last executing test programs: 9m5.456849984s ago: executing program 32 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2000000068ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x54, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0xff0c, @local}}}]}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x7, 0x4}, {0xf000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0xf, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0xd, 0x0, 0x0, [0x80000005, 0x8, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m15.168067533s ago: executing program 0 (id=586): openat(0xffffffffffffff9c, 0x0, 0x201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) 5m11.374579381s ago: executing program 0 (id=595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xa0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f8008"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) 5m10.518847744s ago: executing program 0 (id=603): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x40086607, 0x0) 5m8.529925465s ago: executing program 0 (id=605): openat(0xffffffffffffff9c, 0x0, 0x201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) 5m1.625733301s ago: executing program 0 (id=622): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x800) 4m59.725684121s ago: executing program 0 (id=628): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880), &(0x7f0000001a40), 0x1000009, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)="d7", 0x2, r0}, 0x38) 4m44.043966726s ago: executing program 33 (id=628): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880), &(0x7f0000001a40), 0x1000009, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)="d7", 0x2, r0}, 0x38) 4m10.594453521s ago: executing program 6 (id=777): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) chdir(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000540)=[@clear_death={0x400c6314, 0xfffffffc}], 0x0, 0x0, 0x0}) 4m9.861544034s ago: executing program 6 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x101843) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x1c3001, 0x11) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f00000024c0)=""/209, 0xd1, 0x8) 4m9.20430389s ago: executing program 6 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) sched_setparam(r0, &(0x7f00000006c0)=0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_cmd={0x34, 0x5, 0x10, 0xe42b, 0x9, 0x40, 0x3, 0xf, 0x8, 0x37, 0x7, 0x80000000, 0x10, 0xf, 0x2, 0x116, [0x9, 0x8]}}) socket(0x2, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) 4m2.659537361s ago: executing program 6 (id=794): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0200', 0x6) write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r3, &(0x7f0000000840)='8\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='dummy_udc.0', 0xb) 4m2.481283863s ago: executing program 6 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) dup(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x7, 0x2003) 4m1.183708191s ago: executing program 6 (id=802): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xfb, 0x4a6, &(0x7f0000001400)="$eJzs3M9vVNUeAPDvnbbQvge0j4coCFpBI/FHSysqCxdoNHGhiYkucFnbgshADa0JkEaLMbg0JO6NSxP/AndujLowJm41cWlIiHZDcVVzf9FhOlM6pe3Y9vNJpnPO3HPnnHPvOXPPvaf3BrBl9ad/kogdEfFrRPTm0TsT9Odvc7PTo7dmp0eTmJ9/888kS3dzdnq0TFqu998icqQSUfkkiRPJ4nwnL10+O1Ktjl8o4oNT594fnLx0+ekz50ZOj58ePz98/PixZ4aef2742VWpZ1qvm/s/nDiw79W3r70+evLaOz98nRZr78F8eW097upWgwo10J9utb/mM/XLHmuh7BvBzppw0tnGgtCSjohId1dX1v97oyMWdl5vvPJxWwsHrKn02LS9+eKZeWATS6LdJQDaozzQp+e/5Wudhh7/CjdejNhWhOdmp0fnbte/MyrF511rmH9/RJyc+fuL9BWtXocAAFiBbGzzVKPxXyX2Zu/5XMeuYg6lLyL+FxG7I+L/EbEnIu6LyNLeHxEP5CvP9y4z//66+OLxT+V6wzKvknT890LN2G+upv7FW19HEduZ1b8rOXWmOn602CZHomt7Gh9aIo9vX/7ls2bLasd/6SvNvxwLFgW43ll3gW5sZGpktTbCjSsR+zsb1T+5PROQtoB9EbG/ta/eVQbOPPHVgWaJ7l7/JazCPNP8lxGP5/t/JurqX0qWnp8c7I7q+NHBslUs9uPPV99olv891X8V3Dj0YB5Y2P91KWoaWrU6fmGy9Tyu/vZp03Oalbb/bclb2Zz1T+/mn10cmZq6MBSxLXkti5fndNnnwwvrXhyZ6knjZfq0/R853Lj/7y7WSfd/upXSRnwwIh6KiIeLsj8SEYci4vAS9f/+pUffW6L+SSTRvv1/JWKs4e/f7fbfl9TO168g0HH2u2+azZgvb/8fi5nstzaX/f7dxXILeI+bDwAAADaESkTsiKQykIf7d0SlMjCQ/w//nvhPpToxOfXkqYkPzo/l9wj0RVelvNLVW3M9dCiZKb4xjw8X14qz5QtZxecdPdnygdGJ6lgb6w3k/bym/0fZ/1N/dLS7dMCac78WbF31/b/SpnIA6285x3/nArA53dn/u9M/Pe0qC7C+mh//l/egG2DjatT/P6qLG//D5rS4///e4JF1wGZk/g+2Lv0fti79H7akVm7njxPNFnVHRCuPBShvFlj5UwW6l32H/1YJlE+8WMu8euJydxSfRGXJxF1rVoyOFhvbpgikPWZ9M114hgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBG9k8AAAD//2nq3As=") prlimit64(0x0, 0x8, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@barrier}, {@grpid}, {@noauto_da_alloc}, {@grpjquota}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@dioread_nolock}, {@data_writeback}, {@resgid}]}, 0x1, 0x4a9, &(0x7f00000018c0)="$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") creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 3m56.83764434s ago: executing program 3 (id=807): openat(0xffffffffffffff9c, 0x0, 0x201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) 3m52.729141973s ago: executing program 3 (id=811): syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6a00142c00fe8000000000000000000000000000bbfe800000000000000000001d000000aa11000003000000", @ANYRES32=0x41424344], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000fff000/0x1000)=nil, 0x7fffdf003000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x34) ptrace(0x10, r3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x129a02, 0x5) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000100"/24, @ANYRES32=0x0, @ANYBLOB="10000300000000002000020000000000"], 0x2c, 0x1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c437f278767bf8a90c19efd1f6e63bb000000c1350704adb91f94bc3d5fa46cf46bb90129e5162787cd8466bcc85090b4f520d5c03de715f50059889ff63b58c232605bbe", @ANYRES16=r5, @ANYBLOB="030328bd7000fbdbdf250a000000080003", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) 3m50.915438843s ago: executing program 3 (id=814): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x4080000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000000440)={[{@dioread_lock}, {@noblock_validity}, {@grpquota}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@errors_continue}, {@resuid}, {@bh}, {@noload}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x181080, 0x30) io_submit(0x0, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x11, 0x0) rt_tgsigqueueinfo(0x0, r2, 0x1b, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) 3m46.145537603s ago: executing program 34 (id=802): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xfb, 0x4a6, &(0x7f0000001400)="$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") prlimit64(0x0, 0x8, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@barrier}, {@grpid}, {@noauto_da_alloc}, {@grpjquota}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@dioread_nolock}, {@data_writeback}, {@resgid}]}, 0x1, 0x4a9, &(0x7f00000018c0)="$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") creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 3m42.766416834s ago: executing program 3 (id=835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x2}]}]}, 0x38}}, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_AG_GEOMETRY(r5, 0xc080583d, &(0x7f00000000c0)={0x80, 0x6, 0x7, 0x40, 0x6d22, 0x1ff, 0x3, 0x8001}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x418, 0x2e0, 0x2e0, 0x418, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {0x0, 0xa, 0x0, 0xfffffffe}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1000, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xf9}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0), 0x4) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000280)=r0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x7) 3m42.52837384s ago: executing program 5 (id=837): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b0001002dbd7000fadbdf2500000000000000000000000000000000ac1e00010000000000000000000000004e2200004e23fff9"], 0xd8}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) setuid(0x0) r5 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) fchdir(r6) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) syz_open_procfs(r5, &(0x7f0000000040)='ns\x00') 3m38.038252334s ago: executing program 5 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) 3m37.967712301s ago: executing program 3 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x40086607, 0x0) 3m37.221619418s ago: executing program 3 (id=845): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9b42, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x13, r0, 0x954c3000) close_range(r0, r0, 0x0) 3m32.729511811s ago: executing program 5 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0200', 0x6) write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r3, &(0x7f0000000840)='8\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='dummy_udc.0', 0xb) 3m32.526999499s ago: executing program 5 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0200', 0x6) write(0xffffffffffffffff, &(0x7f0000000b40), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r4, 0x0, 0x0) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 3m32.309360811s ago: executing program 5 (id=852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x2}]}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_AG_GEOMETRY(r6, 0xc080583d, &(0x7f00000000c0)={0x80, 0x6, 0x7, 0x40, 0x6d22, 0x1ff, 0x3, 0x8001}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x418, 0x2e0, 0x2e0, 0x418, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {0x0, 0xa, 0x0, 0xfffffffe}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1000, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xf9}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0), 0x4) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000280)=r0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x7) 3m28.85332477s ago: executing program 5 (id=853): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x208ab, &(0x7f0000000540)={[{@errors_continue}, {@noblock_validity, 0x22}, {@errors_continue}, {@dax_inode}, {@data_err_ignore}, {@prjquota, 0x22}, {@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@usrjquota}]}, 0x1, 0x453, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000180)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@test_dummy_encryption}, {@nodelalloc}, {@norecovery}, {@delalloc}, {@usrquota}, {@noinit_itable}]}, 0x1, 0xbdb, &(0x7f00000023c0)="$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") chdir(0x0) 3m22.020269608s ago: executing program 35 (id=845): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9b42, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x13, r0, 0x954c3000) close_range(r0, r0, 0x0) 3m13.655525581s ago: executing program 36 (id=853): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x208ab, &(0x7f0000000540)={[{@errors_continue}, {@noblock_validity, 0x22}, {@errors_continue}, {@dax_inode}, {@data_err_ignore}, {@prjquota, 0x22}, {@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@usrjquota}]}, 0x1, 0x453, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000180)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@test_dummy_encryption}, {@nodelalloc}, {@norecovery}, {@delalloc}, {@usrquota}, {@noinit_itable}]}, 0x1, 0xbdb, &(0x7f00000023c0)="$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") chdir(0x0) 2m25.459559839s ago: executing program 4 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$ttynull(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) ioprio_set$pid(0x2, r0, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4e, 0x1, 0x8, 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) 2m23.247640173s ago: executing program 4 (id=934): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r3, 0x0, 0x24000052) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000b000000000000000000000009"], 0x0, 0x3e}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r7, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0xd, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r9}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009908fdffefff6b400000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') 2m21.013156452s ago: executing program 4 (id=942): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048015}, 0xc000) syz_io_uring_setup(0xfff, &(0x7f0000000000)={0x0, 0x9a81, 0x400, 0x2, 0x14d}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x10400005}}, 0x50) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) 2m19.631427909s ago: executing program 4 (id=946): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0200', 0x6) write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000840)='8\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='dummy_udc.0', 0xb) 2m17.233754357s ago: executing program 4 (id=952): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0200', 0x6) write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118e", 0x94) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r3, &(0x7f0000000840)='8\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='dummy_udc.0', 0xb) nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) 2m15.87284418s ago: executing program 4 (id=954): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x24000052) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000b000000000000000000000009"], 0x0, 0x3e}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r4, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009908fdffefff6b400000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') 2m0.764122189s ago: executing program 37 (id=954): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x24000052) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000b000000000000000000000009"], 0x0, 0x3e}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r4, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009908fdffefff6b400000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') 51.78956444s ago: executing program 7 (id=1118): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00') sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1300000042000062000000"], 0x18}}, 0x0) 49.803380961s ago: executing program 7 (id=1121): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20200, 0x0) fspick(r0, &(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x1, 0x2000402) lseek(r1, 0x406, 0x1) 47.151208539s ago: executing program 7 (id=1130): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x68, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r4}], 0x1, 0x0, 0x0, 0x0) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x13) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 45.159441951s ago: executing program 7 (id=1133): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x40086607, 0x0) 44.48710686s ago: executing program 7 (id=1136): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r2, 0x0, 0x24000052) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000b000000000000000000000009"], 0x0, 0x3e}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r6, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0xd, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r8}, 0x94) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009908fdffefff6b400000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') 42.71451358s ago: executing program 7 (id=1139): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x2040400) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x1, 0x1, 0x80000000000033, 0xc1b2}) 25.164005958s ago: executing program 38 (id=1139): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x2040400) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x1, 0x1, 0x80000000000033, 0xc1b2}) 15.606978972s ago: executing program 2 (id=1179): gettid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000001000)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x2, 0x0, [{0x400000b0, 0x0, 0x10001}, {0x400000b1, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.299525995s ago: executing program 2 (id=1181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noauto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid, 0x32}]}, 0x0, 0x4e0, &(0x7f0000001a40)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x1, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x13b, &(0x7f0000000540)=ANY=[], 0x0) 12.759849527s ago: executing program 8 (id=1189): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00000000000000003942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x4000) 12.550281547s ago: executing program 8 (id=1190): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x0, 0x0}, 0x10) 12.315786452s ago: executing program 8 (id=1192): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 12.315561992s ago: executing program 9 (id=1193): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x40086607, 0x0) 11.727829321s ago: executing program 9 (id=1194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0x1000, 0x4, 0xff, 0xf3, 0x4, 0xc1, 0x7, 0x0, 0x2e, 0x48}, {0x6000, 0x4000, 0x9, 0x6, 0x0, 0x4, 0x7d, 0x7, 0x5, 0xff, 0x6, 0x3}, {0x1111ffff, 0x1ff8, 0x4, 0x5, 0x85, 0x7, 0x40, 0x9, 0x7, 0xa7, 0x8, 0x81}, {0x27bf4dc8de03325f, 0x200000, 0xc, 0xc, 0x7f, 0x43, 