sn/Kz3Mf6JD/rO/w9jtR+/xX7o3gDBdZfnfex3z34dT1+hQXnuhmfONJBcuVtOTEfFiRByLkd1Zvd/nOe35X7Zk8Vu5YH4c94Z3P/4zM5VGpc9wG9y/GfHKo/w3iQ3z/55mrru+/7PX49wmYxxJ77zabVvv9rcbfAa8+mPEax37/9ETreTJzyfHm+fDeOus2OivW0d+7RZ/a+0fvKz/9z25/aNJ+/Pa+tZj/LDnn7Tbtn7P/13Jp83yrnzd1UqjsTARsSv5aOP6yUc/26q39s/af+zok+e/Tuf/3oj4bJPtv3W4exq0E/p/Zkv9v/XCbx9+/n23+Jvr/zebpWP5ms3Mf5s9wKd57QAAAAAAAGCnKUXEgUhK5YflUqlcXnt/x+HYV6rW6o3jF2qLl2ai+VnZ0RgptZ50H2x7P8RE/n7YVn1yXX0qIg5FxDdDe5v18nStOrPdjQcAAAAAAAAAAAAAAAAAAIAdYn+Xz/9nfh/a7qMDnjlf+Q3F1XP8D+KbnoAdyd9/KC7jH4rL+IfiMv6huIx/KC7jH4rL+IfiMv4BAAAAAAAAAAAAAAAAAAAAAAAAAABgoM6dPZstqysPrk1n9ZkrS4tztSsnZtL6XHl+cbo8XVu4XJ6t1WaraXm6Nt/r91VrtcsTk7F4dbyR1hvj9aXl8/O1xUuN8xfnK7Pp+XTkP2kVAAAAAAAAAAAAAAAAAAAAPF/qS8tzlWo1XVDoWjgdO+Iw+i4kvXr5dH4y9BViePsbqPAMCts8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAm38DAAD//wC8MHI=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x2, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3ff, 0x1, 0x1ff, 0x1, 0x6, 0x6}, 0x1c) bind$inet(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffd7e, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008080) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x5a00, 0x0, 0x3) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000040)={0xfffffffffffffffc, 0x20000, 0x1000, 0xf, 0x1}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r8, &(0x7f0000000040)="d7", 0x1, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) 7.150515206s ago: executing program 2 (id=736): inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$getregs(0xe, r0, 0xb, &(0x7f00000014c0)=""/4096) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) 6.231354178s ago: executing program 2 (id=737): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c000c"], 0x24}}, 0x0) 5.499596254s ago: executing program 2 (id=738): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x41, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) rmdir(0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12) 5.146398252s ago: executing program 2 (id=739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a1c000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000b17000/0x2000)=nil) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}, 0x2000c8d0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa04009078010000004700000000000000001100000000000000000000440c0001ac1414bb4e210000443c0001e0000001000000000000000000000000ac1414000bdf000000000000000000000000000000000000ac1e000100000000ac14140000000000886430"], 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x5f, 0x841df97cf26f7de9]}}, &(0x7f0000000100)=""/189, 0x2d, 0xbd, 0x1}, 0x28) 3.91091924s ago: executing program 7 (id=740): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) r5 = userfaultfd(0x80801) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, r5, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2.731244327s ago: executing program 7 (id=741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x2, 0x2, 0x1c7a966dbfeaef54, 0x0, @irqchip={0x10000000, 0x5}}]}) 2.525002212s ago: executing program 7 (id=742): fsopen(0x0, 0x1) lseek(0xffffffffffffffff, 0xfe, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000300)={[{@journal_async_commit}, {@nombcache}, {}], [{@euid_eq}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getitimer(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200700, &(0x7f0000000040)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpquota}, {@nombcache}, {@nolazytime}, {@nobh}]}, 0x0, 0x478, &(0x7f00000014c0)="$eJzs289rHFUcAPDvTH60tT8Sa/3RWjVahKCYNGnVHrwoCiKKgh7qMSbbErptpIlia7GpiCdBCnoWj6J/gTcRRD0JXj15kkLRXtp6iszsTLLZbhJrNp2a/Xxgdt+bebvzvvvmx9v3dgPoWkPZQxKxIyJ+i4iBRnZ5gaHG07Ur5yavXzk3mcTCwut/Jnm5q1fOTZZFy9dtLzLDaUT6UVLsZLnZM2dPTNTrtdNFfnTu5Nujs2fOPvHuyYnjteO1U+NHjhw+NPb0U+NPdiTOLK6r+z6Y2b/3xTcvvjJ59OJbP32T1XdHsb05jk4ZygL/ayHXuu3RTu+sYjub0klvhRXhpvRERNZcffn5PxA9sdR4A/HCh5VWDthQ2b1py8qb5xeATSyJqmsAVKO80Wfff8vlFnU9bguXn218AcrivlYsjS29kRZl+lq+33bSUEQcnf/7i2yJDRqHAABo9snk5y9nz+9f//qlrO8xEBHleNA9+ePv+eOuYg5lMCLujIjdEXFXROyJiLuLsvdGxH3rrM+N/Z/00jrfclVZ/++ZYm5ref+v7P3FYE+R25nH35ccm67XDhafyXD0bcnyY6vs47vnf/10pW3N/b9syfZf9gWLelzqbRmgm5qYm8g7pR1w+ULEvt528SeLMwFJROyNiH0399a7ysT0Y1/tX6nQ2vGvogPzTAtfZuHNZ/HPR0v8pSTml+Ynp2+YnxzdGvXawdHyqFjUXyZ+/uXj11ba/7ri74DLtcZzU/u3FhlMmudrZzu7//94/Kf9yRv5PHP5Ib83MTd3eiyiP8kvZ8vXjy+9tsyX5bPjf/hA+/N/dyPRn8V/f0RkB/EDEfFgRDxU1P3hiHgkIg6sEuOPz60df6QVtf+FiKm217/F47+l/W8+0XPih29X2v+/a//DeWq4WJNf/9bQrjrZ5aK1guv57AAAAOD/Is1/A5+kI4vpNB0ZafyGf0/ckdZnZucePzbzzqmpxm/lB6MvLUe6Borx0Pp0vTaWzBfv2BgfHS/Gisvx0kPFuPFnPdvy/MjkTH2q4tih221f4fzP/NFTde2ADbat7drx/lteEaACrfPo6fLs+VfDxQA2K//Xhu61xvnf/D8YYJNx/4fu1e78P9+SNxcAm5P7P3Qv5z90qfT7qmsAVMj9H7rSev7X35HEtmi3aWtl9bkNEtU3SmsiWVoTZXtFehtUTGLDElVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjnwAAAP///cTl1g==") 2.026397713s ago: executing program 2 (id=743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x8, 0x0, 0x3, 0x10007e, 0x20000006, 0x450, 0x6, 0x10000, 0x80005, 0xfffffffc, 0x8, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x9, 0x3c5b, 0x1, 0x26, 0xe, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x6, 0x400, 0x80, 0x1, 0x6, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x0, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x7, 0x9, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x5, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x6, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0x101, 0x4, 0x6, 0x0, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x7fff, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8001, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfad, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0xe, 0x1000ac8, 0x40000c1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x800004, 0x24], [0x9, 0x40bb33, 0xffffffff, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x3, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x445c65e0, 0x96, 0xffffffff, 0x80000001, 0x7, 0x2, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0xc, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x7fff, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 861.55166ms ago: executing program 3 (id=693): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) fchdir(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x189, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x12, @string={0x12, 0x3, "eca7cc8a12b48d63aa45da31c1cf7feb"}}, 0x0, 0x0}, 0x0) 1.54794ms ago: executing program 2 (id=744): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nombcache}, {@dioread_nolock}, {@nomblk_io_submit}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@user_xattr}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 0s ago: executing program 7 (id=745): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @void}, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x336, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x84, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x77, 0x2, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x4022f4442ddecb9d, 0x3, 0x3, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) kernel console output (not intermixed with test programs): device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /49/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 185.086952][ T4233] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.662767][ T4233] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 186.770539][ T5383] loop2: detected capacity change from 0 to 512 [ 186.777948][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.823455][ T4233] usb 1-1: config 0 descriptor?? [ 189.199567][ T5383] EXT4-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value [ 189.334940][ T4233] usb 1-1: can't set config #0, error -71 [ 189.345426][ T4233] usb 1-1: USB disconnect, device number 3 [ 190.088092][ T5404] loop2: detected capacity change from 0 to 512 [ 190.343855][ T5404] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.400423][ T5404] ext4 filesystem being mounted at /41/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.469674][ T5416] loop0: detected capacity change from 0 to 256 [ 191.741902][ T4865] Bluetooth: hci0: command 0x0406 tx timeout [ 191.754822][ T4865] Bluetooth: hci2: command 0x0406 tx timeout [ 196.424449][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.433523][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.489367][ T4865] Bluetooth: hci4: command 0x0406 tx timeout [ 196.573850][ T4865] Bluetooth: hci1: command 0x0409 tx timeout [ 196.843858][ T5403] chnl_net:caif_netlink_parms(): no params data found [ 197.177649][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.207103][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.222978][ T5403] device bridge_slave_0 entered promiscuous mode [ 197.247940][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.273473][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.302986][ T5403] device bridge_slave_1 entered promiscuous mode [ 197.443337][ T5403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.546599][ T5403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.693556][ T5403] team0: Port device team_slave_0 added [ 197.740965][ T5403] team0: Port device team_slave_1 added [ 197.803951][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.811067][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.838286][ T5403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.851521][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.858608][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.886002][ T5403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.983799][ T5452] loop1: detected capacity change from 0 to 1024 [ 198.012127][ T5403] device hsr_slave_0 entered promiscuous mode [ 198.043433][ T5452] EXT4-fs (loop1): Ignoring removed nobh option [ 198.061051][ T5403] device hsr_slave_1 entered promiscuous mode [ 198.075420][ T5452] EXT4-fs (loop1): Ignoring removed bh option [ 198.332843][ T5461] loop0: detected capacity change from 0 to 512 [ 198.436507][ T5452] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 198.487114][ T5452] System zones: 0-1, 3-12 [ 198.579273][ T5452] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none. [ 198.695296][ T4501] Bluetooth: hci1: command 0x041b tx timeout [ 199.940914][ T5461] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.246: invalid indirect mapped block 10 (level 1) [ 199.990424][ T5461] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.246: invalid indirect mapped block 8 (level 1) [ 200.008864][ T5461] EXT4-fs (loop0): 1 truncate cleaned up [ 200.014732][ T5461] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.775669][ T4501] Bluetooth: hci1: command 0x040f tx timeout [ 201.484486][ T5403] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 201.514304][ T5403] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 201.575513][ T5403] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 201.616755][ T5403] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 201.705683][ T5470] netlink: 100 bytes leftover after parsing attributes in process `syz.2.251'. [ 201.847630][ T5403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.883995][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.896660][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.920096][ T5403] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.943637][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.960196][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.998759][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.006088][ T4229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.092891][ T5499] loop1: detected capacity change from 0 to 256 [ 202.115548][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.151387][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.178054][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.217568][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.225118][ T4229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.226459][ T5499] FAT-fs (loop1): Directory bread(block 64) failed [ 202.280710][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.290405][ T5499] FAT-fs (loop1): Directory bread(block 65) failed [ 202.299269][ T5499] FAT-fs (loop1): Directory bread(block 66) failed [ 202.329666][ T5499] FAT-fs (loop1): Directory bread(block 67) failed [ 202.344972][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.361699][ T5499] FAT-fs (loop1): Directory bread(block 68) failed [ 202.391358][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.401129][ T5499] FAT-fs (loop1): Directory bread(block 69) failed [ 202.421518][ T5499] FAT-fs (loop1): Directory bread(block 70) failed [ 202.441765][ T5499] FAT-fs (loop1): Directory bread(block 71) failed [ 202.462183][ T5499] FAT-fs (loop1): Directory bread(block 72) failed [ 202.499809][ T5499] FAT-fs (loop1): Directory bread(block 73) failed [ 202.540282][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.595841][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.669325][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.810525][ T5503] loop2: detected capacity change from 0 to 512 [ 203.166441][ T5503] EXT4-fs error (device loop2): ext4_quota_enable:6440: comm syz.2.256: Bad quota inum: 12023, type: 1 [ 203.181980][ T5503] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 203.228107][ T5503] EXT4-fs (loop2): mount failed [ 203.309855][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 203.351234][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.729984][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.740540][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.008379][ T5403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.095922][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.728525][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.775886][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.968033][ T5511] loop1: detected capacity change from 0 to 512 [ 205.120860][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.161613][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.172061][ T5511] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.244373][ T5403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.258704][ T5511] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.678553][ T5526] loop0: detected capacity change from 0 to 256 [ 206.745160][ T5526] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 206.927792][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.967784][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.079848][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.135627][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.209023][ T5403] device veth0_vlan entered promiscuous mode [ 207.257854][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.720561][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.780631][ T5403] device veth1_vlan entered promiscuous mode [ 207.899479][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.915546][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.961983][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.994230][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.037189][ T5403] device veth0_macvtap entered promiscuous mode [ 208.056032][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.096885][ T5403] device veth1_macvtap entered promiscuous mode [ 