0x5, 0xff, 0x8, 0xaf, 0xe, 0x11}, {0x4000, 0x10000, 0xb, 0x1, 0x15, 0x7, 0x91, 0x0, 0x7, 0x83, 0x5, 0x1}, {0x4000, 0x58000, 0x8, 0x7, 0x4, 0x6, 0x7, 0x10, 0x80, 0x10, 0x41}, {0x3000, 0x2, 0x3, 0x5, 0x7, 0xa, 0x0, 0x2, 0x5, 0x81, 0xff, 0x8}, {0x10000, 0x10000, 0x0, 0xd, 0x10, 0x7, 0x4, 0x24, 0xda, 0x25, 0xd9, 0x9}, {0x10000, 0x30}, {0xf1e167af5f80ecc8, 0xd}, 0x80000031, 0x0, 0x8080000, 0x52654, 0x7, 0x1003, 0x10000, [0x6800000000000000, 0x2, 0x0, 0x10000000fc]}) 11.640775932s ago: executing program 2 (id=1195): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbea, &(0x7f0000001c00)="$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") r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, r1) r2 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) 10.994466515s ago: executing program 8 (id=1199): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) r0 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, 0x0, 0x4000054) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.443692972s ago: executing program 8 (id=1201): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 9.064163712s ago: executing program 2 (id=1203): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20200, 0x0) fspick(r4, &(0x7f0000000300)='./bus\x00', 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000340)={0x9, 0x6d, 0x8, 0x2, 0x796ce76e, 0xffffff81}) socket(0x1, 0x1, 0x1) lseek(0xffffffffffffffff, 0x406, 0x1) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0x45, 0x1}, {0x4d, 0x2}, @cond=[{0x9, 0x5299, 0xc, 0x800, 0xf533, 0xf4a}, {0x8001, 0x807, 0x842, 0x17, 0x0, 0x25d1}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001300)=""/115) 8.726597502s ago: executing program 1 (id=1204): sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf250100000006000a00010000000500070018000000050011000900000006"], 0x34}}, 0x4800) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 8.381310924s ago: executing program 1 (id=1205): inotify_init() r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) tgkill(r0, r0, 0x3b) 8.275870209s ago: executing program 9 (id=1206): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 8.208409555s ago: executing program 1 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x2}]}]}, 0x38}}, 0x0) unshare(0x40000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4497651fc5a713ea52c5c9f63c1f6f56c35e45b85818491429b69778aa60a2ed51659fe36c8c99f5c507a23401fada1d8c76034bceabc1fd01cc8bfa35036d86f39548d9839dc584b20b35fa4548024c81975c49f66fdd3d65bbe9758649ba58506fd8c40d1ffad09fa01a08dc8e8338e7b31ac416315bd057933eb8f92b036c5ce2a97fec3316638e9730ddce8065620be3c2b6f7189cfa1517f8eeda7ecc5228b4de84695fb1ed97a9a28df733de777e091ed602632c03cb525f2fda4be0a8bd000000", @ANYRES32=r3, @ANYBLOB="fa7e0281faad3e69d668aa8ad19e0d9d8d2ba4719d6210228d6ef4e36851539565deee71f35bc72bb5925b8d0e820c23874a32cbde9a5b1d7afbd855f839b304d452ac35ab02e960f610dbd3428ff8d10e0d567f5c92505a5f3f282a8d994eeeeabba9eac6f1"], 0x38}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x41) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$P9_RSTATu(r7, 0x0, 0x62) bind$inet(r6, 0x0, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_AG_GEOMETRY(r8, 0xc080583d, &(0x7f00000000c0)={0x80, 0x6, 0x7, 0x40, 0x6d22, 0x1ff, 0x3, 0x8001}) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x418, 0x2e0, 0x2e0, 0x418, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {0x0, 0xa, 0x0, 0xfffffffe}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1000, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xf9}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0), 0x4) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000280)=r0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x7) 8.01692192s ago: executing program 2 (id=1208): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000300)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003090000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000014000b0000400600000a0000010a00000200500050000000020000ffff601003e80000000201010101", 0x2e}], 0x1, 0x0, 0x0) 6.142727154s ago: executing program 9 (id=1209): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 4.807777571s ago: executing program 1 (id=1210): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x68, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r4}], 0x1, 0x0, 0x0, 0x0) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x13) 4.159415155s ago: executing program 9 (id=1211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x2}]}]}, 0x38}}, 0x0) unshare(0x40000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_AG_GEOMETRY(r6, 0xc080583d, &(0x7f00000000c0)={0x80, 0x6, 0x7, 0x40, 0x6d22, 0x1ff, 0x3, 0x8001}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x418, 0x2e0, 0x2e0, 0x418, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {0x0, 0xa, 0x0, 0xfffffffe}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1000, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xf9}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0), 0x4) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000280)=r0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x7) 4.149740117s ago: executing program 8 (id=1212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) chdir(&(0x7f0000000140)='./file0\x00') ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 3.96714335s ago: executing program 1 (id=1213): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) 95.759357ms ago: executing program 1 (id=1214): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="201005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x16, 0x4, "8d563519"}, 0x0, 0x0, 0x0, 0x0}) 26.963493ms ago: executing program 9 (id=1215): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000180)=ANY=[], 0x1, 0x1514, &(0x7f0000001b80)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1216): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800718, &(0x7f0000000300)={[{@nodioread_nolock}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noquota}, {@resgid}, {@inlinecrypt}, {@errors_remount}]}, 0x4, 0x4a4, &(0x7f0000000a00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fchown(r0, 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): overy,delalloc,usrquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 299.130955][ T6671] loop5: detected capacity change from 0 to 512 [ 299.215707][ T6671] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 299.509628][ T6671] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,stripe=0x0000000000000007,nolazytime,noload,auto_da_alloc=0x0000000000007fff,min_batch_time=0x000000000000ffff,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 299.573318][ T26] audit: type=1800 audit(1790324842.308:14): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.576" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 300.164972][ T6690] netlink: 56 bytes leftover after parsing attributes in process `syz.5.582'. [ 300.213862][ T6688] loop3: detected capacity change from 0 to 8192 [ 300.409057][ T6688] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 301.152209][ T6688] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 301.193694][ T6688] FAT-fs (loop3): Filesystem has been set read-only [ 301.236116][ T6688] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 301.335997][ T6688] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 301.473626][ T6688] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 301.553518][ T6688] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 301.563794][ T6700] loop5: detected capacity change from 0 to 512 [ 301.714438][ T6700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 301.733195][ T6700] System zones: 1-12 [ 301.776726][ T6688] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 301.791309][ T6700] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.585: missing EA_INODE flag [ 301.891251][ T6700] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.585: error while reading EA inode 12 err=-117 [ 301.918721][ T6688] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 301.969226][ T6688] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 302.001965][ T6700] EXT4-fs (loop5): 1 orphan inode deleted [ 302.031303][ T6688] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 302.051857][ T6700] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 302.081256][ T6707] loop2: detected capacity change from 0 to 1024 [ 302.094308][ T6688] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 302.140800][ T6707] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 302.175401][ T26] audit: type=1800 audit(1790324844.908:15): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.581" name="file2" dev="loop3" ino=1048618 res=0 errno=0 [ 302.190041][ T6707] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 302.215747][ T6707] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #5: comm syz.2.587: unexpected bad inode w/o EXT4_IGET_BAD [ 302.270036][ T6707] EXT4-fs (loop2): no journal found [ 302.295252][ T6707] EXT4-fs (loop2): can't get journal size [ 302.408208][ T6707] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 302.461198][ T6709] EXT4-fs error (device loop5): ext4_check_dx_root:2268: inode #2: comm syz.5.585: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 303.771628][ T6717] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 305.530296][ T6733] loop2: detected capacity change from 0 to 4096 [ 305.694563][ T6737] netlink: 56 bytes leftover after parsing attributes in process `syz.0.595'. [ 305.851607][ T6733] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.894863][ T6748] loop5: detected capacity change from 0 to 1024 [ 305.995329][ T6750] loop4: detected capacity change from 0 to 1024 [ 306.051430][ T6748] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 306.068192][ T6750] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 306.162095][ T6750] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 306.203729][ T6750] EXT4-fs error (device loop4): ext4_get_journal_inode:5187: inode #5: comm syz.4.600: unexpected bad inode w/o EXT4_IGET_BAD [ 306.290658][ T6750] EXT4-fs (loop4): no journal found [ 306.295903][ T6750] EXT4-fs (loop4): can't get journal size [ 306.373301][ T6750] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 306.405040][ T6757] loop2: detected capacity change from 0 to 512 [ 306.444799][ T6748] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback. [ 306.491038][ T6757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 306.852865][ T6757] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.602: invalid indirect mapped block 32768 (level 2) [ 307.065411][ T6757] EXT4-fs (loop2): Remounting filesystem read-only [ 307.318077][ T6757] EXT4-fs (loop2): 1 orphan inode deleted [ 307.355526][ T6748] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.599: corrupted in-inode xattr [ 308.013373][ T6766] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 308.120875][ T6757] EXT4-fs (loop2): 1 truncate cleaned up [ 308.297303][ T6757] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,usrquota,. Quota mode: writeback. [ 309.037199][ C0] hrtimer: interrupt took 40166 ns [ 309.577801][ T6783] binder: 6782:6783 ioctl c0306201 200000000080 returned -14 [ 309.702082][ T6783] binder: 6782:6783 unknown command 1074553619 [ 309.722885][ T6783] binder: 6782:6783 ioctl c0306201 200000000000 returned -22 [ 310.112021][ T6794] netlink: 56 bytes leftover after parsing attributes in process `syz.4.613'. [ 312.737294][ T4675] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 313.015739][ T6809] loop2: detected capacity change from 0 to 1024 [ 313.107493][ T4675] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.138001][ T6809] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 313.164686][ T4675] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 313.207303][ T6809] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 313.242721][ T4675] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 313.259238][ T6809] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #5: comm syz.2.618: unexpected bad inode w/o EXT4_IGET_BAD [ 313.294020][ T4675] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 313.334995][ T6809] EXT4-fs (loop2): no journal found [ 313.348976][ T4675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.366259][ T6809] EXT4-fs (loop2): can't get journal size [ 313.454727][ T6809] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 314.386848][ T6814] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 314.743964][ T4675] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 314.754544][ T4675] usb 6-1: USB disconnect, device number 5 [ 316.159327][ T6840] loop4: detected capacity change from 0 to 512 [ 318.061787][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.068159][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.350929][ T6855] loop4: detected capacity change from 0 to 4096 [ 318.484538][ T6855] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 318.494836][ T6855] EXT4-fs (loop4): inline encryption not supported [ 318.502807][ T6855] EXT4-fs (loop4): Test dummy encryption mode enabled [ 318.533264][ T6855] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 318.541610][ T6855] System zones: 0-5 [ 318.572850][ T6855] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,test_dummy_encryption,nodelalloc,norecovery,delalloc,usrquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 324.345556][ T6900] loop3: detected capacity change from 0 to 512 [ 325.778519][ T6902] loop3: detected capacity change from 0 to 4096 [ 326.045981][ T6904] loop2: detected capacity change from 0 to 512 [ 326.686809][ T6906] loop5: detected capacity change from 0 to 256 [ 326.909944][ T6906] FAT-fs (loop5): Directory bread(block 64) failed [ 326.967364][ T6906] FAT-fs (loop5): Directory bread(block 65) failed [ 326.974072][ T6906] FAT-fs (loop5): Directory bread(block 66) failed [ 327.132561][ T6906] FAT-fs (loop5): Directory bread(block 67) failed [ 327.177476][ T6906] FAT-fs (loop5): Directory bread(block 68) failed [ 327.184048][ T6906] FAT-fs (loop5): Directory bread(block 69) failed [ 327.231921][ T6906] FAT-fs (loop5): Directory bread(block 70) failed [ 327.257394][ T6906] FAT-fs (loop5): Directory bread(block 71) failed [ 327.264014][ T6906] FAT-fs (loop5): Directory bread(block 72) failed [ 327.297347][ T6906] FAT-fs (loop5): Directory bread(block 73) failed [ 327.761904][ T6912] loop2: detected capacity change from 0 to 2048 [ 327.947369][ T6912] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 327.976293][ T6912] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.707501][ T6935] loop4: detected capacity change from 0 to 512 [ 330.156091][ T6953] loop2: detected capacity change from 0 to 512 [ 330.480635][ T6960] loop2: detected capacity change from 0 to 4096 [ 331.773965][ T6964] loop4: detected capacity change from 0 to 512 [ 331.793268][ T6960] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 331.803145][ T6960] EXT4-fs (loop2): inline encryption not supported [ 331.811468][ T6960] EXT4-fs (loop2): Test dummy encryption mode enabled [ 331.883828][ T6960] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 331.892495][ T6960] System zones: 0-5 [ 332.638059][ T6960] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,test_dummy_encryption,nodelalloc,norecovery,delalloc,usrquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 332.767374][ T6964] EXT4-fs warning (device loop4): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 332.987336][ T6964] EXT4-fs warning (device loop4): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 333.458846][ T6975] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 334.884633][ T6983] capability: warning: `syz.2.666' uses deprecated v2 capabilities in a way that may be insecure [ 335.473995][ T7002] loop5: detected capacity change from 0 to 2048 [ 335.596775][ T6978] chnl_net:caif_netlink_parms(): no params data found [ 335.607563][ T7002] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 335.662315][ T7002] EXT4-fs (loop5): shut down requested (1) [ 335.789688][ T6978] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.796995][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.806687][ T6978] device bridge_slave_0 entered promiscuous mode [ 335.815839][ T6978] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.823210][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.831544][ T6978] device bridge_slave_1 entered promiscuous mode [ 336.077816][ T4231] Bluetooth: hci5: command 0x0409 tx timeout [ 336.143664][ T6978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.162406][ T6978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.306187][ T6978] team0: Port device team_slave_0 added [ 336.351114][ T6978] team0: Port device team_slave_1 added [ 336.557920][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.587069][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.626415][ T7021] loop2: detected capacity change from 0 to 8192 [ 336.712560][ T7026] loop3: detected capacity change from 0 to 4096 [ 336.783602][ T6978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.025916][ T7026] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 337.748473][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.755457][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.814325][ T6978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.942635][ T7031] FAULT_INJECTION: forcing a failure. [ 337.942635][ T7031] name fail_futex, interval 1, probability 0, space 0, times 1 [ 338.048015][ T7031] CPU: 1 PID: 7031 Comm: syz.5.681 Not tainted syzkaller #0 [ 338.055343][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.065415][ T7031] Call Trace: [ 338.068696][ T7031] [ 338.071627][ T7031] dump_stack_lvl+0x188/0x250 [ 338.076328][ T7031] ? unwind_get_return_address+0x49/0x80 [ 338.082069][ T7031] ? stack_trace_save+0xf0/0xf0 [ 338.086935][ T7031] ? show_regs_print_info+0x20/0x20 [ 338.092236][ T7031] ? load_image+0x410/0x410 [ 338.096746][ T7031] ? kmem_cache_free+0x8f/0x210 [ 338.101687][ T7031] ? stack_trace_save+0xa6/0xf0 [ 338.106541][ T7031] ? stack_trace_snprint+0xe0/0xe0 [ 338.111653][ T7031] should_fail+0x383/0x4b0 [ 338.116076][ T7031] get_futex_key+0x1a1/0x12d0 [ 338.120761][ T7031] ? futex_wait_restart+0x250/0x250 [ 338.125953][ T7031] ? __lock_acquire+0x13dc/0x7b50 [ 338.130982][ T7031] futex_wake+0x101/0x540 [ 338.135316][ T7031] ? futex_wait+0x680/0x680 [ 338.139812][ T7031] ? verify_lock_unused+0x140/0x140 [ 338.145007][ T7031] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 338.150986][ T7031] ? verify_lock_unused+0x140/0x140 [ 338.156197][ T7031] do_futex+0xd83/0x12b0 [ 338.160444][ T7031] ? kasan_quarantine_put+0xd4/0x210 [ 338.165725][ T7031] ? lockdep_hardirqs_on+0x94/0x140 [ 338.170937][ T7031] ? futex_exit_release+0x1c0/0x1c0 [ 338.176137][ T7031] ? __context_tracking_exit+0x4c/0x80 [ 338.181607][ T7031] __se_sys_futex+0x389/0x420 [ 338.186295][ T7031] ? __x64_sys_futex+0xf0/0xf0 [ 338.191064][ T7031] ? __x64_sys_futex+0x1d/0xf0 [ 338.195828][ T7031] do_syscall_64+0x4c/0xa0 [ 338.200245][ T7031] ? clear_bhb_loop+0x30/0x80 [ 338.204920][ T7031] ? clear_bhb_loop+0x30/0x80 [ 338.209601][ T7031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 338.215502][ T7031] RIP: 0033:0x7f3aa5a05159 [ 338.219914][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.239605][ T7031] RSP: 002b:00007f3aa3c5d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 338.248040][ T7031] RAX: ffffffffffffffda RBX: 00007f3aa5c8cfa8 RCX: 00007f3aa5a05159 [ 338.256013][ T7031] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3aa5c8cfac [ 338.263989][ T7031] RBP: 00007f3aa5c8cfa0 R08: 00358ec8e3dd700f R09: 0000000000000000 [ 338.271970][ T7031] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 338.279940][ T7031] R13: 00007f3aa5c8d038 R14: 00007fff5d1b7990 R15: 00007fff5d1b7a78 [ 338.287927][ T7031] [ 338.295894][ T4230] Bluetooth: hci5: command 0x041b tx timeout [ 338.765569][ T7036] binfmt_misc: register: failed to install interpreter file ./bus [ 338.769426][ T6978] device hsr_slave_0 entered promiscuous mode [ 338.902850][ T6978] device hsr_slave_1 entered promiscuous mode [ 338.917930][ T6978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.963649][ T6978] Cannot create hsr debugfs directory [ 339.292408][ T7049] loop2: detected capacity change from 0 to 1024 [ 339.465232][ T6978] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 339.501276][ T6978] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 339.535824][ T6978] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 339.558818][ T6978] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 339.742650][ T7049] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 339.767287][ T7049] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 339.794725][ T7049] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #5: comm syz.2.688: unexpected bad inode w/o EXT4_IGET_BAD [ 339.817703][ T7049] EXT4-fs (loop2): no journal found [ 339.844995][ T7049] EXT4-fs (loop2): can't get journal size [ 339.863784][ T7049] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 339.924879][ T6978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.981016][ T6978] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.007822][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.022760][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.194622][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.281005][ T7069] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 340.687234][ T4675] Bluetooth: hci5: command 0x040f tx timeout [ 340.710977][ T7070] loop4: detected capacity change from 0 to 256 [ 340.930759][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.085909][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.093065][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.329641][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.347027][ T7070] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 341.369759][ T26] audit: type=1800 audit(1790324884.108:16): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.693" name="file1" dev="loop4" ino=1048624 res=0 errno=0 [ 341.397879][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.429947][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.437063][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.491191][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.507606][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.525088][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.559540][ T7079] loop2: detected capacity change from 0 to 512 [ 341.581933][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.606134][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.664817][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.672753][ T7079] EXT4-fs (loop2): Mount option "commit=0x00000000000000ff" incompatible with ext2 [ 341.706586][ T6978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.730400][ T6978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.765794][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.806314][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.826607][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.843850][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.854747][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.300538][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.562010][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.918100][ T4683] Bluetooth: hci5: command 0x0419 tx timeout [ 343.219553][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.225039][ T7108] loop3: detected capacity change from 0 to 1024 [ 343.233387][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.256278][ T6978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.341706][ T7108] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 343.367394][ T7108] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 343.388593][ T7108] EXT4-fs error (device loop3): ext4_get_journal_inode:5187: inode #5: comm syz.3.703: unexpected bad inode w/o EXT4_IGET_BAD [ 343.436786][ T7108] EXT4-fs (loop3): no journal found [ 343.448509][ T7108] EXT4-fs (loop3): can't get journal size [ 343.467506][ T7108] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 343.856287][ T7125] loop4: detected capacity change from 0 to 512 [ 343.884001][ T7125] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 343.914380][ T7126] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 343.958479][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 343.973280][ T7125] System zones: 1-12 [ 343.979248][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.015885][ T7125] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.707: missing EA_INODE flag [ 344.036933][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.060834][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.081179][ T7125] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.707: error while reading EA inode 12 err=-117 [ 344.114367][ T6978] device veth0_vlan entered promiscuous mode [ 344.150260][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.162607][ T7125] EXT4-fs (loop4): 1 orphan inode deleted [ 344.169849][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.182789][ T7125] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 344.233130][ T6978] device veth1_vlan entered promiscuous mode [ 344.276284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 344.296459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 344.313004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 344.329457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 344.352191][ T6978] device veth0_macvtap entered promiscuous mode [ 344.355028][ T7135] loop3: detected capacity change from 0 to 512 [ 344.391882][ T6978] device veth1_macvtap entered promiscuous mode [ 344.425704][ T7125] EXT4-fs error (device loop4): ext4_check_dx_root:2268: inode #2: comm syz.4.707: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 344.460199][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.491361][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.520484][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.662602][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.697339][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.729274][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.033888][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.287286][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.317767][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.377239][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.412101][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.613227][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.663578][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.708210][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.745253][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.773046][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.805792][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.843490][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.928403][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.939365][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.957194][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.969252][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.000931][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.016831][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.029761][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.047802][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.056830][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.065988][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.099379][ T6978] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.111707][ T6978] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.122188][ T6978] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.135874][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.713'. [ 346.194025][ T6978] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.122839][ T7163] loop3: detected capacity change from 0 to 1024 [ 347.170639][ T7163] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 347.180877][ T5429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.195281][ T5429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.216780][ T7163] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 347.237888][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.250466][ T7159] loop5: detected capacity change from 0 to 256 [ 347.256860][ T7163] EXT4-fs error (device loop3): ext4_get_journal_inode:5187: inode #5: comm syz.3.718: unexpected bad inode w/o EXT4_IGET_BAD [ 347.276076][ T5429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.291588][ T7159] exfat: Deprecated parameter 'utf8' [ 347.301400][ T7159] exfat: Deprecated parameter 'utf8' [ 347.304595][ T5429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.312094][ T7163] EXT4-fs (loop3): no journal found [ 347.327071][ T7159] exfat: Deprecated parameter 'namecase' [ 347.335171][ T7163] EXT4-fs (loop3): can't get journal size [ 347.340257][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.343003][ T7163] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 347.384095][ T7159] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 347.704210][ T7169] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 348.202726][ T4450] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.265187][ T4450] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.369311][ T4450] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.428674][ T4450] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.559383][ T7186] loop6: detected capacity change from 0 to 512 [ 349.569740][ T7199] netlink: 56 bytes leftover after parsing attributes in process `syz.3.729'. [ 349.634963][ T7201] loop5: detected capacity change from 0 to 2048 [ 349.689874][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.727'. [ 350.468227][ T7210] loop3: detected capacity change from 0 to 512 [ 350.685843][ T7201] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.584883][ T7216] loop4: detected capacity change from 0 to 8192 [ 351.925670][ T7242] loop3: detected capacity change from 0 to 512 [ 352.408286][ T7242] EXT4-fs (loop3): 1 orphan inode deleted [ 352.414129][ T7242] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 352.426238][ T7242] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.209683][ T7258] netlink: 56 bytes leftover after parsing attributes in process `syz.5.740'. [ 353.598906][ T7262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.741'. [ 354.290077][ T7271] loop2: detected capacity change from 0 to 512 [ 354.471470][ T7271] EXT4-fs (loop2): Test dummy encryption mode enabled [ 354.479117][ T7271] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 354.486489][ T7277] loop4: detected capacity change from 0 to 512 [ 355.544685][ T7290] loop2: detected capacity change from 0 to 256 [ 355.551807][ T7290] exfat: Deprecated parameter 'utf8' [ 355.557197][ T7290] exfat: Deprecated parameter 'namecase' [ 355.562858][ T7290] exfat: Deprecated parameter 'namecase' [ 355.568544][ T7290] exfat: Deprecated parameter 'namecase' [ 356.070036][ T7290] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 357.569726][ T7311] loop2: detected capacity change from 0 to 512 [ 357.638035][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.755'. [ 357.908882][ T7311] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 357.940367][ T7311] System zones: 1-12 [ 358.533593][ T7311] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.756: missing EA_INODE flag [ 358.587551][ T7311] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.756: error while reading EA inode 12 err=-117 [ 358.607667][ T7311] EXT4-fs (loop2): 1 orphan inode deleted [ 358.652658][ T7311] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 358.772175][ T7328] netlink: 56 bytes leftover after parsing attributes in process `syz.3.759'. [ 360.067185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 360.747207][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 360.757188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 360.767185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 360.777190][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 361.137165][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 361.367167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 361.477166][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 361.597167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 361.627164][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 361.777579][ T7302] binder: 7301:7302 ioctl 4018620d 0 returned -22 [ 362.142617][ T26] audit: type=1800 audit(1790324904.878:17): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.756" name="file0" dev="loop2" ino=18 res=0 errno=0 [ 362.207464][ T7347] loop3: detected capacity change from 0 to 512 [ 362.680365][ T7358] Mass Storage Function, version: 2009/09/11 [ 362.686618][ T7358] LUN: removable file: (no medium) [ 363.892744][ T7355] loop3: detected capacity change from 0 to 128 [ 363.981729][ T7364] loop2: detected capacity change from 0 to 512 [ 365.679021][ T7392] netlink: 56 bytes leftover after parsing attributes in process `syz.6.774'. [ 365.723469][ T4450] device hsr_slave_0 left promiscuous mode [ 365.756225][ T4450] device hsr_slave_1 left promiscuous mode [ 365.784934][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.816478][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.848542][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.868801][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.893241][ T4450] device bridge_slave_1 left promiscuous mode [ 365.916304][ T4450] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.943057][ T4450] device bridge_slave_0 left promiscuous mode [ 365.962877][ T4450] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.014521][ T4450] device veth1_macvtap left promiscuous mode [ 366.033747][ T4450] device veth0_macvtap left promiscuous mode [ 366.054034][ T4450] device veth1_vlan left promiscuous mode [ 366.076500][ T4450] device veth0_vlan left promiscuous mode [ 366.215024][ T7406] loop5: detected capacity change from 0 to 2048 [ 366.385583][ T7412] binder: 7411:7412 unknown command 1074553620 [ 366.392663][ T7406] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 366.404534][ T7412] binder: 7411:7412 ioctl c0306201 2000000001c0 returned -22 [ 368.567597][ T7433] syz.6.780 uses obsolete (PF_INET,SOCK_PACKET) [ 369.325401][ T7436] smpboot: CPU 1 is now offline [ 369.614307][ T7447] netlink: 56 bytes leftover after parsing attributes in process `syz.2.787'. [ 369.714311][ T4450] team0 (unregistering): Port device team_slave_1 removed [ 369.744101][ T4450] team0 (unregistering): Port device team_slave_0 removed [ 369.803481][ T4450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.835450][ T4450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.086454][ T4450] bond0 (unregistering): Released all slaves [ 374.034403][ T7458] loop2: detected capacity change from 0 to 512 [ 374.093543][ T7458] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.790: inode has both inline data and extents flags [ 374.134787][ T7462] loop3: detected capacity change from 0 to 512 [ 374.141420][ T7458] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.790: couldn't read orphan inode 15 (err -117) [ 374.262904][ T7458] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000006,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 374.294435][ T7464] loop4: detected capacity change from 0 to 2048 [ 374.507676][ T7464] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,minixdf,quota,errors=remount-ro,data_err=ignore,i_version,grpid,. Quota mode: writeback. [ 374.892278][ T7464] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.924245][ T7484] kvm: apic: phys broadcast and lowest prio [ 374.980660][ T7462] EXT4-fs warning (device loop3): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 375.196802][ T7462] EXT4-fs warning (device loop3): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 375.274264][ T26] audit: type=1800 audit(1790324918.008:18): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.791" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 375.308151][ T5743] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 375.328317][ T7491] loop2: detected capacity change from 0 to 128 [ 375.791316][ T7501] loop6: detected capacity change from 0 to 512 [ 375.890281][ T5743] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.954248][ T5743] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.011316][ T7501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 376.056462][ T7501] System zones: 1-12 [ 376.069847][ T5743] usb 6-1: config 0 interface 0 has no altsetting 0 [ 376.094241][ T7501] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.802: missing EA_INODE flag [ 376.122666][ T5743] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 376.162891][ T7501] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.802: error while reading EA inode 12 err=-117 [ 376.182566][ T5743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.265508][ T5743] usb 6-1: config 0 descriptor?? [ 376.274066][ T7501] EXT4-fs (loop6): 1 orphan inode deleted [ 376.313490][ T7501] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 376.455532][ T7514] loop4: detected capacity change from 0 to 256 [ 376.808485][ T5743] belkin 0003:1020:0006.0003: unknown main item tag 0x2 [ 378.735828][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.742602][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.774186][ T5743] belkin 0003:1020:0006.0003: unknown main item tag 0x0 [ 380.119548][ T5743] belkin 0003:1020:0006.0003: unbalanced collection at end of report description [ 381.737269][ T5743] belkin 0003:1020:0006.0003: parse failed [ 381.777074][ T5743] belkin: probe of 0003:1020:0006.0003 failed with error -22 [ 383.748157][ T5743] usb 6-1: USB disconnect, device number 6 [ 384.252146][ T7534] loop5: detected capacity change from 0 to 1024 [ 384.396318][ T7534] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 384.523764][ T7546] loop2: detected capacity change from 0 to 128 [ 384.544963][ T7534] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 385.949877][ T7534] EXT4-fs error (device loop5): ext4_get_journal_inode:5187: inode #5: comm syz.5.810: unexpected bad inode w/o EXT4_IGET_BAD [ 386.083196][ T7534] EXT4-fs (loop5): no journal found [ 386.184190][ T7534] EXT4-fs (loop5): can't get journal size [ 386.330713][ T7534] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 386.737640][ T7566] loop3: detected capacity change from 0 to 512 [ 386.966366][ T7570] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 387.134434][ T7566] EXT4-fs (loop3): Ignoring removed bh option [ 387.454852][ T7553] loop4: detected capacity change from 0 to 512 [ 387.614932][ T7590] loop2: detected capacity change from 0 to 512 [ 387.638219][ T7553] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 387.687505][ T7566] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 387.754623][ T7590] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.110380][ T7590] EXT4-fs (loop2): 1 truncate cleaned up [ 388.116202][ T7590] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 388.313013][ T7566] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 388.471798][ T7566] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.814: Corrupt directory, running e2fsck is recommended [ 388.762916][ T7566] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 388.939565][ T7566] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.814: corrupted in-inode xattr [ 388.964909][ T7616] loop4: detected capacity change from 0 to 512 [ 389.035519][ T7616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 389.097991][ T7616] System zones: 1-12 [ 389.134823][ T7616] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.826: missing EA_INODE flag [ 389.186569][ T7566] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.814: couldn't read orphan inode 15 (err -117) [ 389.229771][ T7616] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.826: error while reading EA inode 12 err=-117 [ 389.364541][ T7623] loop5: detected capacity change from 0 to 512 [ 389.371497][ T7616] EXT4-fs (loop4): 1 orphan inode deleted [ 389.422438][ T7616] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 389.457037][ T7566] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,nolazytime,grpjquota=.errors=continue,resuid=0x0000000000000000,bh,noload,,,errors=continue. Quota mode: writeback. [ 389.511170][ T7623] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 389.632456][ T7623] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.045110][ T26] audit: type=1800 audit(1790324935.778:19): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.827" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 393.520611][ T7644] netlink: 56 bytes leftover after parsing attributes in process `syz.4.832'. [ 394.520006][ T7649] chnl_net:caif_netlink_parms(): no params data found [ 394.533209][ T7671] netlink: 24 bytes leftover after parsing attributes in process `syz.5.837'. [ 397.743924][ T5743] Bluetooth: hci3: command 0x0409 tx timeout [ 398.908486][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.915702][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.038963][ T7649] device bridge_slave_0 entered promiscuous mode [ 399.565762][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.423913][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.497339][ T7649] device bridge_slave_1 entered promiscuous mode [ 400.675835][ T7649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.866528][ T6343] Bluetooth: hci3: command 0x041b tx timeout [ 400.880903][ T7649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.829763][ T7714] loop4: detected capacity change from 0 to 128 [ 403.872354][ T6343] Bluetooth: hci3: command 0x040f tx timeout [ 404.265692][ T7649] team0: Port device team_slave_0 added [ 404.346390][ T7649] team0: Port device team_slave_1 added [ 404.519900][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.607446][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.738859][ T6339] Bluetooth: hci3: command 0x0419 tx timeout [ 407.734736][ T4175] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 408.067324][ T7649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.185210][ T7744] loop5: detected capacity change from 0 to 512 [ 408.218623][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.397307][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.672087][ T7649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.791369][ T7751] loop5: detected capacity change from 0 to 4096 [ 409.905506][ T7649] device hsr_slave_0 entered promiscuous mode [ 410.068974][ T7751] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 410.129851][ T7649] device hsr_slave_1 entered promiscuous mode [ 410.230029][ T7649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.246328][ T7751] EXT4-fs (loop5): inline encryption not supported [ 410.272141][ T7649] Cannot create hsr debugfs directory [ 410.347718][ T7751] EXT4-fs (loop5): Test dummy encryption mode enabled [ 410.487808][ T7751] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 411.772029][ T7751] System zones: 0-5 [ 413.771895][ T7751] EXT4-fs: error -4 creating inode table initialization thread [ 414.226772][ T7751] EXT4-fs (loop5): mount failed [ 414.301922][ T7779] loop2: detected capacity change from 0 to 128 [ 414.367020][ T7649] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 414.682195][ T7649] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 414.854158][ T7649] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 415.083992][ T7649] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 415.411655][ T7791] loop4: detected capacity change from 0 to 512 [ 415.481944][ T7791] EXT4-fs (loop4): Ignoring removed bh option [ 415.529726][ T7791] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.864: corrupted in-inode xattr [ 415.542093][ T7791] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.864: couldn't read orphan inode 15 (err -117) [ 415.554408][ T7791] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 415.644814][ T7797] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.864: Unrecognised inode hash code 4 [ 415.656296][ T7797] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.864: Corrupt directory, running e2fsck is recommended [ 415.669495][ T7797] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.864: Unrecognised inode hash code 4 [ 415.680815][ T7797] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.864: Corrupt directory, running e2fsck is recommended [ 417.777335][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.978244][ T6343] Bluetooth: hci2: command 0x0409 tx timeout [ 419.993892][ T7649] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.074811][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 420.102692][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.154123][ T7815] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 420.252275][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 420.312279][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.392668][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.399772][ T4423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.531785][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 420.591408][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 420.657498][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.664585][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.770649][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 420.845486][ T7649] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.940600][ T7649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.005639][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 421.048276][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 421.102163][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 421.163354][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.219275][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 421.273602][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.327027][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 421.388967][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.429336][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.489482][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.569718][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.639226][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.777803][ T7830] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 421.997066][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.024479][ T7830] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 422.037457][ T5743] Bluetooth: hci2: command 0x041b tx timeout [ 422.047549][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.058836][ T7649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.149379][ T7808] chnl_net:caif_netlink_parms(): no params data found [ 422.196618][ T7830] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 422.733674][ T7808] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.783424][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.825848][ T7808] device bridge_slave_0 entered promiscuous mode [ 422.878749][ T7808] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.934592][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.994725][ T7808] device bridge_slave_1 entered promiscuous mode [ 423.184231][ T7808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.352117][ T7808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.524385][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 423.607882][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.626096][ T7888] loop4: detected capacity change from 0 to 512 [ 423.673228][ T7649] device veth0_vlan entered promiscuous mode [ 423.742027][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 423.763925][ T7888] EXT4-fs (loop4): 1 orphan inode deleted [ 423.784948][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.813758][ T7888] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 423.859559][ T7649] device veth1_vlan entered promiscuous mode [ 423.879537][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.925801][ T7888] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.941239][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.990525][ T7808] team0: Port device team_slave_0 added [ 424.048530][ T4450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.141442][ T6343] Bluetooth: hci2: command 0x040f tx timeout [ 425.048289][ T7808] team0: Port device team_slave_1 added [ 425.129919][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 425.299310][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.367242][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 427.364997][ T5746] Bluetooth: hci2: command 0x0419 tx timeout [ 428.368538][ T7649] device veth0_macvtap entered promiscuous mode [ 428.656459][ T6343] Bluetooth: hci5: command 0x041b tx timeout [ 428.698298][ T7649] device veth1_macvtap entered promiscuous mode [ 429.212254][ T4450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.377448][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 429.615552][ T4450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.675429][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.702808][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.854516][ T7808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.920000][ T4450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.994819][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.022177][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.335840][ T7808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.366213][ T6343] Bluetooth: hci5: command 0x040f tx timeout [ 432.364623][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.378460][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.397343][ T5746] Bluetooth: hci5: command 0x0419 tx timeout [ 433.730848][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.770864][ T7935] netlink: 56 bytes leftover after parsing attributes in process `syz.4.885'. [ 433.789803][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.805706][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.816456][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.025194][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.882'. [ 434.050606][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.065006][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.076706][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.091119][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.113889][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.146905][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 434.164103][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 434.223376][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.250568][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.276164][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.301277][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.326411][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.353549][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.376012][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.405906][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.430926][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.501318][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.627494][ T7953] loop4: detected capacity change from 0 to 32768 [ 434.707814][ T7953] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.886 (7953) [ 434.725764][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.753866][ T7953] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 434.763178][ T7953] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 434.772671][ T7953] BTRFS info (device loop4): use zstd compression, level 3 [ 434.779987][ T7953] BTRFS info (device loop4): force clearing of disk cache [ 434.787164][ T7953] BTRFS info (device loop4): enabling disk space caching [ 434.794255][ T7953] BTRFS info (device loop4): disk space caching is enabled [ 434.801495][ T7953] BTRFS info (device loop4): has skinny extents [ 434.855633][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 434.901679][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 434.958743][ T7649] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.997244][ T7953] BTRFS info (device loop4): enabling ssd optimizations [ 435.004999][ T7953] BTRFS info (device loop4): clearing free space tree [ 435.012040][ T7953] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 435.021706][ T7953] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 435.080260][ T7649] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.132939][ T7649] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.172218][ T7649] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.389736][ T7808] device hsr_slave_0 entered promiscuous mode [ 435.438241][ T7808] device hsr_slave_1 entered promiscuous mode [ 435.496011][ T7808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.752918][ T7808] Cannot create hsr debugfs directory [ 435.970789][ T4450] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.128858][ T4450] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.222380][ T7892] chnl_net:caif_netlink_parms(): no params data found [ 436.311839][ T4450] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.386838][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.382612][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.738405][ T4450] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.834363][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 440.309665][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.315958][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.347589][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.427602][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.404679][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.497423][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.505132][ T7892] device bridge_slave_0 entered promiscuous mode [ 440.573602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 440.613119][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.630258][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.684643][ T7892] device bridge_slave_1 entered promiscuous mode [ 440.888318][ T7892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.984353][ T7808] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 441.116080][ T7892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.171574][ T4450] tipc: Left network mode [ 441.176530][ T7808] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 441.238630][ T7808] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 441.534334][ T7892] team0: Port device team_slave_0 added [ 441.553111][ T7808] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 441.642845][ T7892] team0: Port device team_slave_1 added [ 441.653405][ T8040] netlink: 56 bytes leftover after parsing attributes in process `syz.2.894'. [ 441.841670][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.957881][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.372873][ T7892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.396233][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.753429][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.801419][ T8062] loop2: detected capacity change from 0 to 16 [ 446.011862][ T8062] erofs: (device loop2): mounted with root inode @ nid 36. [ 446.061000][ T7892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.296940][ T7892] device hsr_slave_0 entered promiscuous mode [ 446.373399][ T7892] device hsr_slave_1 entered promiscuous mode [ 446.411489][ T7892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.456840][ T7892] Cannot create hsr debugfs directory [ 446.525076][ T7808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.638559][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 446.672983][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 446.738975][ T7808] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.851469][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 446.885275][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.987501][ T7244] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.994653][ T7244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.208359][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 447.260562][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 447.327721][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 447.399250][ T7244] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.406341][ T7244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.546046][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 447.608598][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 447.735605][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 447.782865][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 447.842860][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 447.888703][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 447.935930][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 447.969248][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 448.005085][ T7808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.056764][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 448.119130][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 448.152025][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 448.175347][ T8104] loop7: detected capacity change from 0 to 512 [ 448.191716][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 448.321066][ T8104] EXT4-fs (loop7): 1 orphan inode deleted [ 448.397569][ T8104] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 448.461502][ T8104] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.486200][ T7892] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 448.584819][ T7892] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 448.667882][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 448.685523][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.727395][ T7892] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 448.828312][ T8120] loop7: detected capacity change from 0 to 512 [ 448.856713][ T7808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.945934][ T7892] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 448.973681][ T8120] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 449.052187][ T8120] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.386560][ T8135] loop7: detected capacity change from 0 to 512 [ 449.400410][ T4450] device hsr_slave_0 left promiscuous mode [ 449.426592][ T4450] device hsr_slave_1 left promiscuous mode [ 449.462758][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.480481][ T8135] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 449.510096][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.520020][ T8135] System zones: 1-12 [ 449.524608][ T8135] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.904: missing EA_INODE flag [ 449.547077][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.572555][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.584179][ T8135] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.904: error while reading EA inode 12 err=-117 [ 449.607564][ T4450] device bridge_slave_1 left promiscuous mode [ 449.624054][ T4450] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.631707][ T8135] EXT4-fs (loop7): 1 orphan inode deleted [ 449.651566][ T8135] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 449.677799][ T4450] device bridge_slave_0 left promiscuous mode [ 449.694087][ T4450] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.840985][ T4450] device hsr_slave_0 left promiscuous mode [ 449.859798][ T4450] device hsr_slave_1 left promiscuous mode [ 451.719508][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.736396][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.721835][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.079458][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.115774][ T8140] loop2: detected capacity change from 0 to 512 [ 453.144943][ T4450] device bridge_slave_1 left promiscuous mode [ 453.295184][ T4450] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.725510][ T4450] device bridge_slave_0 left promiscuous mode [ 454.747325][ T4450] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.876635][ T4450] device veth1_macvtap left promiscuous mode [ 454.897018][ T4450] device veth0_macvtap left promiscuous mode [ 454.930344][ T4450] device veth1_vlan left promiscuous mode [ 454.959718][ T4450] device veth0_vlan left promiscuous mode [ 454.996599][ T4450] device veth1_macvtap left promiscuous mode [ 455.028779][ T4450] device veth0_macvtap left promiscuous mode [ 455.063837][ T4450] device veth1_vlan left promiscuous mode [ 455.414561][ T4450] device veth0_vlan left promiscuous mode [ 458.166086][ T8168] binder: 8162:8168 ioctl 4018620d 0 returned -22 [ 458.604313][ T4450] team0 (unregistering): Port device team_slave_1 removed [ 458.708022][ T4450] team0 (unregistering): Port device team_slave_0 removed [ 458.778214][ T4450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.657327][ T8174] Mass Storage Function, version: 2009/09/11 [ 459.663327][ T8174] LUN: removable file: (no medium) [ 460.597853][ T4450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.715710][ T8176] loop2: detected capacity change from 0 to 128 [ 461.093670][ T4450] bond0 (unregistering): Released all slaves [ 461.596595][ T4450] team0 (unregistering): Port device team_slave_1 removed [ 461.670722][ T4450] team0 (unregistering): Port device team_slave_0 removed [ 461.715325][ T4450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.801458][ T4450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.040642][ T4450] bond0 (unregistering): Released all slaves [ 462.222994][ T7892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.226269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 463.289918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.329955][ T7892] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.384363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 463.517757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 463.755192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.813529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.889610][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.896950][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.994040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 464.009327][ T8206] loop7: detected capacity change from 0 to 512 [ 464.052332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.116571][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.123718][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.359976][ T7808] device veth0_vlan entered promiscuous mode [ 465.507840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 466.547753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 466.650032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 466.726009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 466.792790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 466.867609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 466.928138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 466.944252][ T8229] loop7: detected capacity change from 0 to 1024 [ 466.972477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 467.021813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 467.138708][ T7808] device veth1_vlan entered promiscuous mode [ 467.197265][ T8229] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 467.226687][ T7892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 467.294850][ T7892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.344222][ T8229] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 467.381471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.406651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 467.448431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 467.461570][ T8229] EXT4-fs error (device loop7): ext4_get_journal_inode:5187: inode #5: comm syz.7.923: unexpected bad inode w/o EXT4_IGET_BAD [ 467.495367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 467.637952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.257236][ T8235] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 468.699493][ T8229] EXT4-fs (loop7): no journal found [ 468.704700][ T8229] EXT4-fs (loop7): can't get journal size [ 468.711085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.747691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.823381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 468.871383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 468.937966][ T8229] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 469.004183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 469.059449][ T7808] device veth0_macvtap entered promiscuous mode [ 469.081595][ T8240] loop2: detected capacity change from 0 to 128 [ 469.100762][ T7808] device veth1_macvtap entered promiscuous mode [ 469.234773][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.534422][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.636290][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.760178][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.881793][ T8229] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 469.917308][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.971713][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.025804][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.081091][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.180346][ T7808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.237946][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 470.257862][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 470.343996][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 470.396207][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.451446][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.506310][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.545229][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.585086][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.605331][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.615444][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.630008][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.666638][ T7808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.732593][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.847364][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.897622][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 471.438468][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 471.504924][ T7892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.553005][ T7808] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.603874][ T7808] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.661094][ T7808] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.710342][ T7808] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.037617][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.074381][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.135898][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 472.239202][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 472.308198][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 472.319360][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.352247][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.389457][ T7892] device veth0_vlan entered promiscuous mode [ 472.458181][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 472.470955][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 472.547843][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 472.626297][ T7892] device veth1_vlan entered promiscuous mode [ 472.685882][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 472.742507][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 472.880865][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 473.121813][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 