208.186113][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.232112][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.294914][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.332002][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.374675][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.423494][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.471520][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.512564][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.561863][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.593221][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.623100][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.661912][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.672111][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.718256][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.771773][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.821499][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.862565][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.895175][ T5529] loop0: detected capacity change from 0 to 40427 [ 208.903224][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.939091][ T5529] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 208.974688][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.984610][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.988559][ T5529] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 209.024436][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.064701][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.104955][ T5529] F2FS-fs (loop0): invalid crc value [ 209.110874][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.134401][ T5529] F2FS-fs (loop0): Found nat_bits in checkpoint [ 209.148369][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.192987][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.275952][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.290789][ T5536] loop2: detected capacity change from 0 to 512 [ 209.311062][ T5403] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.340318][ T5403] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.370687][ T5529] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 209.380836][ T5403] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.400495][ T5529] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 209.417230][ T5403] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.582540][ T5536] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.648806][ T5536] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.703071][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.748816][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.901365][ T4330] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.983779][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.012017][ T4738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.048181][ T4738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.067302][ T4330] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.173388][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.279967][ T4330] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.742391][ T4330] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.281338][ T5555] loop6: detected capacity change from 0 to 256 [ 212.328336][ T5555] exfat: Deprecated parameter 'utf8' [ 212.358828][ T5555] exfat: Deprecated parameter 'namecase' [ 212.407837][ T5555] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x8b2134a9, utbl_chksum : 0xe619d30d) [ 213.046939][ T5558] netlink: 100 bytes leftover after parsing attributes in process `syz.2.265'. [ 213.196675][ T5560] loop6: detected capacity change from 0 to 512 [ 213.280713][ T5560] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 213.373317][ T5560] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 213.393594][ T5560] EXT4-fs (loop6): orphan cleanup on readonly fs [ 213.457168][ T5560] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3894: comm syz.6.267: Allocating blocks 41-42 which overlap fs metadata [ 213.515942][ T5560] EXT4-fs (loop6): Remounting filesystem read-only [ 213.551120][ T5560] Quota error (device loop6): write_blk: dquota write failed [ 213.612985][ T5560] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 213.754812][ T5560] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.267: Failed to acquire dquot type 0 [ 213.790862][ T5560] EXT4-fs (loop6): Remounting filesystem read-only [ 213.803066][ T5573] loop2: detected capacity change from 0 to 512 [ 213.828164][ T5560] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 213.918650][ T5560] EXT4-fs (loop6): Remounting filesystem read-only [ 213.970062][ T5560] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #12: comm syz.6.267: corrupted inode contents [ 214.015431][ T5560] EXT4-fs (loop6): Remounting filesystem read-only [ 214.025010][ T13] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 214.046602][ T5573] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.104791][ T5560] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #12: comm syz.6.267: mark_inode_dirty error [ 214.144167][ T5573] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.182373][ T5560] EXT4-fs (loop6): Remounting filesystem read-only [ 214.235616][ T5560] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #12: comm syz.6.267: corrupted inode contents [ 214.317522][ T5560] EXT4-fs (loop6): Remounting filesystem read-only [ 214.334331][ T5560] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #12: comm syz.6.267: mark_inode_dirty error [ 214.468343][ T5560] EXT4-fs (loop6): Remounting filesystem read-only [ 214.504996][ T5560] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #12: comm syz.6.267: corrupted inode contents [ 214.519080][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.577355][ T5560] EXT4-fs (loop6): Remounting filesystem read-only [ 214.584393][ T5560] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 214.601541][ T5560] EXT4-fs (loop6): Remounting filesystem read-only [ 214.609278][ T5560] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #12: comm syz.6.267: corrupted inode contents [ 215.725875][ T13] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 215.734236][ T13] usb 2-1: config 9 has no interface number 0 [ 215.861070][ T5560] EXT4-fs (loop6): Remounting filesystem read-only [ 216.024461][ T5560] EXT4-fs error (device loop6): ext4_truncate:4286: inode #12: comm syz.6.267: mark_inode_dirty error [ 216.077513][ T5560] EXT4-fs (loop6): Remounting filesystem read-only [ 216.084131][ T5560] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 216.168435][ T5560] EXT4-fs (loop6): Remounting filesystem read-only [ 216.206444][ T5560] EXT4-fs (loop6): 1 truncate cleaned up [ 216.235210][ T5560] EXT4-fs (loop6): pa ffff88801d6f81c0: logic 1, phys. 41, len 23 [ 216.243552][ T5560] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 216.348405][ T5560] EXT4-fs (loop6): Remounting filesystem read-only [ 216.379046][ T5560] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback. [ 216.720331][ T13] usb 2-1: config 9 interface 129 has no altsetting 0 [ 216.728655][ T4231] Bluetooth: hci3: command 0x0409 tx timeout [ 216.927391][ T13] usb 2-1: string descriptor 0 read error: -71 [ 216.934456][ T13] usb 2-1: New USB device found, idVendor=128d, idProduct=0003, bcdDevice=e3.8f [ 216.944171][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.985120][ T13] usb 2-1: can't set config #9, error -71 [ 216.995427][ T13] usb 2-1: USB disconnect, device number 3 [ 217.003769][ T5603] loop6: detected capacity change from 0 to 512 [ 217.058201][ T5608] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 217.106958][ T5607] loop0: detected capacity change from 0 to 4096 [ 217.145060][ T5603] EXT4-fs (loop6): Ignoring removed bh option [ 217.187335][ T5607] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 217.193754][ T5603] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 217.212868][ T5603] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #11: comm syz.6.274: corrupted inode contents [ 217.225601][ T5603] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #11: comm syz.6.274: mark_inode_dirty error [ 217.255356][ T5603] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.274: invalid indirect mapped block 1 (level 1) [ 217.275867][ T5607] EXT4-fs (loop0): Test dummy encryption mode enabled [ 217.287067][ T5612] loop2: detected capacity change from 0 to 512 [ 217.418210][ T5603] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #11: comm syz.6.274: corrupted inode contents [ 217.441151][ T5607] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 217.497927][ T5603] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 217.536648][ T4188] Bluetooth: hci5: command 0x0406 tx timeout [ 217.556724][ T5612] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 217.585146][ T5612] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.586330][ T5603] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #11: comm syz.6.274: corrupted inode contents [ 217.722996][ T5603] EXT4-fs error (device loop6): ext4_truncate:4286: inode #11: comm syz.6.274: mark_inode_dirty error [ 218.018395][ T5603] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 218.536245][ T5603] EXT4-fs (loop6): 1 truncate cleaned up [ 218.585988][ T5603] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000006,bh,,errors=continue. Quota mode: none. [ 218.759878][ T5623] overlayfs: conflicting lowerdir path [ 218.917897][ T4188] Bluetooth: hci3: command 0x041b tx timeout [ 219.558860][ T5583] chnl_net:caif_netlink_parms(): no params data found [ 219.754297][ T5630] loop1: detected capacity change from 0 to 512 [ 219.949736][ T5630] EXT4-fs (loop1): 1 truncate cleaned up [ 219.989299][ T5630] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nolazytime,errors=remount-ro,nodelalloc,data_err=ignore,barrier,. Quota mode: none. [ 220.087725][ T5630] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.282: invalid indirect mapped block 4294901760 (level 0) [ 220.193180][ T5630] EXT4-fs (loop1): Remounting filesystem read-only [ 220.257706][ T5630] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.282: invalid indirect mapped block 2 (level 1) [ 220.344017][ T5646] loop2: detected capacity change from 0 to 512 [ 220.351613][ T5630] EXT4-fs (loop1): Remounting filesystem read-only [ 220.399130][ T5630] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.282: invalid indirect mapped block 65535 (level 2) [ 220.488299][ T5646] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.280: bg 0: block 5: invalid block bitmap [ 220.503766][ T5647] netlink: 100 bytes leftover after parsing attributes in process `syz.6.279'. [ 221.393129][ T5630] EXT4-fs (loop1): Remounting filesystem read-only [ 221.413210][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 221.454402][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.492780][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.511866][ T5583] device bridge_slave_0 entered promiscuous mode [ 221.544819][ T5646] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 221.580533][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.599126][ T5646] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.280: invalid indirect mapped block 3 (level 2) [ 221.643543][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.677713][ T5646] EXT4-fs (loop2): 1 orphan inode deleted [ 221.683858][ T5583] device bridge_slave_1 entered promiscuous mode [ 221.710917][ T5646] EXT4-fs (loop2): 1 truncate cleaned up [ 221.750418][ T5646] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 222.030313][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.056266][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.155448][ T5583] team0: Port device team_slave_0 added [ 222.183659][ T5583] team0: Port device team_slave_1 added [ 222.252197][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.274709][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.362609][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.418921][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.437443][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.510308][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.636542][ T5583] device hsr_slave_0 entered promiscuous mode [ 222.668034][ T5583] device hsr_slave_1 entered promiscuous mode [ 222.692898][ T5583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.735820][ T5583] Cannot create hsr debugfs directory [ 222.951373][ T5663] loop1: detected capacity change from 0 to 512 [ 222.988273][ T5667] loop0: detected capacity change from 0 to 256 [ 223.172162][ T5663] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.254839][ T5663] ext4 filesystem being mounted at /74/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.510891][ T4188] Bluetooth: hci3: command 0x0419 tx timeout [ 226.590535][ T5583] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 226.739286][ T5583] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 226.834808][ T5583] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 226.944030][ T5583] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 227.061432][ T4330] device hsr_slave_0 left promiscuous mode [ 227.087464][ T4330] device hsr_slave_1 left promiscuous mode [ 227.142375][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.162601][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.203689][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.223161][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.273118][ T4330] device bridge_slave_1 left promiscuous mode [ 227.290469][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.351775][ T4330] device bridge_slave_0 left promiscuous mode [ 227.361467][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.462068][ T4330] device veth1_macvtap left promiscuous mode [ 227.477494][ T4330] device veth0_macvtap left promiscuous mode [ 227.494549][ T5688] loop0: detected capacity change from 0 to 40427 [ 227.518204][ T4330] device veth1_vlan left promiscuous mode [ 227.524168][ T4330] device veth0_vlan left promiscuous mode [ 227.580658][ T5688] F2FS-fs (loop0): invalid crc value [ 227.706852][ T5688] F2FS-fs (loop0): Found nat_bits in checkpoint [ 230.262114][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 230.343760][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 230.370269][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.404921][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.179333][ T4330] bond0 (unregistering): Released all slaves [ 231.470564][ T5745] loop2: detected capacity change from 0 to 512 [ 231.524245][ T5720] netlink: 100 bytes leftover after parsing attributes in process `syz.1.293'. [ 231.686909][ T5745] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.756462][ T5745] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.960164][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.740559][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.835629][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.900870][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.977502][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.999496][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.040461][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.047711][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.165498][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.225517][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.276027][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.334664][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.342130][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.437634][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.557783][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.620971][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.742446][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.753379][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.762844][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.272051][ T4236] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 234.464860][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.474102][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.489210][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.499019][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.507971][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.520885][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.548680][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 