473.218814][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 473.276869][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 473.352313][ T7892] device veth0_macvtap entered promiscuous mode [ 473.402448][ T7892] device veth1_macvtap entered promiscuous mode [ 473.492654][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.651366][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.810871][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.910262][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.980261][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.021138][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.064037][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.104063][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.140910][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.183005][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.229833][ T7892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.286427][ T8321] loop7: detected capacity change from 0 to 128 [ 475.324686][ T8311] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 475.334098][ T8311] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 475.343668][ T8311] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 475.354464][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 475.406786][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 475.667438][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 475.752757][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 475.883722][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.702108][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.749857][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.824767][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.950395][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.977136][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.027008][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.085428][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.123664][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.175921][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.270216][ T7892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.438060][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.655699][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.723951][ T7892] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.792573][ T7892] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.859713][ T7892] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.926402][ T7892] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.275310][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.330120][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.393439][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 478.487239][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.527176][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.607630][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 478.643665][ T8358] binder: 8347:8358 ioctl 4018620d 0 returned -22 [ 479.780057][ T4450] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.007871][ T4450] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.246060][ T4450] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.086359][ T4450] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.068473][ T8421] loop9: detected capacity change from 0 to 128 [ 487.103893][ T8450] netlink: 56 bytes leftover after parsing attributes in process `syz.9.968'. [ 487.707716][ T8455] binder: 8440:8455 ioctl 4018620d 0 returned -22 [ 488.036308][ T4450] device hsr_slave_0 left promiscuous mode [ 488.086440][ T4450] device hsr_slave_1 left promiscuous mode [ 488.224132][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.465279][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.070872][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.607611][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.684741][ T4450] device bridge_slave_1 left promiscuous mode [ 489.721477][ T4450] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.781151][ T4450] device bridge_slave_0 left promiscuous mode [ 489.840560][ T4450] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.931760][ T4450] device veth1_macvtap left promiscuous mode [ 489.974585][ T4450] device veth0_macvtap left promiscuous mode [ 490.016515][ T4450] device veth1_vlan left promiscuous mode [ 490.057628][ T4450] device veth0_vlan left promiscuous mode [ 490.223530][ T8492] loop7: detected capacity change from 0 to 128 [ 492.264372][ T8506] loop8: detected capacity change from 0 to 32768 [ 492.917539][ T8506] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.975 (8506) [ 493.002515][ T8506] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 493.011358][ T8506] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 493.020792][ T8506] BTRFS info (device loop8): use zstd compression, level 3 [ 493.028002][ T8506] BTRFS info (device loop8): force clearing of disk cache [ 493.035106][ T8506] BTRFS info (device loop8): enabling disk space caching [ 493.042150][ T8506] BTRFS info (device loop8): disk space caching is enabled [ 493.049350][ T8506] BTRFS info (device loop8): has skinny extents [ 493.328731][ T8513] netlink: 56 bytes leftover after parsing attributes in process `syz.2.980'. [ 493.407854][ T8506] BTRFS info (device loop8): enabling ssd optimizations [ 493.418267][ T8506] BTRFS info (device loop8): clearing free space tree [ 493.425145][ T8506] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 493.434819][ T8506] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 493.971695][ T4450] team0 (unregistering): Port device team_slave_1 removed [ 494.069913][ T4450] team0 (unregistering): Port device team_slave_0 removed [ 494.156759][ T4450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.287670][ T4450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.631516][ T4450] bond0 (unregistering): Released all slaves [ 495.770748][ T8499] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 495.780009][ T8499] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 495.789493][ T8499] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 496.089967][ T8561] loop7: detected capacity change from 0 to 128 [ 497.549808][ T8566] chnl_net:caif_netlink_parms(): no params data found [ 497.829065][ T8566] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.893854][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.988854][ T8566] device bridge_slave_0 entered promiscuous mode [ 498.065366][ T8566] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.147177][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.160892][ T8592] binder: 8568:8592 ioctl 4018620d 0 returned -22 [ 498.184298][ T8566] device bridge_slave_1 entered promiscuous mode [ 499.065381][ T4228] Bluetooth: hci0: command 0x0409 tx timeout [ 499.365340][ T8566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.862025][ T8566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.532914][ T8566] team0: Port device team_slave_0 added [ 501.717213][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.723511][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.732688][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 501.835539][ T8633] loop8: detected capacity change from 0 to 128 [ 501.889194][ T8566] team0: Port device team_slave_1 added [ 501.978194][ T8630] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 501.988410][ T8630] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 501.998786][ T8630] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 502.305339][ T8566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.389235][ T8566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.575411][ T8640] loop9: detected capacity change from 0 to 32768 [ 502.599989][ T8640] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 scanned by syz.9.1003 (8640) [ 502.667219][ T8640] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 502.675975][ T8640] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 502.686036][ T8640] BTRFS info (device loop9): use zstd compression, level 3 [ 502.693321][ T8640] BTRFS info (device loop9): force clearing of disk cache [ 502.700476][ T8640] BTRFS info (device loop9): enabling disk space caching [ 502.707534][ T8640] BTRFS info (device loop9): disk space caching is enabled [ 502.715389][ T8640] BTRFS info (device loop9): has skinny extents [ 502.906353][ T8566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.977271][ T8640] BTRFS info (device loop9): enabling ssd optimizations [ 502.984870][ T8640] BTRFS info (device loop9): clearing free space tree [ 502.991962][ T8640] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 503.001711][ T8640] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 503.067671][ T8566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.296368][ T8566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.967199][ T5745] Bluetooth: hci0: command 0x040f tx timeout [ 504.453525][ T8566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.674076][ T8566] device hsr_slave_0 entered promiscuous mode [ 504.736785][ T8566] device hsr_slave_1 entered promiscuous mode [ 504.793380][ T8566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.859931][ T8566] Cannot create hsr debugfs directory [ 506.045082][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 508.817842][ T8707] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 508.827277][ T8707] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 508.836709][ T8707] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 509.063817][ T8715] loop8: detected capacity change from 0 to 128 [ 510.631133][ T8735] binder: 8714:8735 ioctl 4018620d 0 returned -22 [ 511.693401][ T8566] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 511.715215][ T8753] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1021'. [ 512.720707][ T4450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.826946][ T8566] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 512.883126][ T4450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.965639][ T8566] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 513.035040][ T4450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.133782][ T8566] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 513.267764][ T4450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.086400][ T8781] loop2: detected capacity change from 0 to 32768 [ 514.181603][ T8781] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1020 (8781) [ 514.214681][ T8566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.234933][ T8781] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 514.243747][ T8781] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 514.253255][ T8781] BTRFS info (device loop2): use zstd compression, level 3 [ 514.260482][ T8781] BTRFS info (device loop2): force clearing of disk cache [ 514.267632][ T8781] BTRFS info (device loop2): enabling disk space caching [ 514.274650][ T8781] BTRFS info (device loop2): disk space caching is enabled [ 514.282534][ T8781] BTRFS info (device loop2): has skinny extents [ 514.403104][ T8566] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.507585][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 514.535127][ T8781] BTRFS info (device loop2): enabling ssd optimizations [ 514.549370][ T8781] BTRFS info (device loop2): clearing free space tree [ 514.556172][ T8781] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 514.566007][ T8781] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 514.600747][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.772614][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.837910][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.901983][ T1486] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.909096][ T1486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.094372][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 516.169554][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 517.041729][ T1486] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.048843][ T1486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.105581][ T8138] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop2 scanned by udevd (8138) [ 517.165883][ T8807] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 517.176107][ T8807] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 517.185739][ T8807] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 517.287545][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 517.321880][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 517.398857][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 517.467863][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 517.561266][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 517.633105][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 517.707782][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 517.797942][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 517.806242][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 517.990212][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 518.035619][ T8832] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1033'. [ 518.091092][ T8566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 518.884476][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 518.967865][ T4450] tipc: Left network mode [ 518.972471][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 519.020188][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 519.187424][ T1324] Bluetooth: hci3: command 0x0406 tx timeout [ 520.090389][ T8849] binder: 8822:8849 ioctl 4018620d 0 returned -22 [ 521.151459][ T8566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.270691][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 521.307395][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 521.394118][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 521.470929][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 521.538155][ T8566] device veth0_vlan entered promiscuous mode [ 521.724287][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 521.755767][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 521.845741][ T8872] loop9: detected capacity change from 0 to 128 [ 521.860580][ T8566] device veth1_vlan entered promiscuous mode [ 521.901900][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 521.926428][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 521.998207][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 522.046089][ T8566] device veth0_macvtap entered promiscuous mode [ 522.168521][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 522.315158][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 523.228886][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 523.362517][ T8883] loop7: detected capacity change from 0 to 32768 [ 523.415488][ T8566] device veth1_macvtap entered promiscuous mode [ 523.624487][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 524.147701][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 525.389629][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.577634][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.659916][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.680569][ T8899] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1045'. [ 525.751458][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.271671][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.327061][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.387241][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.445223][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.496094][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.543684][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.680817][ T8566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.873059][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 527.095550][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 527.151830][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.221677][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.276288][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.315254][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.338698][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.364735][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.392229][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.434203][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.459601][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.493720][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.582731][ T8566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.740986][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 528.357412][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 528.424064][ T8566] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.233135][ T8566] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.277163][ T8566] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.326386][ T8566] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.616665][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.647502][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.751647][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 