234.669440][ T4236] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 234.688701][ T4236] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 234.712532][ T4236] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 234.741151][ T4235] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 235.125779][ T4235] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 235.340828][ T4235] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 235.574919][ T4235] usb 1-1: config 1 interface 0 has no altsetting 0 [ 235.624866][ T4236] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 235.684935][ T4236] usb 2-1: string descriptor 0 read error: -71 [ 235.691490][ T4236] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.743367][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.804945][ T4236] usb 2-1: can't set config #33, error -71 [ 235.844850][ T4236] usb 2-1: USB disconnect, device number 4 [ 235.924159][ T4235] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 235.934476][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.942708][ T4235] usb 1-1: Product: syz [ 235.946993][ T4235] usb 1-1: Manufacturer: syz [ 235.951632][ T4235] usb 1-1: SerialNumber: syz [ 235.985022][ T5768] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 236.036751][ T5768] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 237.206417][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.383529][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.440184][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.022141][ T5823] netlink: 100 bytes leftover after parsing attributes in process `syz.0.311'. [ 240.631119][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.645699][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.763546][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.786935][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.869032][ T5583] device veth0_vlan entered promiscuous mode [ 240.889003][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.266262][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.424072][ T4235] rtl8150 1-1:1.0: couldn't reset the device [ 242.434913][ T4235] rtl8150: probe of 1-1:1.0 failed with error -5 [ 242.511718][ T4235] usb 1-1: USB disconnect, device number 4 [ 242.731671][ T5583] device veth1_vlan entered promiscuous mode [ 242.763321][ T5583] device veth0_macvtap entered promiscuous mode [ 242.939159][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.039761][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.051431][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.064012][ T5583] device veth1_macvtap entered promiscuous mode [ 243.102365][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.287265][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.297666][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.309001][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.342628][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.392569][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.420214][ T5874] loop2: detected capacity change from 0 to 512 [ 244.462725][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.501247][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.614972][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.634674][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.656667][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.139496][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.195894][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.390242][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.461318][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.471606][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.483279][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.494463][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.508079][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.518884][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.529867][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.541979][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.563452][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.771162][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.799478][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.806128][ T5874] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 247.285588][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.332922][ T5874] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.383119][ T5583] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.446615][ T5583] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.491605][ T5583] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.632010][ T5583] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.718504][ T5896] netlink: 100 bytes leftover after parsing attributes in process `syz.0.325'. [ 250.449591][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.476728][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.634776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 251.072477][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.112346][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.175924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 251.422231][ T5932] loop7: detected capacity change from 0 to 256 [ 252.284249][ T5932] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 253.958283][ T5955] netlink: 100 bytes leftover after parsing attributes in process `syz.7.340'. [ 257.912436][ T4330] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.161675][ T4330] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.473713][ T6010] netlink: 100 bytes leftover after parsing attributes in process `syz.0.351'. [ 260.581377][ T4330] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.725678][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.732394][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.141667][ T4330] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.047907][ T4330] tipc: Left network mode [ 266.301171][ T6082] netlink: 100 bytes leftover after parsing attributes in process `syz.0.366'. [ 272.330696][ T6147] loop7: detected capacity change from 0 to 512 [ 272.479506][ T6147] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.531930][ T6147] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.758656][ T4330] device hsr_slave_0 left promiscuous mode [ 275.811937][ T4330] device hsr_slave_1 left promiscuous mode [ 275.838787][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.884771][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.948671][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.004796][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.085069][ T4330] device bridge_slave_1 left promiscuous mode [ 276.180627][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.250327][ T4330] device bridge_slave_0 left promiscuous mode [ 276.280272][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.452702][ T4330] device veth1_macvtap left promiscuous mode [ 277.459051][ T4330] device veth0_macvtap left promiscuous mode [ 277.506138][ T4330] device veth1_vlan left promiscuous mode [ 277.512229][ T4330] device veth0_vlan left promiscuous mode [ 278.896279][ T6188] loop2: detected capacity change from 0 to 512 [ 279.087510][ T6188] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.123781][ T6188] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.464270][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 279.547536][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 279.611173][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.688548][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.581756][ T4330] bond0 (unregistering): Released all slaves [ 282.048023][ T6213] loop2: detected capacity change from 0 to 512 [ 282.676128][ T6213] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.943107][ T6213] ext4 filesystem being mounted at /71/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.424810][ T4236] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 295.575171][ T4236] usb 8-1: Using ep0 maxpacket: 16 [ 295.720655][ T4236] usb 8-1: config index 0 descriptor too short (expected 37359, got 202) [ 295.740877][ T4236] usb 8-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 295.788017][ T4236] usb 8-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 296.050352][ T4236] usb 8-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 296.887592][ T4236] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.924740][ T4236] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.563601][ T4236] usb 8-1: Product: syz [ 297.567975][ T4236] usb 8-1: Manufacturer: syz [ 297.572631][ T4236] usb 8-1: SerialNumber: syz [ 298.705131][ T4236] usb 8-1: 0:2 : does not exist [ 298.855041][ T4236] usb 8-1: USB disconnect, device number 2 [ 299.248779][ T4433] udevd[4433]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.966505][ T6412] chnl_net:caif_netlink_parms(): no params data found [ 304.121621][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.142925][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.533054][ T6412] device bridge_slave_0 entered promiscuous mode [ 304.813377][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.035611][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 305.043119][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.052444][ T6412] device bridge_slave_1 entered promiscuous mode [ 305.181872][ T6412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.218793][ T6412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.332485][ T6412] team0: Port device team_slave_0 added [ 305.367282][ T6412] team0: Port device team_slave_1 added [ 305.514266][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.544726][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.638348][ T6412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.689532][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.721572][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.865339][ T6412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.146671][ T6466] loop7: detected capacity change from 0 to 256 [ 306.196431][ T6466] exfat: Deprecated parameter 'namecase' [ 306.202198][ T6466] exfat: Deprecated parameter 'namecase' [ 306.274854][ T6466] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 306.331342][ T6412] device hsr_slave_0 entered promiscuous mode [ 306.409145][ T6412] device hsr_slave_1 entered promiscuous mode [ 306.563244][ T6412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.578510][ T6412] Cannot create hsr debugfs directory [ 307.218525][ T4234] Bluetooth: hci5: command 0x041b tx timeout [ 307.309356][ T4229] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.747399][ T4229] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.843620][ T4229] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.025059][ T4229] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.437044][ T6412] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 309.296056][ T6412] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 309.304544][ T4264] Bluetooth: hci5: command 0x040f tx timeout [ 309.323864][ T6412] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 309.436304][ T6412] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 310.394562][ T6532] loop7: detected capacity change from 0 to 1024 [ 310.502633][ T6536] binder: 6535:6536 ioctl 4018620d 0 returned -22 [ 310.725502][ T6536] binder: 6535:6536 ioctl c0306201 0 returned -14 [ 311.067562][ T6532] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #11: comm syz.7.453: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 311.377030][ T4264] Bluetooth: hci5: command 0x0419 tx timeout [ 311.386266][ T6532] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.453: couldn't read orphan inode 11 (err -117) [ 311.421296][ T6532] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: writeback. [ 311.450854][ T6412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.393569][ T6532] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 2: comm syz.7.453: lblock 2 mapped to illegal pblock 2 (length 1) [ 312.484082][ T6412] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.508471][ T6532] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 312.543668][ T6532] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 48: comm syz.7.453: lblock 0 mapped to illegal pblock 48 (length 1) [ 312.593372][ T6558] device bridge2 entered promiscuous mode [ 312.599565][ T6532] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 312.615971][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.624215][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.644953][ T6532] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.453: Failed to acquire dquot type 0 [ 312.650158][ T6561] EXT4-fs (loop7): Ignoring removed bh option [ 312.679884][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.719395][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.062641][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.069914][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.557624][ T5583] EXT4-fs error (device loop7): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 313.636555][ T5583] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 313.650972][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.655564][ T5583] EXT4-fs error (device loop7): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 313.688318][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.719729][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.885372][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.892563][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.958327][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.978435][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.056625][ T6412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 315.092933][ T6412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.185000][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 315.855419][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.868476][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.878491][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.889330][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.899718][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.909681][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.920153][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.929169][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.938863][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.961636][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.544419][ T4229] device hsr_slave_0 left promiscuous mode [ 317.558525][ T4229] device hsr_slave_1 left promiscuous mode [ 317.595349][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.613479][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.728325][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.736054][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.745786][ T4229] device bridge_slave_1 left promiscuous mode [ 318.760843][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.362490][ T4229] device bridge_slave_0 left promiscuous mode [ 319.376226][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.401312][ T4229] device veth1_macvtap left promiscuous mode [ 319.410923][ T4229] device veth0_macvtap left promiscuous mode [ 319.418409][ T4229] device veth1_vlan left promiscuous mode [ 319.428998][ T4229] device veth0_vlan left promiscuous mode [ 319.813753][ T4229] team0 (unregistering): Port device team_slave_1 removed [ 319.844080][ T4229] team0 (unregistering): Port device team_slave_0 removed [ 319.864547][ T4229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.890287][ T4229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.007525][ T4229] bond0 (unregistering): Released all slaves [ 320.244885][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.310707][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.376615][ T6412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.454497][ T6633] loop2: detected capacity change from 0 to 512 [ 320.767583][ T6633] EXT4-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value [ 322.345322][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.352040][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.786627][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.846054][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.975845][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.043532][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.106902][ T6412] device veth0_vlan entered promiscuous mode [ 323.158864][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.186222][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.278285][ T6412] device veth1_vlan entered promiscuous mode [ 323.443367][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.462450][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 323.535856][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.564176][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.598211][ T6412] device veth0_macvtap entered promiscuous mode [ 323.637584][ T6412] device veth1_macvtap entered promiscuous mode [ 323.713335][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.764972][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.805987][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.841340][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.884734][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.924765][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.962174][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.986592][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.010360][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.036259][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.060642][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.096644][ T6652] loop7: detected capacity change from 0 to 40427 [ 324.105688][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.116620][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.143398][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.167241][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.187051][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.220651][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.241167][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.254306][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.272721][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.285782][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.317158][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.332783][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.345920][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.371162][ T6652] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 324.379673][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 324.394209][ T6412] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.414811][ T6652] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 324.456042][ T6652] F2FS-fs (loop7): invalid crc value [ 324.466997][ T6412] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.526602][ T6652] F2FS-fs (loop7): Found nat_bits in checkpoint [ 324.526733][ T6412] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.603622][ T6412] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.724999][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 324.855259][ T4231] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 324.898643][ T4231] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 324.932660][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.935175][ T6652] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 324.941438][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.955440][ T6652] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 324.964120][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.446714][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.470432][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.540574][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 325.605729][ T4231] usb 1-1: config 0 interface 0 has no altsetting 0 [ 325.613017][ T4231] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 325.622606][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.633025][ T4231] usb 1-1: config 0 descriptor?? [ 325.832103][ T6704] loop8: detected capacity change from 0 to 512 [ 325.955109][ T6708] loop6: detected capacity change from 0 to 512 [ 326.162672][ T6704] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 326.186891][ T4231] belkin 0003:1020:0006.0002: unknown main item tag 0x0 [ 326.194647][ T6704] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.224805][ T4231] belkin 0003:1020:0006.0002: item fetching failed at offset 4/6 [ 326.233286][ T4231] belkin 0003:1020:0006.0002: parse failed [ 326.257029][ T6708] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 326.285144][ T6708] ext4 filesystem being mounted at /53/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.296663][ T4231] belkin: probe of 0003:1020:0006.0002 failed with error -22 [ 326.466966][ T4231] usb 1-1: USB disconnect, device number 5 [ 327.187793][ T6730] loop2: detected capacity change from 0 to 512 [ 327.239312][ T6727] loop7: detected capacity change from 0 to 4096 [ 327.276014][ T6730] EXT4-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value [ 328.041823][ T6737] ODEBUG: Out of memory. ODEBUG disabled [ 331.498478][ T6727] EXT4-fs (loop7): Test dummy encryption mode enabled [ 331.534702][ T6727] EXT4-fs (loop7): inline encryption not supported [ 331.612504][ T6727] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 331.794960][ T6727] EXT4-fs: failed to create workqueue [ 331.839744][ T6727] EXT4-fs (loop7): mount failed [ 332.862472][ T6755] loop0: detected capacity change from 0 to 128 [ 334.241398][ T6778] loop2: detected capacity change from 0 to 1024 [ 334.274229][ T6780] loop7: detected capacity change from 0 to 1024 [ 334.422401][ T6780] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (52061!=20869) [ 335.187156][ T6780] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 335.196419][ T6780] EXT4-fs (loop7): filesystem has both journal inode and journal device! [ 335.222946][ T6778] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,noquota,delalloc,journal_dev=0x0000000000000006,data_err=abort,,errors=continue. Quota mode: none. [ 335.334826][ T6778] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.389124][ T6790] loop6: detected capacity change from 0 to 512 [ 335.439122][ T6778] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.501: bg 0: block 112: padding at end of block bitmap is not set [ 335.476912][ T6790] EXT4-fs (loop6): Unrecognized mount option "euid=00000000000000000000" or missing value [ 335.633964][ T6778] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 335.784864][ T6778] EXT4-fs (loop2): This should not happen!! Data will be lost [ 335.784864][ T6778] [ 336.744690][ T6778] EXT4-fs (loop2): Total free blocks count 0 [ 336.750796][ T6778] EXT4-fs (loop2): Free/Dirty block details [ 337.877638][ T6778] EXT4-fs (loop2): free_blocks=0 [ 337.882783][ T6778] EXT4-fs (loop2): dirty_blocks=16 [ 337.981183][ T6778] EXT4-fs (loop2): Block reservation details [ 338.068719][ T6778] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 339.138118][ T6801] loop6: detected capacity change from 0 to 8192 [ 339.244917][ T6801] process 'syz.6.505' launched '.' with NULL argv: empty string added [ 339.307017][ T6812] loop2: detected capacity change from 0 to 512 [ 339.490450][ T6812] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 339.606144][ T6812] ext4 filesystem being mounted at /99/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.287415][ T4501] Bluetooth: hci3: command 0x0406 tx timeout [ 341.561147][ T6840] loop7: detected capacity change from 0 to 256 [ 341.715091][ T6837] loop6: detected capacity change from 0 to 256 [ 341.799209][ T6840] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 343.385118][ T4501] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 343.824838][ T4501] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 2039, setting to 1024 [ 343.856364][ T4501] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 344.795430][ T4501] usb 3-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 344.806222][ T4501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.527065][ T4501] usb 3-1: Product: syz [ 345.532553][ T4501] usb 3-1: Manufacturer: syz [ 346.064677][ T4501] usb 3-1: SerialNumber: syz [ 346.105771][ T6862] loop6: detected capacity change from 0 to 512 [ 346.174830][ T4501] usb 3-1: can't set config #1, error -71 [ 346.194940][ T6862] EXT4-fs (loop6): Unrecognized mount option "euid=00000000000000000000" or missing value [ 346.210882][ T4501] usb 3-1: USB disconnect, device number 4 [ 346.464856][ T4231] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 347.428555][ T6854] chnl_net:caif_netlink_parms(): no params data found [ 347.738918][ T6892] loop0: detected capacity change from 0 to 512 [ 347.758420][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 347.814486][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.822410][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.841845][ T6854] device bridge_slave_0 entered promiscuous mode [ 347.857741][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.869912][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.880607][ T6854] device bridge_slave_1 entered promiscuous mode [ 347.924210][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.986419][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.143329][ T6854] team0: Port device team_slave_0 added [ 348.534183][ T6854] team0: Port device team_slave_1 added [ 348.560048][ T6892] EXT4-fs (loop0): Test dummy encryption mode enabled [ 348.585482][ T6892] EXT4-fs (loop0): Mount option "dax=inode" incompatible with ext2 [ 348.664944][ T4231] usb 8-1: not running at top speed; connect to a high speed hub [ 348.678456][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.754400][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.804860][ T4231] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 348.892168][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.906217][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.913308][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.950450][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.082926][ T6906] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 349.850564][ T6854] device hsr_slave_0 entered promiscuous mode [ 349.937703][ T4231] usb 8-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 350.817320][ T6914] loop0: detected capacity change from 0 to 512 [ 350.899258][ T6854] device hsr_slave_1 entered promiscuous mode [ 350.916685][ T6914] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 350.945172][ T6854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.985866][ T6854] Cannot create hsr debugfs directory [ 350.996038][ T4231] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.004213][ T4231] usb 8-1: Product: syz [ 351.008550][ T4231] usb 8-1: Manufacturer: syz [ 351.015991][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 351.125120][ T4231] usb 8-1: can't set config #1, error -71 [ 351.158396][ T4231] usb 8-1: USB disconnect, device number 3 [ 351.409573][ T6914] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.526: bad orphan inode 11 [ 351.522838][ T6914] ext4_test_bit(bit=10, block=4) = 0 [ 351.534399][ T6914] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 351.804158][ T6928] xt_CT: No such helper "snmp_trap" [ 351.965739][ T6914] EXT4-fs error (device loop0): __ext4_new_inode:1082: comm syz.0.526: reserved inode found cleared - inode=2 [ 352.192939][ T6933] loop7: detected capacity change from 0 to 256 [ 352.243384][ T6933] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 352.306839][ T6933] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 352.904031][ T6933] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 353.222223][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 353.297172][ T6854] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 353.321726][ T6854] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 353.511776][ T6943] loop2: detected capacity change from 0 to 512 [ 353.569503][ T6946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 353.588450][ T6946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.597430][ T6946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.938514][ T6854] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 354.188934][ T6854] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 354.235600][ T6943] EXT4-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value [ 354.942678][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.976859][ T6960] loop7: detected capacity change from 0 to 512 [ 355.030760][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.235828][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.258062][ T6854] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.724219][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.749440][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.759064][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 355.785511][ T6960] EXT4-fs (loop7): Unrecognized mount option "euid=00000000000000000000" or missing value [ 355.851758][ T6966] loop6: detected capacity change from 0 to 128 [ 355.861584][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.869045][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.015486][ T6966] FAT-fs (loop6): Directory bread(block 32) failed [ 356.022810][ T6966] FAT-fs (loop6): Directory bread(block 33) failed [ 356.184528][ T6966] FAT-fs (loop6): Directory bread(block 34) failed [ 356.207281][ T6854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.248496][ T6966] FAT-fs (loop6): Directory bread(block 35) failed [ 356.288495][ T6966] FAT-fs (loop6): Directory bread(block 36) failed [ 356.296147][ T6854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.342558][ T6966] FAT-fs (loop6): Directory bread(block 37) failed [ 356.388531][ T6966] FAT-fs (loop6): Directory bread(block 38) failed [ 356.428756][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.437449][ T6966] FAT-fs (loop6): Directory bread(block 39) failed [ 356.444332][ T6966] FAT-fs (loop6): Directory bread(block 40) failed [ 356.462318][ T6966] FAT-fs (loop6): Directory bread(block 41) failed [ 356.552041][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.683212][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.727438][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.732825][ T6979] loop0: detected capacity change from 0 to 128 [ 356.734847][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.991530][ T6979] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 357.216088][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 357.246168][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 357.545619][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 357.555652][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 357.584860][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 357.696017][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 357.754453][ T6979] loop0: detected capacity change from 0 to 256 [ 357.765452][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.857364][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.936238][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 357.947640][ T6979] FAT-fs (loop0): Directory bread(block 64) failed [ 357.954378][ T6979] FAT-fs (loop0): Directory bread(block 65) failed [ 358.029450][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.079147][ T6979] FAT-fs (loop0): Directory bread(block 66) failed [ 358.088169][ T6992] xt_hashlimit: size too large, truncated to 1048576 [ 358.095209][ T6979] FAT-fs (loop0): Directory bread(block 67) failed [ 358.102237][ T6979] FAT-fs (loop0): Directory bread(block 68) failed [ 358.133611][ T6979] FAT-fs (loop0): Directory bread(block 69) failed [ 358.183944][ T6979] FAT-fs (loop0): Directory bread(block 70) failed [ 358.194014][ T6979] FAT-fs (loop0): Directory bread(block 71) failed [ 358.250153][ T6979] FAT-fs (loop0): Directory bread(block 72) failed [ 358.257778][ T6979] FAT-fs (loop0): Directory bread(block 73) failed [ 358.308682][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 358.329786][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.497335][ T4425] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.604998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.623592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.691095][ T6854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.772354][ T4425] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.841796][ T7004] loop2: detected capacity change from 0 to 1024 [ 358.968443][ T4425] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.005578][ T7004] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,noquota,delalloc,journal_dev=0x0000000000000006,data_err=abort,,errors=continue. Quota mode: none. [ 359.025598][ T7004] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.124239][ T7004] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.542: bg 0: block 112: padding at end of block bitmap is not set [ 360.040074][ T4394] attempt to access beyond end of device [ 360.040074][ T4394] loop0: rw=1, want=1832, limit=256 [ 360.052732][ T7004] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 360.084593][ T4425] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.109888][ T4394] attempt to access beyond end of device [ 360.109888][ T4394] loop0: rw=1, want=1928, limit=256 [ 360.124802][ T7004] EXT4-fs (loop2): This should not happen!! Data will be lost [ 360.124802][ T7004] [ 360.170673][ T4394] attempt to access beyond end of device [ 360.170673][ T4394] loop0: rw=1, want=4104, limit=256 [ 360.195574][ T7004] EXT4-fs (loop2): Total free blocks count 0 [ 360.202237][ T7004] EXT4-fs (loop2): Free/Dirty block details [ 360.226153][ T7018] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.542: lblock 0 mapped to illegal pblock 0 (length 1) [ 360.240692][ T4394] attempt to access beyond end of device [ 360.240692][ T4394] loop0: rw=1, want=4216, limit=256 [ 360.381617][ T7004] EXT4-fs (loop2): free_blocks=0 [ 360.504461][ T7018] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.542: lblock 0 mapped to illegal pblock 0 (length 1) [ 360.537641][ T7024] loop0: detected capacity change from 0 to 2048 [ 360.642580][ T7024] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,block_validity,nobarrier,,errors=continue. Quota mode: writeback. [ 360.695275][ T7004] EXT4-fs (loop2): dirty_blocks=16 [ 360.700779][ T7004] EXT4-fs (loop2): Block reservation details [ 360.708197][ T7004] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 360.712453][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.758945][ T7024] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.772938][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.870256][ T6854] device veth0_vlan entered promiscuous mode [ 360.961407][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 361.008893][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 361.104296][ T6854] device veth1_vlan entered promiscuous mode [ 361.136182][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 361.156403][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 361.275039][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 361.287758][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.319641][ T6854] device veth0_macvtap entered promiscuous mode [ 361.388099][ T6854] device veth1_macvtap entered promiscuous mode [ 361.484102][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.514651][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.545870][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.584655][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.604652][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.644679][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.668503][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.697158][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.726963][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.765883][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.806216][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.825133][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.855827][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.895078][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.921988][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.969004][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.004485][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.021939][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.073635][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.094274][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.103343][ T7047] loop7: detected capacity change from 0 to 512 [ 362.122230][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.142951][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.164131][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.184940][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.254698][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.305445][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.386457][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 362.399097][ T7047] EXT4-fs (loop7): Unrecognized mount option "euid=00000000000000000000" or missing value [ 362.497241][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 363.177200][ T7043] loop0: detected capacity change from 0 to 40427 [ 363.207250][ T6854] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.234680][ T6854] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.269961][ T7056] loop7: detected capacity change from 0 to 2048 [ 363.275232][ T6854] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.304529][ T6854] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.382947][ T7056] loop7: p1 < > p4 [ 363.382947][ T7056] p4: [ 363.407024][ T7056] loop7: p4 size 722688 extends beyond EOD, truncated [ 363.525743][ T7043] F2FS-fs (loop0): Found nat_bits in checkpoint [ 363.828962][ T7056] loop7: p6 start 262464109 is beyond EOD, truncated [ 364.269486][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.307674][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.328585][ T7043] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 364.432012][ T7056] loop7: p7 size 2304 extends beyond EOD, truncated [ 364.482594][ T4425] device hsr_slave_0 left promiscuous mode [ 364.489973][ T7043] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 364.524230][ T4425] device hsr_slave_1 left promiscuous mode [ 364.545317][ T7076] loop2: detected capacity change from 0 to 512 [ 364.600953][ T7076] EXT4-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value [ 364.697126][ T4433] udevd[4433]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 364.725278][ T7079] loop7: detected capacity change from 0 to 256 [ 364.737984][ T4275] udevd[4275]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 364.752233][ T4428] udevd[4428]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 364.777235][ T4432] udevd[4432]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 364.910294][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.914935][ T7079] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x28ba01bf, utbl_chksum : 0xe619d30d) [ 364.943169][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.094088][ T7082] loop2: detected capacity change from 0 to 512 [ 365.134347][ T7082] EXT4-fs (loop2): Ignoring removed nobh option [ 365.140893][ T7082] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 365.228839][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.423839][ T7082] EXT4-fs warning (device loop2): ext4_xattr_inode_get:492: inode #11: comm syz.2.552: ea_inode file size=0 entry size=6 [ 365.441278][ T7082] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.552: iget: bad extra_isize 90 (inode size 256) [ 365.462870][ T7082] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.552: error while reading EA inode 11 err=-117 [ 365.480277][ T7082] EXT4-fs (loop2): 1 orphan inode deleted [ 365.486261][ T7082] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,grpquota,nombcache,nolazytime,nobh,,errors=continue. Quota mode: writeback. [ 365.605450][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.895697][ T4425] device bridge_slave_1 left promiscuous mode [ 365.902116][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.998409][ T4425] device bridge_slave_0 left promiscuous mode [ 366.096808][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.098507][ T4432] udevd[4432]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 366.127712][ T4433] udevd[4433]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 366.218720][ T4275] udevd[4275]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 367.950450][ T4425] device veth1_macvtap left promiscuous mode [ 367.974666][ T4425] device veth0_macvtap left promiscuous mode [ 368.014117][ T4425] device veth1_vlan left promiscuous mode [ 368.030602][ T4425] device veth0_vlan left promiscuous mode [ 369.613458][ T7109] loop2: detected capacity change from 0 to 512 [ 369.653146][ T7111] loop6: detected capacity change from 0 to 256 [ 369.697138][ T7109] EXT4-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value [ 369.751271][ T7111] FAT-fs (loop6): Directory bread(block 1285) failed [ 369.785882][ T7111] FAT-fs (loop6): Directory bread(block 1286) failed [ 369.802113][ T7111] FAT-fs (loop6): Directory bread(block 1287) failed [ 369.830692][ T7111] FAT-fs (loop6): Directory bread(block 1288) failed [ 369.926018][ T4425] team0 (unregistering): Port device team_slave_1 removed [ 370.002012][ T7111] FAT-fs (loop6): Directory bread(block 1285) failed [ 370.014772][ T7111] FAT-fs (loop6): Directory bread(block 1286) failed [ 370.021670][ T7111] FAT-fs (loop6): Directory bread(block 1287) failed [ 370.031450][ T4425] team0 (unregistering): Port device team_slave_0 removed [ 370.051630][ T7111] FAT-fs (loop6): Directory bread(block 1288) failed [ 370.064039][ T4425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.096257][ T4425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.330452][ T4425] bond0 (unregistering): Released all slaves [ 370.486700][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 370.503488][ T5685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.512080][ T5685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.543909][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 371.798095][ T7125] loop2: detected capacity change from 0 to 256 [ 372.771122][ T7134] loop7: detected capacity change from 0 to 512 [ 372.914862][ T7134] EXT4-fs (loop7): Ignoring removed oldalloc option [ 372.944726][ T7134] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 374.954794][ T7134] EXT4-fs: error -4 creating inode table initialization thread [ 374.963516][ T7134] EXT4-fs (loop7): mount failed [ 375.139855][ T7150] loop0: detected capacity change from 0 to 512 [ 375.256767][ T7150] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 376.392604][ T7174] loop0: detected capacity change from 0 to 512 [ 376.925445][ T7174] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value [ 379.595245][ T7181] loop7: detected capacity change from 0 to 4096 [ 380.805411][ T7201] loop0: detected capacity change from 0 to 512 [ 382.742365][ T7201] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 382.803029][ T7204] input: syz1 as /devices/virtual/input/input13 [ 382.980508][ T7201] EXT4-fs: failed to create workqueue [ 382.986186][ T7201] EXT4-fs (loop0): mount failed [ 383.410175][ T7213] loop7: detected capacity change from 0 to 256 [ 383.739374][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.745976][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.664932][ T7236] loop6: detected capacity change from 0 to 512 [ 384.771985][ T7236] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.590: iget: bad i_size value: 38620345925642 [ 384.813696][ T7243] loop0: detected capacity change from 0 to 256 [ 385.050627][ T7236] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.590: couldn't read orphan inode 15 (err -117) [ 385.507708][ T7236] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 385.745950][ T7247] loop2: detected capacity change from 0 to 512 [ 385.787535][ T7251] loop7: detected capacity change from 0 to 512 [ 385.836496][ T7252] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.590: bg 0: block 5: invalid block bitmap [ 385.872011][ T7247] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 385.923049][ T7251] EXT4-fs (loop7): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 385.932592][ T7252] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 308 with error 28 [ 385.944261][ T7247] EXT4-fs (loop2): DAX unsupported by block device. [ 385.988872][ T7251] EXT4-fs (loop7): DAX unsupported by block device. [ 386.018612][ T7252] EXT4-fs (loop6): This should not happen!! Data will be lost [ 386.018612][ T7252] [ 386.063634][ T7254] loop0: detected capacity change from 0 to 4096 [ 386.128831][ T7252] EXT4-fs (loop6): Total free blocks count 0 [ 386.144708][ T7252] EXT4-fs (loop6): Free/Dirty block details [ 386.220658][ T7252] EXT4-fs (loop6): free_blocks=0 [ 386.267644][ T7252] EXT4-fs (loop6): dirty_blocks=312 [ 386.281597][ T7252] EXT4-fs (loop6): Block reservation details [ 386.893934][ T7262] loop2: detected capacity change from 0 to 512 [ 387.013285][ T7254] EXT4-fs (loop0): Test dummy encryption mode enabled [ 387.077494][ T7254] EXT4-fs (loop0): Ignoring removed orlov option [ 388.105854][ T7252] EXT4-fs (loop6): i_reserved_data_blocks=312 [ 388.172739][ T7262] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.445174][ T7262] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz.2.596: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 388.470631][ T7262] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.596: couldn't read orphan inode 16 (err -117) [ 388.485098][ T7262] EXT4-fs (loop2): 1 orphan inode deleted [ 388.490962][ T7262] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,noload,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000007,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 388.571050][ T7254] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 389.707619][ T7279] loop6: detected capacity change from 0 to 16 [ 389.833895][ T7279] erofs: (device loop6): mounted with root inode @ nid 36. [ 389.900000][ T7280] loop0: detected capacity change from 0 to 512 [ 390.045577][ T7283] Zero length message leads to an empty skb [ 393.270075][ T7288] loop2: detected capacity change from 0 to 512 [ 393.354843][ T7288] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 393.803003][ T7288] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.601: bg 0: block 384: padding at end of block bitmap is not set [ 393.856805][ T7292] loop0: detected capacity change from 0 to 256 [ 394.255551][ T7288] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 394.273246][ T7288] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.601: attempt to clear invalid blocks 983260 len 1 [ 394.307945][ T7288] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.601: Invalid inode table block 0 in block_group 0 [ 394.321673][ T7288] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 394.336942][ T7305] loop9: detected capacity change from 0 to 128 [ 394.353949][ T7288] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 394.456280][ T7288] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.601: Invalid inode table block 0 in block_group 0 [ 394.651983][ T7310] 9pnet: Could not find request transport: xen [ 394.695843][ T7288] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 397.100916][ T7288] EXT4-fs error (device loop2): ext4_truncate:4286: inode #11: comm syz.2.601: mark_inode_dirty error [ 397.113204][ T7288] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 397.293739][ T7288] EXT4-fs (loop2): 1 truncate cleaned up [ 397.315338][ T7288] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 397.449741][ T7320] loop6: detected capacity change from 0 to 512 [ 397.479155][ T7319] loop7: detected capacity change from 0 to 512 [ 398.019921][ T7320] EXT4-fs (loop6): Ignoring removed oldalloc option [ 398.074719][ T7319] EXT4-fs (loop7): Unrecognized mount option "euid=00000000000000000000" or missing value [ 398.164902][ T7320] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,acl,oldalloc,delalloc,,errors=continue. Quota mode: writeback. [ 398.220138][ T7340] loop2: detected capacity change from 0 to 128 [ 398.329486][ T7340] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 398.912981][ T7355] device bridge1 entered promiscuous mode [ 401.197231][ T7340] loop2: detected capacity change from 0 to 256 [ 401.495978][ T7340] FAT-fs (loop2): Directory bread(block 64) failed [ 401.538361][ T7340] FAT-fs (loop2): Directory bread(block 65) failed [ 401.578758][ T7340] FAT-fs (loop2): Directory bread(block 66) failed [ 401.613530][ T7340] FAT-fs (loop2): Directory bread(block 67) failed [ 401.661840][ T7340] FAT-fs (loop2): Directory bread(block 68) failed [ 401.696491][ T7340] FAT-fs (loop2): Directory bread(block 69) failed [ 401.720274][ T7340] FAT-fs (loop2): Directory bread(block 70) failed [ 401.740078][ T7377] capability: warning: `syz.7.623' uses deprecated v2 capabilities in a way that may be insecure [ 401.760095][ T7374] loop0: detected capacity change from 0 to 256 [ 401.776558][ T7340] FAT-fs (loop2): Directory bread(block 71) failed [ 401.802768][ T7340] FAT-fs (loop2): Directory bread(block 72) failed [ 401.831885][ T7340] FAT-fs (loop2): Directory bread(block 73) failed [ 401.923594][ T7374] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 402.246937][ T7386] loop7: detected capacity change from 0 to 128 [ 402.479467][ T7386] EXT4-fs (loop7): Test dummy encryption mode enabled [ 402.586988][ T7386] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_lock,,errors=continue. Quota mode: none. [ 402.787969][ T7386] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 403.813342][ T7386] overlayfs: upper fs does not support tmpfile. [ 403.828003][ T4425] attempt to access beyond end of device [ 403.828003][ T4425] loop2: rw=1, want=1832, limit=256 [ 403.848226][ T4425] attempt to access beyond end of device [ 403.848226][ T4425] loop2: rw=1, want=1928, limit=256 [ 403.893993][ T4425] attempt to access beyond end of device [ 403.893993][ T4425] loop2: rw=1, want=6056, limit=256 [ 404.155430][ T4425] attempt to access beyond end of device [ 404.155430][ T4425] loop2: rw=1, want=8528, limit=256 [ 405.175731][ T7411] loop0: detected capacity change from 0 to 512 [ 405.328158][ T7411] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.632: iget: bad i_size value: 38620345925642 [ 405.476246][ T7411] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.632: couldn't read orphan inode 15 (err -117) [ 405.520765][ T7411] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 405.647924][ T7410] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.632: bg 0: block 5: invalid block bitmap [ 405.715278][ T23] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 405.788037][ T7411] EXT4-fs (loop0): shut down requested (0) [ 405.824816][ T7426] loop9: detected capacity change from 0 to 256 [ 405.895681][ T7426] exfat: Deprecated parameter 'namecase' [ 405.914855][ T7426] exfat: Deprecated parameter 'namecase' [ 405.976970][ T7426] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 406.115833][ T23] usb 8-1: unable to get BOS descriptor or descriptor too short [ 406.194914][ T23] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 406.485649][ T23] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 406.606907][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.828475][ T23] usb 8-1: Product: syz [ 406.926656][ T23] usb 8-1: Manufacturer: syz [ 407.118391][ T23] usb 8-1: SerialNumber: syz [ 407.487900][ T23] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 408.025760][ T7419] udc-core: couldn't find an available UDC or it's busy [ 408.156156][ T7419] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 408.457125][ T23] usb 8-1: invalid uac2 rates [ 408.462135][ T23] usb 8-1: invalid uac2 rates [ 409.574801][ T23] usb 8-1: failed to enable PITCH for EP 0x82 [ 409.594777][ T23] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 409.613783][ T23] usb 8-1: clock source 0 is not valid, cannot use [ 409.646091][ T23] usb 8-1: 2:1: cannot get freq (v2/v3): err -71 [ 409.726868][ T7479] loop7: detected capacity change from 0 to 512 [ 409.744906][ T23] usb 8-1: 2:1: cannot set freq 791749207 (v2/v3): err -71 [ 409.793132][ T7483] loop0: detected capacity change from 0 to 1024 [ 409.867870][ T23] usb 8-1: USB disconnect, device number 4 [ 409.878595][ T7483] EXT4-fs (loop0): Ignoring removed nobh option [ 409.893499][ T7483] EXT4-fs (loop0): Ignoring removed bh option [ 409.927841][ T7479] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 409.979303][ T7483] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 410.023508][ T7483] System zones: 0-1, 3-12 [ 410.044703][ T7479] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.107353][ T7483] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none. [ 410.796543][ T4429] udevd[4429]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.938175][ T7500] loop0: detected capacity change from 0 to 1024 [ 411.068247][ T7500] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 411.128999][ T7500] EXT4-fs (loop0): Ignoring removed orlov option [ 411.244634][ T7500] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodiscard,sysvgroups,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 411.356143][ T7471] loop6: detected capacity change from 0 to 40427 [ 411.369386][ T7500] EXT4-fs (loop0): shut down requested (2) [ 411.477072][ T7471] F2FS-fs (loop6): invalid crc value [ 411.504429][ T7471] F2FS-fs (loop6): Found nat_bits in checkpoint [ 411.775025][ T4234] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 413.064797][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.098467][ T4234] usb 3-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 413.134651][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.196331][ T4234] usb 3-1: config 0 descriptor?? [ 413.717129][ T4234] wacom 0003:056A:00F4.0003: unknown main item tag 0xe [ 413.877123][ T4234] wacom 0003:056A:00F4.0003: collection stack underflow [ 414.073198][ T4234] wacom 0003:056A:00F4.0003: item 0 2 0 12 parsing failed [ 414.213315][ T7552] loop0: detected capacity change from 0 to 4096 [ 414.245015][ T4234] wacom 0003:056A:00F4.0003: parse failed [ 414.405454][ T7552] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 414.440067][ T4234] wacom: probe of 0003:056A:00F4.0003 failed with error -22 [ 414.454479][ T7552] EXT4-fs (loop0): inline encryption not supported [ 414.491682][ T4234] usb 3-1: USB disconnect, device number 5 [ 414.525751][ T7552] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003] [ 414.544055][ T7560] loop6: detected capacity change from 0 to 256 [ 414.608601][ T7552] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,noblock_validity,nodelalloc,norecovery,delalloc,usrquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 415.712712][ T7590] xt_hashlimit: size too large, truncated to 1048576 [ 416.073555][ T7592] loop2: detected capacity change from 0 to 8192 [ 417.075389][ T7612] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 419.774638][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 420.034646][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 420.170430][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.204687][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.256697][ T7641] loop6: detected capacity change from 0 to 256 [ 420.438229][ T13] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 420.468119][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.493782][ T13] usb 1-1: Product: syz [ 420.522109][ T13] usb 1-1: Manufacturer: syz [ 420.536931][ T13] usb 1-1: SerialNumber: syz [ 420.575767][ T13] usb 1-1: config 0 descriptor?? [ 420.625709][ T13] hub 1-1:0.0: bad descriptor, ignoring hub [ 420.642464][ T13] hub: probe of 1-1:0.0 failed with error -5 [ 420.723637][ T13] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 420.950122][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.218949][ T7650] kvm: pic: non byte write [ 421.464875][ T4188] usb 1-1: USB disconnect, device number 6 [ 421.824634][ T4188] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 421.959611][ T7676] loop0: detected capacity change from 0 to 512 [ 422.036536][ T7676] EXT4-fs (loop0): Ignoring removed nobh option [ 422.042986][ T7676] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 422.084700][ T4188] usb 10-1: Using ep0 maxpacket: 16 [ 422.122209][ T7676] EXT4-fs warning (device loop0): ext4_xattr_inode_get:492: inode #11: comm syz.0.680: ea_inode file size=0 entry size=6 [ 422.148231][ T7676] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.680: iget: bad extra_isize 90 (inode size 256) [ 422.165518][ T7676] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.680: error while reading EA inode 11 err=-117 [ 422.205326][ T7676] EXT4-fs (loop0): 1 orphan inode deleted [ 422.214795][ T4188] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.227464][ T7676] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,grpquota,nombcache,nolazytime,nobh,,errors=continue. Quota mode: writeback. [ 422.234988][ T4188] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.258240][ T4188] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 422.301926][ T4188] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 422.325394][ T4188] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.394337][ T4188] usb 10-1: config 0 descriptor?? [ 423.341010][ T4188] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0004/input/input14 [ 423.476088][ T7668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.546868][ T4188] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 423.752692][ T4188] usb 10-1: USB disconnect, device number 2 [ 423.877052][ T7699] loop6: detected capacity change from 0 to 512 [ 423.954866][ T7699] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 424.166475][ T7699] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #16: comm syz.6.684: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 424.187597][ T7699] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.684: couldn't read orphan inode 16 (err -117) [ 424.202626][ T7699] EXT4-fs (loop6): 1 orphan inode deleted [ 424.209302][ T7699] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,noload,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000007,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 424.810115][ T7698] fido_id[7698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 425.709525][ T7715] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 426.171843][ T7724] loop7: detected capacity change from 0 to 4096 [ 426.266921][ T7724] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 426.308903][ T7724] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5 [ 426.308903][ T7724] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 426.308903][ T7724] [ 426.394702][ T7724] EXT4-fs (loop7): Test dummy encryption mode enabled [ 426.460357][ T7724] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,delalloc,journal_ioprio=0x0000000000000000,nouser_xattr,nodiscard,data_err=ignore,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 427.653257][ T7736] loop6: detected capacity change from 0 to 512 [ 427.787189][ T7736] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,,errors=continue. Quota mode: writeback. [ 427.846734][ T7736] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 428.063076][ T7745] loop7: detected capacity change from 0 to 512 [ 428.081859][ T7736] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.695: corrupted inode contents [ 428.161161][ T7736] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #2: comm syz.6.695: mark_inode_dirty error [ 428.190879][ T7736] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.695: corrupted inode contents [ 428.648036][ T7736] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.695: mark_inode_dirty error [ 428.827612][ T7745] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 428.856434][ T7745] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.007437][ T7758] loop6: detected capacity change from 0 to 4096 [ 429.019284][ T7758] EXT4-fs (loop6): Test dummy encryption mode enabled [ 429.056286][ T7758] EXT4-fs (loop6): Ignoring removed orlov option [ 429.103269][ T7746] chnl_net:caif_netlink_parms(): no params data found [ 429.423997][ T7758] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 430.071609][ T26] audit: type=1804 audit(1783715433.925:11): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.699" name=2F6E6577726F6F742F39352F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F6275732F627573 dev="loop6" ino=19 res=1 errno=0 [ 430.121732][ T7768] loop7: detected capacity change from 0 to 512 [ 430.134790][ T4234] Bluetooth: hci4: command 0x0409 tx timeout [ 430.226826][ T7768] EXT4-fs (loop7): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 430.255965][ T7768] EXT4-fs (loop7): DAX unsupported by block device. [ 430.296156][ T7746] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.303781][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.312155][ T7746] device bridge_slave_0 entered promiscuous mode [ 430.321026][ T7746] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.331620][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.353254][ T7746] device bridge_slave_1 entered promiscuous mode [ 431.620272][ T7746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.864465][ T7746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.538704][ T7746] team0: Port device team_slave_0 added [ 432.596700][ T4264] Bluetooth: hci4: command 0x041b tx timeout [ 432.631283][ T7746] team0: Port device team_slave_1 added [ 432.736015][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.763651][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.007636][ T7746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.020781][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.028132][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.056061][ T7746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.985750][ T7746] device hsr_slave_0 entered promiscuous mode [ 434.014210][ T7746] device hsr_slave_1 entered promiscuous mode [ 434.053953][ T7746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.064753][ T7746] Cannot create hsr debugfs directory [ 434.234668][ T4236] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 434.470663][ T7802] loop7: detected capacity change from 0 to 128 [ 434.524634][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 434.644855][ T4236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.672226][ T7802] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 434.694737][ T7802] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.717686][ T26] audit: type=1804 audit(1783715438.575:12): pid=7802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.711" name="/newroot/90/file1/bus" dev="loop7" ino=12 res=1 errno=0 [ 434.742204][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 434.854919][ T4236] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 434.878363][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.904658][ T4236] usb 3-1: Product: syz [ 434.908901][ T4236] usb 3-1: Manufacturer: syz [ 434.922097][ T4236] usb 3-1: SerialNumber: syz [ 434.956259][ T4236] usb 3-1: config 0 descriptor?? [ 434.997140][ T4236] sr9700: probe of 3-1:0.0 failed with error -22 [ 435.206800][ T1108] usb 3-1: USB disconnect, device number 6 [ 436.439267][ T7823] loop2: detected capacity change from 0 to 512 [ 436.784775][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 437.131617][ T7823] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 437.194224][ T7823] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 437.339077][ T7830] loop6: detected capacity change from 0 to 256 [ 437.942674][ T7746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.287991][ T7746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 438.335170][ T7746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 438.479893][ T7746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 440.672811][ T7858] loop2: detected capacity change from 0 to 512 [ 440.705994][ T7746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.744921][ T7858] EXT4-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value [ 440.767993][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.787887][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.853485][ T7746] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.867577][ T26] audit: type=1326 audit(1783715444.725:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.6.