530.323906][ T8941] binder: 8932:8941 ioctl 4018620d 0 returned -22 [ 530.373543][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.415966][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.487851][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 530.614870][ T4450] device hsr_slave_0 left promiscuous mode [ 530.681030][ T4450] device hsr_slave_1 left promiscuous mode [ 530.737679][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.745133][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.839315][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.895973][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.954342][ T4450] device bridge_slave_1 left promiscuous mode [ 531.004393][ T4450] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.068187][ T4450] device bridge_slave_0 left promiscuous mode [ 531.117844][ T4450] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.261081][ T4450] device veth1_macvtap left promiscuous mode [ 531.303943][ T4450] device veth0_macvtap left promiscuous mode [ 531.427724][ T8957] loop8: detected capacity change from 0 to 32768 [ 531.588352][ T4450] device veth1_vlan left promiscuous mode [ 531.595396][ T4450] device veth0_vlan left promiscuous mode [ 535.390674][ T8976] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1059'. [ 536.848535][ T4450] team0 (unregistering): Port device team_slave_1 removed [ 536.940598][ T4450] team0 (unregistering): Port device team_slave_0 removed [ 537.050205][ T4450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.132727][ T4450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.820908][ T8994] binder: 8993:8994 ioctl 4018620d 0 returned -22 [ 538.163035][ T4450] bond0 (unregistering): Released all slaves [ 542.986925][ T8967] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 542.996197][ T8967] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 543.006690][ T8967] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 543.232352][ T9016] loop7: detected capacity change from 0 to 1024 [ 543.477290][ T9016] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 543.534257][ T9016] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 543.624183][ T9016] EXT4-fs error (device loop7): ext4_get_journal_inode:5187: inode #5: comm syz.7.1064: unexpected bad inode w/o EXT4_IGET_BAD [ 543.702238][ T9016] EXT4-fs (loop7): no journal found [ 543.749365][ T9016] EXT4-fs (loop7): can't get journal size [ 543.793470][ T9016] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 544.145891][ T9016] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 544.342042][ T9040] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1074'. [ 544.979994][ T9043] binder: 9041:9043 ioctl 4018620d 0 returned -22 [ 545.096669][ T5746] Bluetooth: hci2: command 0x0406 tx timeout [ 550.040602][ T1324] Bluetooth: hci5: command 0x0406 tx timeout [ 550.172759][ T9091] loop2: detected capacity change from 0 to 32768 [ 550.205109][ T9092] loop1: detected capacity change from 0 to 1024 [ 551.365572][ T9091] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 551.374380][ T9091] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 551.383940][ T9091] BTRFS info (device loop2): use zstd compression, level 3 [ 551.391152][ T9091] BTRFS info (device loop2): force clearing of disk cache [ 551.398294][ T9091] BTRFS info (device loop2): enabling disk space caching [ 551.405298][ T9091] BTRFS info (device loop2): disk space caching is enabled [ 551.412516][ T9091] BTRFS info (device loop2): has skinny extents [ 551.680331][ T9092] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 551.774967][ T9092] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 551.872772][ T9092] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #5: comm syz.1.1086: unexpected bad inode w/o EXT4_IGET_BAD [ 551.973692][ T9092] EXT4-fs (loop1): no journal found [ 552.005400][ T9092] EXT4-fs (loop1): can't get journal size [ 552.054292][ T9092] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 552.186679][ T9091] BTRFS error (device loop2): open_ctree failed: -12 [ 552.195778][ T8138] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by udevd (8138) [ 552.921800][ T9125] binder: 9124:9125 ioctl 4018620d 0 returned -22 [ 553.097666][ T9131] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1090'. [ 553.118823][ T9092] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 555.657210][ T4266] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 555.910783][ T9151] loop7: detected capacity change from 0 to 32768 [ 555.987197][ T4266] usb 2-1: device descriptor read/64, error -71 [ 556.037613][ T9151] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 556.046339][ T9151] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 556.055849][ T9151] BTRFS info (device loop7): use zstd compression, level 3 [ 556.063697][ T9151] BTRFS info (device loop7): force clearing of disk cache [ 556.070832][ T9151] BTRFS info (device loop7): enabling disk space caching [ 556.077865][ T9151] BTRFS info (device loop7): disk space caching is enabled [ 556.085132][ T9151] BTRFS info (device loop7): has skinny extents [ 556.283708][ T9151] BTRFS info (device loop7): enabling ssd optimizations [ 556.297320][ T4266] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 556.309004][ T9151] BTRFS info (device loop7): clearing free space tree [ 556.315852][ T9151] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 556.325521][ T9151] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 556.637245][ T4266] usb 2-1: device descriptor read/64, error -71 [ 556.797241][ T4266] usb usb2-port1: attempt power cycle [ 557.257142][ T4266] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 557.547260][ T4266] usb 2-1: device descriptor read/8, error -71 [ 560.950551][ T9213] binder: 9210:9213 ioctl 4018620d 0 returned -22 [ 561.098690][ T9226] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1107'. [ 563.211069][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.217446][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.987158][ T13] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 564.067948][ T9259] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1116'. [ 564.263364][ T13] usb 10-1: device descriptor read/64, error -71 [ 564.557241][ T13] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 564.787728][ T13] usb 10-1: device descriptor read/64, error -71 [ 565.034266][ T13] usb usb10-port1: attempt power cycle [ 567.077642][ T13] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 567.231052][ T9298] loop1: detected capacity change from 0 to 32768 [ 567.260143][ T9298] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1120 (9298) [ 567.288870][ T9298] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 567.297728][ T9298] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 567.307129][ T9298] BTRFS info (device loop1): use zstd compression, level 3 [ 567.314309][ T9298] BTRFS info (device loop1): force clearing of disk cache [ 567.321525][ T9298] BTRFS info (device loop1): enabling disk space caching [ 567.329229][ T9298] BTRFS info (device loop1): disk space caching is enabled [ 567.336411][ T9298] BTRFS info (device loop1): has skinny extents [ 567.347192][ T13] usb 10-1: device not accepting address 4, error -71 [ 567.393513][ T9304] loop7: detected capacity change from 0 to 512 [ 568.603904][ T9328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1125'. [ 568.629840][ T9304] EXT4-fs (loop7): 1 orphan inode deleted [ 568.640063][ T9298] BTRFS info (device loop1): enabling ssd optimizations [ 568.648064][ T9298] BTRFS info (device loop1): clearing free space tree [ 568.655006][ T9298] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 568.665456][ T9298] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 568.776468][ T9304] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 569.417924][ T9304] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.948581][ T8138] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop1 scanned by udevd (8138) [ 575.048296][ T9401] binder: 9399:9401 ioctl 4018620d 0 returned -22 [ 576.655630][ T9433] loop2: detected capacity change from 0 to 256 [ 578.560565][ T9433] exfat: Deprecated parameter 'utf8' [ 578.607233][ T9433] exfat: Deprecated parameter 'utf8' [ 578.710284][ T9433] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 583.758060][ T9468] binder: 9465:9468 ioctl 4018620d 0 returned -22 [ 586.329742][ T9493] loop2: detected capacity change from 0 to 256 [ 586.405870][ T9493] exfat: Deprecated parameter 'utf8' [ 586.480271][ T9493] exfat: Deprecated parameter 'utf8' [ 586.563731][ T9493] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf0f4daa6, utbl_chksum : 0xe619d30d) [ 586.974712][ T9502] loop2: detected capacity change from 0 to 512 [ 587.154712][ T9502] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 587.272145][ T9502] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.193503][ T9535] binder: 9534:9535 ioctl 4018620d 0 returned -22 [ 593.346403][ T9539] loop2: detected capacity change from 0 to 512 [ 593.511897][ T9539] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 593.617221][ T9539] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.857487][ T9537] chnl_net:caif_netlink_parms(): no params data found [ 594.145602][ T9527] loop1: detected capacity change from 0 to 40427 [ 594.160227][ T9537] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.207841][ T9537] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.228337][ T9527] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 594.299161][ T9537] device bridge_slave_0 entered promiscuous mode [ 594.317713][ T9527] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 594.400451][ T9537] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.436754][ T9527] F2FS-fs (loop1): invalid crc value [ 594.513839][ T9537] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.583056][ T9527] F2FS-fs (loop1): Found nat_bits in checkpoint [ 594.595561][ T9537] device bridge_slave_1 entered promiscuous mode [ 594.643303][ T9561] loop9: detected capacity change from 0 to 512 [ 594.750837][ T9537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.775570][ T9561] EXT4-fs (loop9): Ignoring removed orlov option [ 594.843439][ T9527] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 594.859007][ T9561] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,orlov,inode_readahead_blks=0x0000000000000100,,errors=continue. Quota mode: writeback. [ 594.893204][ T9537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.957229][ T9527] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 595.050375][ T9561] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.098582][ T9537] team0: Port device team_slave_0 added [ 595.208176][ T9537] team0: Port device team_slave_1 added [ 595.287653][ T9561] EXT4-fs (loop9): Remounting file system with no journal so ignoring journalled data option [ 595.306635][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.326005][ T9573] loop2: detected capacity change from 0 to 512 [ 595.379896][ T9561] EXT4-fs (loop9): Cannot change journaled quota options when quota turned on [ 595.411785][ T9573] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 595.421305][ T5750] Bluetooth: hci1: command 0x0409 tx timeout [ 595.441496][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.492409][ T5748] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 595.543372][ T9573] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,usrjquota=./file0,,errors=continue. Quota mode: writeback. [ 595.620644][ T9573] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.672783][ T9537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.845315][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.755459][ T5748] usb 9-1: Using ep0 maxpacket: 16 [ 597.740976][ T5750] Bluetooth: hci1: command 0x041b tx timeout [ 598.741105][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.147415][ T5748] usb 9-1: device descriptor read/all, error -71 [ 599.263109][ T9585] loop1: detected capacity change from 0 to 512 [ 599.322099][ T9585] EXT4-fs (loop1): Ignoring removed bh option [ 599.380158][ T9585] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.1170: corrupted in-inode xattr [ 600.433080][ T9585] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1170: couldn't read orphan inode 15 (err -117) [ 600.445390][ T9585] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 600.557671][ T9537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.156088][ T9594] binder: 9593:9594 ioctl 4018620d 0 returned -22 [ 601.201731][ T5750] Bluetooth: hci1: command 0x040f tx timeout [ 601.533733][ T9537] device hsr_slave_0 entered promiscuous mode [ 601.643912][ T9537] device hsr_slave_1 entered promiscuous mode [ 601.690335][ T9610] loop2: detected capacity change from 0 to 512 [ 601.722693][ T9611] loop1: detected capacity change from 0 to 1024 [ 601.806866][ T9610] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 601.819291][ T9611] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 601.887651][ T9611] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 601.945872][ T9610] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.1181: Allocating blocks 41-42 which overlap fs metadata [ 602.006739][ T9611] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #5: comm syz.1.1182: unexpected bad inode w/o EXT4_IGET_BAD [ 602.125139][ T9] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.148512][ T9610] EXT4-fs (loop2): Remounting filesystem read-only [ 602.155425][ T9610] Quota error (device loop2): write_blk: dquota write failed [ 602.193206][ T9611] EXT4-fs (loop1): no journal found [ 602.231252][ T9611] EXT4-fs (loop1): can't get journal size [ 602.284103][ T9611] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 602.317271][ T9610] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 602.326594][ T9610] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.1181: Allocating blocks 41-42 which overlap fs metadata [ 602.365494][ T9] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.462035][ T9610] EXT4-fs (loop2): Remounting filesystem read-only [ 602.530327][ T9610] Quota error (device loop2): write_blk: dquota write failed [ 602.633998][ T5743] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 602.653783][ T9610] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 602.690877][ T9] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.721674][ T9610] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1181: Failed to acquire dquot type 1 [ 602.770604][ T9] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.809765][ T9610] EXT4-fs (loop2): Remounting filesystem read-only [ 602.845857][ T9630] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 602.870974][ T9610] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 602.909655][ T5743] usb 10-1: Using ep0 maxpacket: 16 [ 602.920946][ T9634] loop8: detected capacity change from 0 to 256 [ 602.995555][ T9634] exfat: Deprecated parameter 'utf8' [ 603.023200][ T9610] EXT4-fs (loop2): Remounting filesystem read-only [ 603.030060][ T5743] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.064766][ T9634] exfat: Deprecated parameter 'utf8' [ 603.091911][ T9610] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.1181: corrupted inode contents [ 603.109496][ T5743] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 603.143730][ T9634] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 603.214649][ T9610] EXT4-fs (loop2): Remounting filesystem read-only [ 603.260557][ T5751] Bluetooth: hci1: command 0x0419 tx timeout [ 603.284583][ T9610] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #12: comm syz.2.1181: mark_inode_dirty error [ 603.337231][ T5743] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 603.390814][ T9610] EXT4-fs (loop2): Remounting filesystem read-only [ 603.404959][ T5743] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.417659][ T9610] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.1181: corrupted inode contents [ 603.450296][ T5743] usb 10-1: Product: syz [ 603.454559][ T5743] usb 10-1: Manufacturer: syz [ 603.480537][ T9610] EXT4-fs (loop2): Remounting filesystem read-only [ 603.497184][ T5743] usb 10-1: SerialNumber: syz [ 603.518938][ T9610] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.1181: mark_inode_dirty error [ 603.647785][ T9610] EXT4-fs (loop2): Remounting filesystem read-only [ 603.700415][ T9610] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.1181: corrupted inode contents [ 603.811804][ T9610] EXT4-fs (loop2): Remounting filesystem read-only [ 603.827253][ T5743] usb 10-1: 0:2 : does not exist [ 603.856582][ T9610] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 603.895302][ T5743] usb 10-1: USB disconnect, device number 6 [ 603.955336][ T9652] netlink: 532 bytes leftover after parsing attributes in process `syz.8.1188'. [ 603.978912][ T9610] EXT4-fs (loop2): Remounting filesystem read-only [ 604.020454][ T9610] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.1181: corrupted inode contents [ 604.113064][ T9610] EXT4-fs (loop2): Remounting filesystem read-only [ 604.156100][ T9659] netlink: 'syz.8.1189': attribute type 4 has an invalid length. [ 604.166067][ T9610] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.1181: mark_inode_dirty error [ 604.219426][ T9659] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1189'. [ 604.235718][ T9610] EXT4-fs (loop2): Remounting filesystem read-only [ 604.268272][ T9610] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 604.326758][ T9610] EXT4-fs (loop2): Remounting filesystem read-only [ 604.424517][ T9610] EXT4-fs (loop2): 1 truncate cleaned up [ 604.473372][ T9610] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000020,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,nojournal_checksum,barrier=0x0000000000000003,noauto_da_alloc,journal_ioprio=0x0000000000000005,resgid=0x0000. Quota mode: writeback. [ 604.610159][ T9669] loop8: detected capacity change from 0 to 512 [ 605.092610][ T9669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 605.173531][ T9669] System zones: 1-12 [ 605.231388][ T9669] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.1192: missing EA_INODE flag [ 605.258603][ T9] device hsr_slave_0 left promiscuous mode [ 605.312143][ T9669] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1192: error while reading EA inode 12 err=-117 [ 605.338261][ T9] device hsr_slave_1 left promiscuous mode [ 605.361323][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.487409][ T9669] EXT4-fs (loop8): 1 orphan inode deleted [ 605.493156][ T9669] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 605.521394][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.551882][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.564298][ T9682] loop2: detected capacity change from 0 to 4096 [ 605.612967][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.685297][ T9] device bridge_slave_1 left promiscuous mode [ 605.713155][ T9682] EXT4-fs (loop2): Test dummy encryption mode enabled [ 605.748807][ T9669] overlayfs: invalid origin (0000) [ 605.775107][ T9682] EXT4-fs (loop2): inline encryption not supported [ 605.782142][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.857207][ T9682] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 605.897915][ T9] device bridge_slave_0 left promiscuous mode [ 605.948592][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.969368][ T9682] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 606.034807][ T9682] System zones: 0-5 [ 606.169736][ T9682] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 606.197738][ T9] device veth1_macvtap left promiscuous mode [ 607.245917][ T9] device veth0_macvtap left promiscuous mode [ 607.278983][ T9] device veth1_vlan left promiscuous mode [ 607.312392][ T9705] loop1: detected capacity change from 0 to 256 [ 607.323095][ T9] device veth0_vlan left promiscuous mode [ 607.544226][ T9709] loop8: detected capacity change from 0 to 32768 [ 608.294941][ T9728] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 608.343019][ T9720] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 608.389838][ T9720] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 608.676450][ T9737] binder: 9735:9737 ioctl c0306201 200000000080 returned -22 [ 612.225918][ T9] team0 (unregistering): Port device team_slave_1 removed [ 612.280658][ T9] team0 (unregistering): Port device team_slave_0 removed [ 612.324296][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.382171][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.611477][ T9] bond0 (unregistering): Released all slaves [ 616.951635][ T9782] loop2: detected capacity change from 0 to 512 [ 616.959449][ T9781] loop9: detected capacity change from 0 to 256 [ 617.036762][ T9781] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb880d79d, utbl_chksum : 0xe619d30d) [ 617.085584][ T9782] EXT4-fs (loop2): inline encryption not supported [ 617.159434][ T9782] ------------[ cut here ]------------ [ 617.228224][ T9782] EA inode 11 i_nlink=2 [ 617.228343][ T9782] WARNING: CPU: 0 PID: 9782 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4fe/0x560 [ 617.242976][ T5751] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 617.354567][ T9782] Modules linked in: [ 617.380297][ T9782] CPU: 0 PID: 9782 Comm: syz.2.1216 Not tainted syzkaller #0 [ 617.426441][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 617.448494][ T9537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 617.497080][ T5751] usb 2-1: Using ep0 maxpacket: 32 [ 617.533631][ T9537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 617.552322][ T9782] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 617.591461][ T9537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 617.611591][ T9782] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 15 fe a1 ff 49 8b 34 24 48 c7 c7 00 9a 3d 8a 44 89 fa e8 72 ff 99 07 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 617.647231][ T5751] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 617.681496][ T5751] usb 2-1: config 0 has no interface number 0 [ 617.711421][ T5751] usb 2-1: config 0 interface 184 has no altsetting 0 [ 617.740835][ T9782] RSP: 0018:ffffc900030af400 EFLAGS: 00010246 [ 617.760050][ T9537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 617.782142][ T9782] RAX: 8eaf5272a997a500 RBX: ffff88805fdba280 RCX: 0000000000080000 [ 617.840119][ T9782] RDX: ffffc900063b1000 RSI: 0000000000010455 RDI: 0000000000010456 [ 617.901294][ T9782] RBP: ffffc900030af4f0 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 617.909743][ T5751] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 617.952707][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.971806][ T9782] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff88805fdba0c8 [ 618.020760][ T5751] usb 2-1: Product: syz [ 618.034923][ T9782] R13: dffffc0000000000 R14: ffff88805fdba088 R15: 0000000000000002 [ 618.052370][ T9537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.064580][ T5751] usb 2-1: Manufacturer: syz [ 618.086901][ T5751] usb 2-1: SerialNumber: syz [ 618.095631][ T9782] FS: 00007fc007ece6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 618.133559][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 618.142000][ T5751] usb 2-1: config 0 descriptor?? [ 618.164535][ T9782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.186890][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 618.213209][ T9782] CR2: 0000559a43d27950 CR3: 000000004ce5f000 CR4: 00000000003506f0 [ 618.222814][ T5751] smsc75xx v1.0.0 [ 618.245257][ T9537] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.273055][ T9782] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 618.298264][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 618.330273][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.341655][ T9782] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 618.380640][ T4450] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.387739][ T4450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.404110][ T9782] Call Trace: [ 618.421997][ T9782] [ 618.442558][ T9782] ? ext4_xattr_block_csum+0x560/0x560 [ 618.470926][ T9782] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 618.493096][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 618.525499][ T9782] ext4_xattr_inode_dec_ref_all+0x94c/0xf90 [ 618.544170][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 618.564846][ T9782] ? errseq_check+0x3c/0x70 [ 618.589942][ T9782] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 618.599427][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.632817][ T9782] ? __ext4_journal_ensure_credits+0x450/0x450 [ 618.655931][ T4450] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.663045][ T4450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.686368][ T9782] ? ext4_get_inode_loc+0xf6/0x120 [ 618.713192][ T9782] ext4_xattr_delete_inode+0xada/0xca0 [ 618.742517][ T9782] ? ext4_expand_extra_isize_ea+0x18c0/0x18c0 [ 618.752805][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 618.782895][ T9782] ext4_evict_inode+0xc0c/0x1050 [ 618.817182][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 618.826567][ T9782] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 618.871036][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 618.882463][ T9782] ? do_raw_spin_unlock+0x11d/0x230 [ 618.909942][ T9782] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 618.956749][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 618.970357][ T9782] evict+0x4b6/0x8b0 [ 618.984905][ T9782] ? proc_nr_inodes+0x320/0x320 [ 619.010247][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 619.023800][ T9782] ? do_raw_spin_unlock+0x11d/0x230 [ 619.044663][ T9782] ? _raw_spin_unlock+0x24/0x40 [ 619.054318][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 619.075837][ T9782] ? iput+0x6ea/0x880 [ 619.092139][ T9782] ext4_orphan_cleanup+0xc96/0x14f0 [ 619.105743][ T9537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 619.130330][ T9782] ? _raw_write_unlock+0x24/0x40 [ 619.151586][ T9782] ? ext4_orphan_del+0xc90/0xc90 [ 619.166778][ T9537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 619.188932][ T9782] ? errseq_check_and_advance+0x62/0x120 [ 619.208587][ T9782] ext4_fill_super+0x8c65/0x93f0 [ 619.223394][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 619.236267][ T9782] ? format_decode+0x8b1/0x1330 [ 619.251573][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 619.271958][ T9782] ? ext4_mount+0x40/0x40 [ 619.289732][ T9782] ? set_blocksize+0x1f1/0x360 [ 619.299988][ T5751] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 619.311407][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 619.329121][ T9782] ? sb_set_blocksize+0xa5/0xe0 [ 619.346894][ T5751] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 619.360246][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 619.369318][ T9782] mount_bdev+0x28a/0x3c0 [ 619.389286][ T9782] ? ext4_mount+0x40/0x40 [ 619.405875][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 619.420490][ T9782] legacy_get_tree+0xe6/0x180 [ 619.435202][ T9782] ? ext4_errno_to_code+0x160/0x160 [ 619.456159][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 619.473799][ T9782] vfs_get_tree+0x88/0x270 [ 619.495996][ T9782] do_new_mount+0x247/0xa40 [ 619.527285][ T9782] __se_sys_mount+0x2e3/0x3d0 [ 619.552770][ T9782] ? __x64_sys_mount+0xc0/0xc0 [ 619.576873][ T9782] ? lockdep_hardirqs_on+0x94/0x140 [ 619.606405][ T9782] ? __x64_sys_mount+0x1c/0xc0 [ 619.635436][ T9782] do_syscall_64+0x4c/0xa0 [ 619.662073][ T9782] ? clear_bhb_loop+0x30/0x80 [ 619.667285][ T5751] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 619.695426][ T9782] ? clear_bhb_loop+0x30/0x80 [ 619.713980][ T5751] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 619.733418][ T9782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 619.764116][ T9782] RIP: 0033:0x7fc009c773ca [ 619.775500][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 619.790714][ T5751] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 619.812035][ T9782] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.837364][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 619.862597][ T5751] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 619.878270][ T9537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.915490][ T5751] usb 2-1: USB disconnect, device number 6 [ 619.935069][ T9782] RSP: 002b:00007fc007ecde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 619.961896][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 620.011692][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 620.023995][ T9782] RAX: ffffffffffffffda RBX: 00007fc007ecdee0 RCX: 00007fc009c773ca [ 620.064445][ T9537] device veth0_vlan entered promiscuous mode [ 620.076031][ T9782] RDX: 00002000000009c0 RSI: 0000200000000040 RDI: 00007fc007ecdea0 [ 620.106236][ T9782] RBP: 00002000000009c0 R08: 00007fc007ecdee0 R09: 0000000000800718 [ 620.125128][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 620.153133][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 620.166684][ T9782] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000040 [ 620.195744][ T9537] device veth1_vlan entered promiscuous mode [ 620.206475][ T9782] R13: 00007fc007ecdea0 R14: 00000000000004a4 R15: 000000000000002c [ 620.233893][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 620.259895][ T9782] [ 620.271540][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 620.294877][ T9782] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 620.302172][ T9782] CPU: 0 PID: 9782 Comm: syz.2.1216 Not tainted syzkaller #0 [ 620.309525][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.319575][ T9782] Call Trace: [ 620.322838][ T9782] [ 620.325770][ T9782] dump_stack_lvl+0x188/0x250 [ 620.330452][ T9782] ? show_regs_print_info+0x20/0x20 [ 620.335628][ T9782] ? load_image+0x410/0x410 [ 620.340112][ T9782] panic+0x2f8/0x850 [ 620.344080][ T9782] ? bpf_jit_dump+0xd0/0xd0 [ 620.348565][ T9782] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 620.354521][ T9782] __warn+0x248/0x2b0 [ 620.358483][ T9782] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 620.364442][ T9782] report_bug+0x1b9/0x2e0 [ 620.368810][ T9782] handle_bug+0x3a/0x70 [ 620.372943][ T9782] exc_invalid_op+0x16/0x40 [ 620.377419][ T9782] asm_exc_invalid_op+0x16/0x20 [ 620.382248][ T9782] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 620.388814][ T9782] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 15 fe a1 ff 49 8b 34 24 48 c7 c7 00 9a 3d 8a 44 89 fa e8 72 ff 99 07 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 620.408406][ T9782] RSP: 0018:ffffc900030af400 EFLAGS: 00010246 [ 620.414457][ T9782] RAX: 8eaf5272a997a500 RBX: ffff88805fdba280 RCX: 0000000000080000 [ 620.422405][ T9782] RDX: ffffc900063b1000 RSI: 0000000000010455 RDI: 0000000000010456 [ 620.430382][ T9782] RBP: ffffc900030af4f0 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 620.438336][ T9782] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff88805fdba0c8 [ 620.446302][ T9782] R13: dffffc0000000000 R14: ffff88805fdba088 R15: 0000000000000002 [ 620.454265][ T9782] ? ext4_xattr_block_csum+0x560/0x560 [ 620.459736][ T9782] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 620.465809][ T9782] ext4_xattr_inode_dec_ref_all+0x94c/0xf90 [ 620.471688][ T9782] ? errseq_check+0x3c/0x70 [ 620.476168][ T9782] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 620.481779][ T9782] ? __ext4_journal_ensure_credits+0x450/0x450 [ 620.487927][ T9782] ? ext4_get_inode_loc+0xf6/0x120 [ 620.493017][ T9782] ext4_xattr_delete_inode+0xada/0xca0 [ 620.498457][ T9782] ? ext4_expand_extra_isize_ea+0x18c0/0x18c0 [ 620.505050][ T9782] ext4_evict_inode+0xc0c/0x1050 [ 620.509993][ T9782] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 620.515884][ T9782] ? do_raw_spin_unlock+0x11d/0x230 [ 620.521071][ T9782] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 620.526957][ T9782] evict+0x4b6/0x8b0 [ 620.530857][ T9782] ? proc_nr_inodes+0x320/0x320 [ 620.535706][ T9782] ? do_raw_spin_unlock+0x11d/0x230 [ 620.540979][ T9782] ? _raw_spin_unlock+0x24/0x40 [ 620.545818][ T9782] ? iput+0x6ea/0x880 [ 620.549805][ T9782] ext4_orphan_cleanup+0xc96/0x14f0 [ 620.555002][ T9782] ? _raw_write_unlock+0x24/0x40 [ 620.559922][ T9782] ? ext4_orphan_del+0xc90/0xc90 [ 620.564858][ T9782] ? errseq_check_and_advance+0x62/0x120 [ 620.570470][ T9782] ext4_fill_super+0x8c65/0x93f0 [ 620.575475][ T9782] ? format_decode+0x8b1/0x1330 [ 620.580323][ T9782] ? ext4_mount+0x40/0x40 [ 620.584628][ T9782] ? set_blocksize+0x1f1/0x360 [ 620.589374][ T9782] ? sb_set_blocksize+0xa5/0xe0 [ 620.594205][ T9782] mount_bdev+0x28a/0x3c0 [ 620.598510][ T9782] ? ext4_mount+0x40/0x40 [ 620.602843][ T9782] legacy_get_tree+0xe6/0x180 [ 620.607496][ T9782] ? ext4_errno_to_code+0x160/0x160 [ 620.612673][ T9782] vfs_get_tree+0x88/0x270 [ 620.617070][ T9782] do_new_mount+0x247/0xa40 [ 620.621579][ T9782] __se_sys_mount+0x2e3/0x3d0 [ 620.626235][ T9782] ? __x64_sys_mount+0xc0/0xc0 [ 620.630974][ T9782] ? lockdep_hardirqs_on+0x94/0x140 [ 620.636150][ T9782] ? __x64_sys_mount+0x1c/0xc0 [ 620.640905][ T9782] do_syscall_64+0x4c/0xa0 [ 620.645295][ T9782] ? clear_bhb_loop+0x30/0x80 [ 620.649949][ T9782] ? clear_bhb_loop+0x30/0x80 [ 620.654608][ T9782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 620.660478][ T9782] RIP: 0033:0x7fc009c773ca [ 620.664896][ T9782] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.684483][ T9782] RSP: 002b:00007fc007ecde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 620.692880][ T9782] RAX: ffffffffffffffda RBX: 00007fc007ecdee0 RCX: 00007fc009c773ca [ 620.700828][ T9782] RDX: 00002000000009c0 RSI: 0000200000000040 RDI: 00007fc007ecdea0 [ 620.708793][ T9782] RBP: 00002000000009c0 R08: 00007fc007ecdee0 R09: 0000000000800718 [ 620.716741][ T9782] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000040 [ 620.724694][ T9782] R13: 00007fc007ecdea0 R14: 00000000000004a4 R15: 000000000000002c [ 620.732672][ T9782] [ 620.735737][ T9782] Kernel Offset: disabled [ 620.740239][ T9782] Rebooting in 86400 seconds..