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69b04ee59 code=0x7ffc0000 [ 441.481366][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 441.599306][ T7869] loop2: detected capacity change from 0 to 512 [ 441.950725][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 442.142470][ T26] audit: type=1326 audit(1783715444.725:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.6.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69b04ee59 code=0x7ffc0000 [ 442.173849][ T4738] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.181587][ T4738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.194832][ T26] audit: type=1326 audit(1783715444.725:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.6.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd69b04ee59 code=0x7ffc0000 [ 442.221136][ T26] audit: type=1326 audit(1783715444.725:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.6.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69b04ee59 code=0x7ffc0000 [ 442.309898][ T7869] EXT4-fs (loop2): Ignoring removed nobh option [ 442.316373][ T7869] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 442.572627][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 442.838627][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.102268][ T4738] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.109730][ T4738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.226220][ T26] audit: type=1326 audit(1783715444.725:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.6.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69b04ee59 code=0x7ffc0000 [ 443.500457][ T7869] EXT4-fs warning (device loop2): ext4_xattr_inode_get:492: inode #11: comm syz.2.723: ea_inode file size=0 entry size=6 [ 443.514486][ T7869] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.723: iget: bad extra_isize 90 (inode size 256) [ 443.546020][ T7869] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.723: error while reading EA inode 11 err=-117 [ 443.562530][ T7869] EXT4-fs (loop2): 1 orphan inode deleted [ 443.568562][ T7869] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,grpquota,nombcache,nolazytime,nobh,,errors=continue. Quota mode: writeback. [ 443.883857][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 444.471795][ T26] audit: type=1326 audit(1783715444.725:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.6.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd69b04ee59 code=0x7ffc0000 [ 444.499029][ T26] audit: type=1326 audit(1783715444.725:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.6.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69b04ee59 code=0x7ffc0000 [ 444.528264][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 444.615834][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 444.634731][ T26] audit: type=1326 audit(1783715444.725:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.6.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69b04ee59 code=0x7ffc0000 [ 444.705708][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 444.737157][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 444.758353][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 444.807439][ T26] audit: type=1326 audit(1783715444.725:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.6.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd69b04ee59 code=0x7ffc0000 [ 444.935226][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 444.964403][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.079608][ T7883] loop6: detected capacity change from 0 to 512 [ 445.197260][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.204390][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.368340][ T7883] EXT4-fs error (device loop6): ext4_quota_enable:6440: comm syz.6.728: Bad quota inum: 12023, type: 1 [ 446.382111][ T7883] EXT4-fs warning (device loop6): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 446.399837][ T7883] EXT4-fs (loop6): mount failed [ 447.132554][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 447.623508][ T7746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 447.709306][ T7746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.022152][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 448.051722][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 448.073257][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 448.099286][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 448.152325][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 448.316525][ T4328] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.980872][ T4328] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.180101][ T4501] Bluetooth: hci5: command 0x041b tx timeout [ 449.695061][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 449.750632][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 449.878046][ T7746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.902593][ T4328] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.912737][ T7916] loop7: detected capacity change from 0 to 256 [ 449.946226][ T7874] chnl_net:caif_netlink_parms(): no params data found [ 450.000792][ T7916] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 450.035879][ T7916] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 450.051336][ T4328] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.079022][ T7916] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 450.121054][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 450.131577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 450.254459][ T7746] device veth0_vlan entered promiscuous mode [ 450.323611][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 450.373638][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.414256][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.422483][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.460458][ T7746] device veth1_vlan entered promiscuous mode [ 450.556573][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.577197][ T7924] loop7: detected capacity change from 0 to 128 [ 450.642465][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.683744][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 451.254670][ T4233] Bluetooth: hci5: command 0x040f tx timeout [ 451.538387][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.582696][ T7924] EXT4-fs (loop7): Ignoring removed oldalloc option [ 451.599990][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.635782][ T7924] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,oldalloc,,errors=continue. Quota mode: writeback. [ 451.642457][ T7874] device bridge_slave_0 entered promiscuous mode [ 451.675279][ T7924] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.765775][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.815808][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.853981][ T7874] device bridge_slave_1 entered promiscuous mode [ 451.890234][ T7746] device veth0_macvtap entered promiscuous mode [ 451.917069][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 452.300462][ T7746] device veth1_macvtap entered promiscuous mode [ 452.418953][ T7746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.481613][ T7746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.532177][ T7746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.584015][ T7746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.654770][ T7746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.894456][ T7746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.932649][ T7746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.002145][ T7746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.291577][ T7746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.314642][ T7746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.334623][ T7886] Bluetooth: hci5: command 0x0419 tx timeout [ 453.362789][ T7746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.868609][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 453.913254][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 453.941352][ T7746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.974594][ T7746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.024581][ T7746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.064614][ T7746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.085100][ T7746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.114578][ T7746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.144952][ T7746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.203320][ T7746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.249446][ T7746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.282084][ T7746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.315741][ T7746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.863750][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.895031][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 454.922813][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 455.038575][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.082346][ T7746] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.100712][ T7746] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.138218][ T7746] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.157533][ T7746] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.225134][ T7874] team0: Port device team_slave_0 added [ 455.276012][ T7874] team0: Port device team_slave_1 added [ 455.313405][ T7960] loop7: detected capacity change from 0 to 512 [ 455.391124][ T7960] EXT4-fs (loop7): Unrecognized mount option "euid=00000000000000000000" or missing value [ 455.422926][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.440688][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.538646][ T7874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.562244][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.594700][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.683355][ T7874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.239463][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.276461][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.331089][ T7874] device hsr_slave_0 entered promiscuous mode [ 456.369843][ T7874] device hsr_slave_1 entered promiscuous mode [ 456.414755][ T7874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.442559][ T7874] Cannot create hsr debugfs directory [ 456.478032][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 456.501824][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.520989][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.603275][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 457.438105][ T7984] loop2: detected capacity change from 0 to 512 [ 457.519122][ T7984] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 457.561245][ T7984] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 457.704705][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 457.793669][ T7984] [ 457.796085][ T7984] ====================================================== [ 457.803525][ T7984] WARNING: possible circular locking dependency detected [ 457.810725][ T7984] syzkaller #0 Not tainted [ 457.815170][ T7984] ------------------------------------------------------ [ 457.822315][ T7984] syz.2.744/7984 is trying to acquire lock: [ 457.828340][ T7984] ffff888060860c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 457.839025][ T7984] [ 457.839025][ T7984] but task is already holding lock: [ 457.846523][ T7984] ffff88805f3fd088 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3bd/0x6c0 [ 457.856731][ T7984] [ 457.856731][ T7984] which lock already depends on the new lock. [ 457.856731][ T7984] [ 457.867606][ T7984] [ 457.867606][ T7984] the existing dependency chain (in reverse order) is: [ 457.876795][ T7984] [ 457.876795][ T7984] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 457.884416][ T7984] down_write+0x38/0x60 [ 457.889261][ T7984] ext4_destroy_inline_data+0x24/0xe0 [ 457.895193][ T7984] ext4_writepages+0x599/0x2d40 [ 457.900792][ T7984] do_writepages+0x493/0x700 [ 457.906282][ T7984] filemap_fdatawrite_wbc+0x1eb/0x240 [ 457.912737][ T7984] file_write_and_wait_range+0x14d/0x220 [ 457.919420][ T7984] ext4_sync_file+0x20e/0xb10 [ 457.924850][ T7984] ext4_buffered_write_iter+0x323/0x3a0 [ 457.931829][ T7984] ext4_file_write_iter+0x73f/0x1720 [ 457.938696][ T7984] vfs_write+0x748/0xd70 [ 457.943689][ T7984] __x64_sys_pwrite64+0x197/0x220 [ 457.949379][ T7984] do_syscall_64+0x4c/0xa0 [ 457.954379][ T7984] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 457.961206][ T7984] [ 457.961206][ T7984] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 457.969692][ T7984] __lock_acquire+0x2c66/0x7b50 [ 457.975400][ T7984] lock_acquire+0x19e/0x400 [ 457.980468][ T7984] percpu_down_read+0x46/0x1b0 [ 457.985789][ T7984] ext4_writepages+0x213/0x2d40 [ 457.991389][ T7984] do_writepages+0x493/0x700 [ 457.996546][ T7984] __writeback_single_inode+0x153/0xda0 [ 458.003006][ T7984] writeback_single_inode+0x3d2/0x8e0 [ 458.009562][ T7984] write_inode_now+0x23b/0x2c0 [ 458.015090][ T7984] iput+0x599/0x880 [ 458.019736][ T7984] ext4_xattr_set_entry+0x1d76/0x3f70 [ 458.026688][ T7984] ext4_xattr_block_set+0x8a7/0x2ce0 [ 458.032775][ T7984] ext4_expand_extra_isize_ea+0xebe/0x18e0 [ 458.039400][ T7984] __ext4_expand_extra_isize+0x301/0x3e0 [ 458.045795][ T7984] __ext4_mark_inode_dirty+0x444/0x6c0 [ 458.051967][ T7984] ext4_evict_inode+0xa55/0x1050 [ 458.057579][ T7984] evict+0x4b6/0x8b0 [ 458.062127][ T7984] ext4_orphan_cleanup+0xad8/0x1320 [ 458.067987][ T7984] ext4_fill_super+0x8c65/0x93f0 [ 458.073753][ T7984] mount_bdev+0x28a/0x3c0 [ 458.078650][ T7984] legacy_get_tree+0xe6/0x180 [ 458.083895][ T7984] vfs_get_tree+0x88/0x270 [ 458.089048][ T7984] do_new_mount+0x247/0xa40 [ 458.094219][ T7984] __se_sys_mount+0x2e3/0x3d0 [ 458.099737][ T7984] do_syscall_64+0x4c/0xa0 [ 458.105332][ T7984] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 458.111829][ T7984] [ 458.111829][ T7984] other info that might help us debug this: [ 458.111829][ T7984] [ 458.122347][ T7984] Possible unsafe locking scenario: [ 458.122347][ T7984] [ 458.129829][ T7984] CPU0 CPU1 [ 458.135267][ T7984] ---- ---- [ 458.140668][ T7984] lock(&ei->xattr_sem); [ 458.145046][ T7984] lock(&sbi->s_writepages_rwsem); [ 458.152829][ T7984] lock(&ei->xattr_sem); [ 458.159718][ T7984] lock(&sbi->s_writepages_rwsem); [ 458.164972][ T7984] [ 458.164972][ T7984] *** DEADLOCK *** [ 458.164972][ T7984] [ 458.173142][ T7984] 3 locks held by syz.2.744/7984: [ 458.178234][ T7984] #0: ffff88805a9fa0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x200/0x970 [ 458.188575][ T7984] #1: ffff88805a9fa650 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x41f/0x1050 [ 458.198575][ T7984] #2: ffff88805f3fd088 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3bd/0x6c0 [ 458.209270][ T7984] [ 458.209270][ T7984] stack backtrace: [ 458.215282][ T7984] CPU: 1 PID: 7984 Comm: syz.2.744 Not tainted syzkaller #0 [ 458.222714][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 458.232912][ T7984] Call Trace: [ 458.236302][ T7984] [ 458.239347][ T7984] dump_stack_lvl+0x188/0x250 [ 458.244239][ T7984] ? load_image+0x410/0x410 [ 458.249024][ T7984] ? show_regs_print_info+0x20/0x20 [ 458.254430][ T7984] ? print_circular_bug+0x12b/0x1a0 [ 458.259684][ T7984] check_noncircular+0x296/0x330 [ 458.265101][ T7984] ? look_up_lock_class+0x71/0x110 [ 458.270341][ T7984] ? add_chain_block+0x9b0/0x9b0 [ 458.275517][ T7984] ? lockdep_lock+0xf1/0x1f0 [ 458.280337][ T7984] ? mark_lock+0x94/0x320 [ 458.284891][ T7984] ? _find_first_zero_bit+0xd1/0xf0 [ 458.290229][ T7984] __lock_acquire+0x2c66/0x7b50 [ 458.295162][ T7984] ? __lock_acquire+0x1305/0x7b50 [ 458.300345][ T7984] ? verify_lock_unused+0x140/0x140 [ 458.305584][ T7984] ? __rwlock_init+0x140/0x140 [ 458.310390][ T7984] lock_acquire+0x19e/0x400 [ 458.315151][ T7984] ? ext4_writepages+0x213/0x2d40 [ 458.320289][ T7984] ? __might_sleep+0xf0/0xf0 [ 458.325180][ T7984] ? read_lock_is_recursive+0x10/0x10 [ 458.330574][ T7984] ? mark_lock+0x94/0x320 [ 458.334918][ T7984] ? mark_lock+0x94/0x320 [ 458.339525][ T7984] percpu_down_read+0x46/0x1b0 [ 458.344333][ T7984] ? ext4_writepages+0x213/0x2d40 [ 458.349466][ T7984] ext4_writepages+0x213/0x2d40 [ 458.354368][ T7984] ? 0xffffffffa001a000 [ 458.358718][ T7984] ? 0xffffffffa001a000 [ 458.362920][ T7984] ? lock_release+0xb5/0x8a0 [ 458.367719][ T7984] ? verify_lock_unused+0x140/0x140 [ 458.373062][ T7984] ? mark_lock+0x94/0x320 [ 458.377425][ T7984] ? read_lock_is_recursive+0x10/0x10 [ 458.382831][ T7984] ? ext4_readpage+0x2e0/0x2e0 [ 458.387765][ T7984] ? mark_lock+0x94/0x320 [ 458.392418][ T7984] ? __lock_acquire+0x13dc/0x7b50 [ 458.397766][ T7984] ? __lock_acquire+0x7b50/0x7b50 [ 458.403255][ T7984] ? do_raw_spin_lock+0x128/0x2f0 [ 458.408399][ T7984] ? do_raw_spin_unlock+0x11d/0x230 [ 458.414488][ T7984] ? ext4_readpage+0x2e0/0x2e0 [ 458.420941][ T7984] do_writepages+0x493/0x700 [ 458.425803][ T7984] ? __writepage+0x130/0x130 [ 458.430811][ T7984] ? writeback_single_inode+0x3c7/0x8e0 [ 458.436661][ T7984] ? __lock_acquire+0x7b50/0x7b50 [ 458.441707][ T7984] ? do_raw_spin_lock+0x128/0x2f0 [ 458.447190][ T7984] __writeback_single_inode+0x153/0xda0 [ 458.452909][ T7984] writeback_single_inode+0x3d2/0x8e0 [ 458.458488][ T7984] ? write_inode_now+0x2c0/0x2c0 [ 458.463559][ T7984] ? mark_buffer_dirty+0x2aa/0x490 [ 458.468871][ T7984] write_inode_now+0x23b/0x2c0 [ 458.474007][ T7984] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 458.479833][ T7984] ? do_raw_spin_unlock+0x11d/0x230 [ 458.485079][ T7984] iput+0x599/0x880 [ 458.488913][ T7984] ext4_xattr_set_entry+0x1d76/0x3f70 [ 458.494320][ T7984] ? ext4_xattr_ibody_set+0x330/0x330 [ 458.499944][ T7984] ext4_xattr_block_set+0x8a7/0x2ce0 [ 458.505272][ T7984] ? ext4_get_inode_loc+0x120/0x120 [ 458.510641][ T7984] ? ext4_xattr_inode_get+0x22f/0x890 [ 458.516152][ T7984] ? ext4_xattr_block_find+0x500/0x500 [ 458.521729][ T7984] ? ext4_xattr_block_find+0xe6/0x500 [ 458.527304][ T7984] ext4_expand_extra_isize_ea+0xebe/0x18e0 [ 458.533230][ T7984] __ext4_expand_extra_isize+0x301/0x3e0 [ 458.539088][ T7984] __ext4_mark_inode_dirty+0x444/0x6c0 [ 458.544822][ T7984] ext4_evict_inode+0xa55/0x1050 [ 458.550060][ T7984] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 458.556088][ T7984] ? do_raw_spin_unlock+0x11d/0x230 [ 458.561398][ T7984] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 458.567510][ T7984] evict+0x4b6/0x8b0 [ 458.571514][ T7984] ? proc_nr_inodes+0x320/0x320 [ 458.576389][ T7984] ? do_raw_spin_unlock+0x11d/0x230 [ 458.581961][ T7984] ? _raw_spin_unlock+0x24/0x40 [ 458.586944][ T7984] ? iput+0x6ea/0x880 [ 458.591295][ T7984] ext4_orphan_cleanup+0xad8/0x1320 [ 458.596728][ T7984] ? ext4_orphan_del+0xc90/0xc90 [ 458.602235][ T7984] ? errseq_check_and_advance+0x62/0x120 [ 458.608415][ T7984] ext4_fill_super+0x8c65/0x93f0 [ 458.613551][ T7984] ? format_decode+0x8b1/0x1330 [ 458.618792][ T7984] ? ext4_mount+0x40/0x40 [ 458.623499][ T7984] ? set_blocksize+0x1f1/0x360 [ 458.628709][ T7984] ? sb_set_blocksize+0xa5/0xe0 [ 458.633600][ T7984] mount_bdev+0x28a/0x3c0 [ 458.638165][ T7984] ? ext4_mount+0x40/0x40 [ 458.642620][ T7984] legacy_get_tree+0xe6/0x180 [ 458.647317][ T7984] ? ext4_errno_to_code+0x160/0x160 [ 458.652782][ T7984] vfs_get_tree+0x88/0x270 [ 458.657418][ T7984] do_new_mount+0x247/0xa40 [ 458.662309][ T7984] __se_sys_mount+0x2e3/0x3d0 [ 458.667033][ T7984] ? __x64_sys_mount+0xc0/0xc0 [ 458.671953][ T7984] ? lockdep_hardirqs_on+0x94/0x140 [ 458.677278][ T7984] ? __x64_sys_mount+0x1c/0xc0 [ 458.682081][ T7984] do_syscall_64+0x4c/0xa0 [ 458.686700][ T7984] ? clear_bhb_loop+0x30/0x80 [ 458.691755][ T7984] ? clear_bhb_loop+0x30/0x80 [ 458.696508][ T7984] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 458.702442][ T7984] RIP: 0033:0x7f4c7016e0ca [ 458.706949][ T7984] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.727288][ T7984] RSP: 002b:00007f4c6e3c4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 458.735748][ T7984] RAX: ffffffffffffffda RBX: 00007f4c6e3c4ee0 RCX: 00007f4c7016e0ca [ 458.744104][ T7984] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f4c6e3c4ea0 [ 458.752331][ T7984] RBP: 0000200000000180 R08: 00007f4c6e3c4ee0 R09: 0000000000000000 [ 458.760359][ T7984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 458.768537][ T7984] R13: 00007f4c6e3c4ea0 R14: 000000000000047a R15: 000000000000002c [ 458.776549][ T7984] [ 458.815017][ T7984] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.744: iget: bad extra_isize 58 (inode size 256) [ 458.844162][ T7984] EXT4-fs (loop2): Remounting filesystem read-only [ 458.854664][ T7] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 458.868881][ T7984] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.744: error while reading EA inode 18 err=-117 [ 458.882288][ T7984] EXT4-fs (loop2): Remounting filesystem read-only [ 458.891421][ T7984] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.744: iget: bad extra_isize 58 (inode size 256) [ 458.907695][ T7984] EXT4-fs (loop2): Remounting filesystem read-only [ 458.914387][ T7984] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.744: error while reading EA inode 11 err=-117 [ 458.927935][ T7984] EXT4-fs (loop2): Remounting filesystem read-only [ 458.938361][ T7984] EXT4-fs (loop2): 1 orphan inode deleted [ 458.944453][ T7984] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,dioread_nolock,nomblk_io_submit,errors=remount-ro,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003a,user_xattr,. Quota mode: none. [ 459.047707][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.064469][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.085533][ T1108] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 459.101490][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.114784][ T7] usb 8-1: Using ep0 maxpacket: 16 [ 459.130232][ T1108] usb 4-1: config 0 descriptor?? [ 459.244861][ T7] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 459.259684][ T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 459.271481][ T7] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 459.286554][ T7] usb 8-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 459.295975][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.327532][ T7] usb 8-1: config 0 descriptor?? [ 459.422620][ T4328] device hsr_slave_0 left promiscuous mode [ 459.429631][ T4328] device hsr_slave_1 left promiscuous mode [ 459.439666][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.447557][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.458554][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.466390][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.474912][ T4328] device bridge_slave_1 left promiscuous mode [ 459.481279][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.492860][ T4328] device bridge_slave_0 left promiscuous mode [ 459.499619][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.515402][ T4328] device veth1_macvtap left promiscuous mode [ 459.521739][ T4328] device veth0_macvtap left promiscuous mode [ 459.531498][ T4328] device veth1_vlan left promiscuous mode [ 459.537620][ T4328] device veth0_vlan left promiscuous mode [ 459.711207][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 459.723839][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 459.737600][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.750877][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.802152][ T4328] bond0 (unregistering): Released all slaves [ 459.834774][ T1108] usb 4-1: language id specifier not provided by device, defaulting to English [ 459.927428][ T7874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 459.957454][ T7874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 459.981294][ T7874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 460.017568][ T7] usbhid 8-1:0.0: can't add hid device: -71 [ 460.026835][ T7874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 460.033910][ T7] usbhid: probe of 8-1:0.0 failed with error -71 [ 460.060899][ T7] usb 8-1: USB disconnect, device number 5 [ 460.185697][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.199602][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.208243][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.220178][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.233803][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 460.243422][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.253135][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.260392][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.270384][ T1108] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input15 [ 460.287585][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 460.305955][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 460.315719][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.324298][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.331433][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.341833][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 460.350833][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 460.360244][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 460.370174][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 460.379780][ T1108] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input16 [ 460.399526][ T1108] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 460.420009][ T7874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.432568][ T7874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.447273][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 460.477458][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 460.492957][ T1108] usb 4-1: USB disconnect, device number 2 [ 460.550335][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 460.559134][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.568265][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.577704][ T8042] fido_id[8042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 460.602010][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.610800][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.619562][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.779468][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.791329][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.808984][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.123178][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 461.132743][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 461.163180][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 461.175895][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 461.186362][ T7874] device veth0_vlan entered promiscuous mode [ 461.199133][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 461.208539][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 461.222226][ T7874] device veth1_vlan entered promiscuous mode [ 461.255806][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 461.266267][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.277769][ T7874] device veth0_macvtap entered promiscuous mode [ 461.289308][ T7874] device veth1_macvtap entered promiscuous mode [ 461.317220][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.331529][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.343190][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.355264][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.365304][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.376289][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.386153][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.396871][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.409091][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.420675][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.432137][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.447826][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 461.457437][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 461.466076][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 461.475383][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.485357][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.511045][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.523716][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.535038][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.545023][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.555705][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.565884][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.577263][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.587166][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.597913][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.608900][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.621334][ T7874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.632321][ T7874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.641337][ T7874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.650913][ T7874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.662001][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 461.671451][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 461.703717][ T7874] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 461.730016][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.744071][ T7874] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 461.752052][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.768765][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 461.789675][ T4519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.798503][ T4519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.810034][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready