last executing test programs: 19m41.682437666s ago: executing program 32 (id=27): inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xffffffffffffffce) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r3}) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3a, 0x0, 0x0) 19m5.813826695s ago: executing program 0 (id=175): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x28008008) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4b, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x7, 0x40, 0xf, 0x1, 0x0, 0xb1}) 19m5.416975366s ago: executing program 0 (id=177): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x48}}, 0x0) 19m5.109652006s ago: executing program 0 (id=178): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 19m4.121483803s ago: executing program 0 (id=187): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x550f, &(0x7f000000cf00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0xa0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) lseek(r0, 0x10001, 0x4) getdents64(0xffffffffffffffff, 0x0, 0x0) 19m0.314379793s ago: executing program 0 (id=198): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 18m58.687282113s ago: executing program 0 (id=203): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) 18m58.31836486s ago: executing program 33 (id=203): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) 18m48.179945156s ago: executing program 1 (id=237): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x0, &(0x7f0000000400)) getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008a1f, &(0x7f0000000a00)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}], [{@flag='nolazytime'}]}, 0x1, 0x4c9, &(0x7f0000000f00)="$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") 18m46.961776773s ago: executing program 1 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000200)={0x3, 0xffffffffffffffff, 0x2000001}) 18m46.756952729s ago: executing program 1 (id=240): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x130100a, 0x4) 18m46.51756352s ago: executing program 1 (id=243): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x550f, &(0x7f000000cf00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0xa0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) lseek(r0, 0x10001, 0x4) getdents64(0xffffffffffffffff, 0x0, 0x0) 18m43.989903275s ago: executing program 1 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_CORR={0x10, 0x1, {0xb7c, 0x6d, 0x9}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 18m41.617842551s ago: executing program 1 (id=258): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x8401) 18m41.373375382s ago: executing program 34 (id=258): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x8401) 15m45.435986208s ago: executing program 7 (id=719): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x1, 0x0}) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, 0x0) 15m43.960391768s ago: executing program 7 (id=723): io_uring_setup(0x516, 0x0) io_uring_setup(0x30db, &(0x7f0000000140)={0x0, 0xfffffffe, 0x3000, 0xfffffffe, 0x3d8}) socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80001) socket$netlink(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x10b, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r2, 0x407, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x40000002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019540)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) 15m39.217499629s ago: executing program 7 (id=738): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x68, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x20000090) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="ff", 0x1, 0x24814, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) socket$unix(0x1, 0x1, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 15m37.50173502s ago: executing program 7 (id=742): sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x17) shmctl$SHM_UNLOCK(0x0, 0xc) 15m35.025554739s ago: executing program 7 (id=753): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r4, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) 15m33.407262397s ago: executing program 7 (id=754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000400}, 0x0) 15m18.00717189s ago: executing program 35 (id=754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000400}, 0x0) 7m51.542819962s ago: executing program 4 (id=1859): socketpair(0x29, 0x2, 0xffffff13, &(0x7f00000002c0)) 7m51.233782872s ago: executing program 4 (id=1861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x2000000000000}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 7m51.072201662s ago: executing program 4 (id=1864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0xd8, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6a, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x10b002, 0xe000, 0xc, 0x0, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x80a0000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xff7e}, 0x60000004, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 7m50.375001362s ago: executing program 4 (id=1867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000001240)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {0x0, 0xfffffffd, 0xfffffffe}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 7m48.390119658s ago: executing program 4 (id=1877): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000180), 0x2d, 0x1c3e03) socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d120b2d, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 7m45.881853311s ago: executing program 4 (id=1882): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x60140, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x3, 0xa, 0x2, 0x8, "000064640000001503fe00", "defda28a", '\x00', 't0\x00', ['\x00', "f548000000004000000900", "00000600", "00008100000200"]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x2004, 0xfffffffffffffd3b) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000000240)=""/89, 0x59) 7m30.399768914s ago: executing program 36 (id=1882): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x60140, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x3, 0xa, 0x2, 0x8, "000064640000001503fe00", "defda28a", '\x00', 't0\x00', ['\x00', "f548000000004000000900", "00000600", "00008100000200"]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x2004, 0xfffffffffffffd3b) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000000240)=""/89, 0x59) 42.669745599s ago: executing program 6 (id=3108): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x82, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 42.324574603s ago: executing program 8 (id=3109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x100, 0xb152, 0x3, 0x1fb, 0xfffffff9, 0x5}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)={0x2, 0x9, 0x4, 0x3, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x200, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1101, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000500)=[@decrefs], 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_writeback}]}, 0x1, 0x546, &(0x7f0000000180)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000780)={@id={0x2, 0x0, @a}}) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fsync(r7) 41.300317655s ago: executing program 6 (id=3113): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) 41.216560956s ago: executing program 8 (id=3114): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x38, 0x3, [0x286, 0x3, 0x9]}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close(0x3) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 40.426022547s ago: executing program 6 (id=3115): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x800804, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x275, &(0x7f00000003c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000040)=""/7, 0x7}, {0x0, 0x500}], 0x2, 0xe7, 0xf) 39.349760836s ago: executing program 8 (id=3116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000003940)="11", 0x1}], 0x1) 39.186926977s ago: executing program 8 (id=3117): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f00000000c0)=""/15, 0xf) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r2, 0x0) listen(r3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) r5 = fsmount(r1, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) io_submit(0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) close(0x3) syz_usb_connect$cdc_ecm(0x6, 0x66, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) 37.99390827s ago: executing program 6 (id=3119): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/294, @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,\x00'], 0x1, 0x1531, &(0x7f0000001f80)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JSZMcSUgMuSUNSch1SC5DSC4Tk8b9fr8kJEmTJCG5Jev/Ef7qVL9zzu/0O86neb6fz/5Yz+z9rP287/Ne1t6YbzoOqtageuV6RAT/FrzwRxIAxAJAPwC4BgACACgdVzru/P7sEpP+vZOwP9fDqVe6AnYlcf+zNu5/1sb9z9q4/1kb9z9r4/5nbdz/rI37z1hWtnFq/mt5y7ob3///66vzh3v4+/8vJLPE6C9Wl7i+E0DMP5vC/c/auP9/WcE/cxD3P2vj/mdVsVe6APZfgN//f0lNfh1m+8MDuf9ZG/efsazsSt9/vtIbRLL2c3ClX3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxrKGU/6i0+AVAFwKr3RdjDHGGGOMMcYY+/P4bFe6AsYYY4wxxhhjjP3fQxAgQUEAMZANYiE75AABAFdDLrgGInAtxMF1kBuuhzyQF/JBfoiHAlAQNBiwQBBCISgMUbgBisCNUBRugmJQHByUgAS4GUrCLVAKboXScBuUgduhLJSD8lAB7oCKcCdUgrugMtwNVaAqVIPqcA/UgHuhJtwHteB+qA0PQB14EOrCQ1APHob68Ag0gEehITwGjaAxNIGm0Ox/lf8idIWXoBt0hyToAT3hZegFvaEP9IV+8Ar0h1dhALwGyTAQBsHrMBjegCHwJgyFYTAc3oIRMBJGwWgYA2MhBcbBeHgbJsA7MBEmwWSYAqkwFabBuzAdZsBMeA9mwfswG+bAXJgHafABzIcFkA4fwkL4CDJgESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/Yv7Jv8vvhICAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2IxLIYOHSZgApbEW7AUlsLSWBrLYBksi+WwHFbAClgRK2IlrISVsTJWwSpYDavhPXgP9sCaWBNrYS2sjbUv3Z7CelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBREzEttgW22E7bI/tsQN2wI7YETthZ+yc+WI2wJfwJeyOVUQP7Ik9sRcmZ+uDfbEvvoL98VV8FV/DZByIg/B1fB3fwCF4AofiMByOw7GiGImjcDSSGIspmILjcTxOwAk4ESfhJJyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4f/1X9j29alQziPCWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARxgCAiIqoKCKKiKKiqCgmigknnEgQCaKkKClKiVKitLhNlBG3i7KinGjpKogKoqJo5SqJu0RlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXEg6Ku6IF98GFxvjMNxEBsKAZhI9FYyIufYM3FEGwhWopW4kkxDIdiG9HcJYpnRFsxCtuJv4nR+JzoIMZiR/GC6CQ6iy7iRdFVtHDdRHcxEXuInmIK9hK9RR/RV0zHquI9nJW9mnhNJIuBYpB4XczDN8QQ8aYYKoaJ4eItMUKMFKPEaDFGjBUpYpwYL94WE8Q7YqKYJCaLKSJVTBXTxLtiupghZor3xCzxvpgt5oi5Yp5IEx+I+WKBSBcfioXiI5EhFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iY7FDfCJ2il1it/hU7BGfib3ic7FPfCH2iy9FpvhKHBBfi4PiG3FIfCsOi+/EEXFUHBPfi+PiB3FCnBSnxGlxRvwozoqfxDnhBUiUQkqpZCBjZDYZK7PLHPIqmVMGF5/da2WcvE7mltfLPDKvzCfzy3hZQBaUWhppJclQFpKFZVTeIIvIG2VReZMsJotLJ0vIBHmzLClvkaXkrbK0vE2WkbfLsrKcLC8ryDtkRXmnhMiFc1SRVWU1WV3eI5PgXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlonxGtpX+4kvkOdlBPi87yhdkJ9lZdpE/yXPSy26yu4QeIHvKl2Uv2Vv2kX1lP/mK7C9flQPkazJZDpSD5OtysHxDDpFvyqFymBwu35Ij5Eg5So6WY+RYmSLHyfHybTlBviMnyklyspwiU+VU2efiTDOl/If5b/9O/oCfz75BbpSb5Ga5RW6V2+R2+bHcIXfInXKn3C13yz1yj9wr98p9cp/cL/fLTJkpD8gD8qA8KA/JQ/KwPCyPyKPytPxeHpc/yBPypDwpT8sz8ow8e/E5AIVKKKmUClSMyqZiVXaVQ12lcqqrVS51jYqoa1Wcuk7lVterPCqvyqfyq3hVQBVUWhllFalQFVKFVVTdgBdfMKqYKq6cKqES1M3/Sr4qom5URdVNv8q/VF/SH9TXTDVTzVVz1UK1UK1UK9VatVZtVBuVqBJVW9VWtVPtVHvVXnVQHVRH1VF1Up1UF9VFdVVdVTfVTSWpJNVTvax6qd6qj+qr+qlXVH/VXw1QA1SySlaD1CA1WA1WQ9QQNVQNVcPVcDVCjVCj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfpat0tVAtVBlqkVqklqglaplaplaoFWqVWqXWqDVqnVqnMtRGtVFtVpvVVrVVbVfb1Q61Q+1UO9VutVvtUXvUXrVX7VP71H61X2WqTHVAHVAH1UF1SB1Sh9VhdUQdUcfUMXVcHVcn1Al1Sp1SZ9QZdVadVefUufPLvkAEIlCBCmKCmCA2iA1yBDmCnEHOIFeQK4gEkSAuiAtyB9cHeYK8Qb4gfxAfFAgKBjowgQ3ExaZHgxuCIsGNQdHgpqBYUDxwQYkgIbg5KBncEpQKbg1KB7cFZYLbg7JBuaB8UCG4I6gY3BlUCu4KKgd3B1WCqkG1oHpwT1AjuDeoGdwX1AruD2oHDwR1ggeDusFDQb3g4aB+8EjQIHg0aBg8FjQKGgdNgqZBsz91fu9P5H3CddPddZLuoXvql3Uv3Vv30X11P/2K7q9f1QP0azpZD9SD9Ot6sH5DD9Fv6qF6mB6u39Ij9Eg9So/WY/RYnaLH6fH6bT1Bv6Mn6kl6sp6iU/VUPU2/q6frGXqmfk/P0u/r2XqOnqvn6TT9gZ6vF+h0/aFeqD/SGXqRXqyX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepverj/WO/QneqfepXfrT/Ue/Zneqz/X+/QXer/+Umfqr/QB/bU+qL/Rh/S3+rD+Th/RR/Ux/b0+rn/QJ/RJfUqf1mf0j/qs/kmf0/784v7817tRRpkYE2NiTazJYXKYnCanyWVymYiJmDgTZ3Kb3CaPyWPymXwm3sSbgqagOY8MmUKmkImaqCliipiipqgpZooZZ5xJMAmmpClpSplSprQpbcqYMqasKWvKm/LmDnOHudPcae4yd5m7zd2mqqlqqpvqpoapYWqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkmpgmpplpZpqb5qaFaWFamVamtWlt2pg2JtEkmramrWln2pn2pr3pYDqYjqaj6WQ6mS6mi+lquppupptJMkmmp+lpeplepo/pY/qZfqa/6W8GmAEm2SSbQWaQGWwGmyFmiBlqhpnh5xeqZqQZZUZ/O8aMNSkmxYw3480EM8FMNBPNZDPZpJpUM81MM9PNdDPTzDSzzCwz28w2c81ck2bSzHwz36SbdLPQLDQZJsMsNovNUrPULDfLzUqz0qw2q81aWGvWm/Vmo9loNpvNZqvZarab7WaH2WF2mp1mt9lt9pg9Zq/Za/aZfWa/2W8yTaY5YA6Yg+agOWQOmcPmsDlijphj5pg5bo6bE+aEOWVOmTMm78XvS29ibXabw15lc9qrbS57jf37OJ/Nb+NtAVvQapvH5v1VbKy1Re1Ntpgtbp0tYRPszb+Jy9pytrytYO+wFe2dttJv4hr2XlvT3mdr2fttdXvPr+La9gFbxz5q6yIC2Ma2vm1qG9hHbUP7mG1kG9smtqltbZ+ybezTNtE+Y9vaZ38Tz7cL7Eq7yq62a+xOu8uesqftQfuNPWN/tN1sd9vPvmL721ftAPuaTbYDfxMPt2/ZEXakHWVH2zF27G/iyXaKTbVT7TT7rp1uZ/wmTrMf2Fk23c62c+xcO+/n+HxN6fZDu9B+ZDNsAIvtErvULrPL7Yr/X+sSu86utxvsDvuJ3Wy32K12m91+aSFsd9nd9lO7x35mD9iv7T77hd1vD9lM+9XP8fnHd8h+aw/b7+wRe9Qes9/b4/YH9XPuyF4A9kf7vf3JnrPeAiEBSVIUUAxlo1jKTjnoKspJV1MuuoYidC3F0XWUm66nPJSX8lF+iqcCVJA0GbJEFFIhKkxRuoEulVeMipOjEpRAN1NJuoVK0a1Umm6jMnQ7laVyVJ4q0B1Uke6kSnQXVaa7qQpVpWpUne6hGnQv1aT7qBbdT7XpAapDD1Jdeojq0cNUnx6hBvQoNaTHqBE1pibUlJrR49ScnqAW1JJa0ZPUmp6iNvQ0JdIz1JaepXb0N2pPz1EHep460gvUiTpTF3qRutJL1I26UxL1oJ70MvWi3tSH+lI/eoX606s0gF6jZBpIg+h1Gkxv0BB6k4bSMBpOb9EIGkmjaDSNobGUQuNoPL1NE+gdmkiTaDJNoVSaStPoXZpOM2gmvUez6H2aTXNoLs2jNPqA5tMCSqcPaSF9RBm0iBbTElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDt9TDvoE9pJu2g3fUp76DPaS5/TPvqC9tOXlElf0QH6mg7SN3SIvvXd6Ts6QkfpGH1Px+kHOkEn6RSdpjP0I52ln+gceYIQQxHKUIVBGBNmC2PD7GGO8KowZ3h1mCu8JoyE14Zx4XVh7vD6ME+YN8wX5g/jwwJhwVCHJrQhhWFYKCwcRsMbwiLhjWHREMNiYfHQhSXChPDmsGR4S1gqvDUsHd4WlglvD8uG5cJH768Q3hFWDO8MK4V3hZXDu8MqYdWwWlg9vCesEd4b1gzvC2uF94elwgfCOuGDYd3wobBe+HBYP3wkbBA+GjYMHwsbhY3DJmHTsFn4eNg8fCJsEbYMW4VPhq3Dp8I24dNhYvhM2DZ89uf9Dyz44/1JYY+wZ/hy+HLo/X1ybnReNC36QXR+dEE0PfphdGH0o2hGdFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRD1Pvq2cChE0465QIX47K5WJfd5XBXuZzuapfLXeMi7loX565zud31Lo/L6/K5/C7eFXAFnXbGWUcudIVcYRd1N7gi7kZX1N3kirnizrkSLsE1dc1cM9fcPeFauJaulXvSPemeck+5p93T7hnX1j3r2rm/ufbuOdfBPe+edy+4Tq6z6+JedF3duFwX3pNJrqfr6Xq5Xq6P6+P6uX6uv+vvBrgBLtklu0FukBvsBrshbogb6oa64W64G+FGuFFulBvjxrgUl+LGu/FugpvgJrqJbrKb7FJdqpvmprnpbrqrOOPCWWa72W6um+vSXJqb786vGdPdQrfQZbgMt9gtdkvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt9Nfc2FSt8ftdXvdPrfP7Xdfukz3lTvgvnYH3TfukPvWHXbfuSPuqDvmvnfH3Q/uhDvpTrnT7oz70Z11P7lzzruUyLjI+MjbkQmRdyITI5MikyNTIqmRqZFpkXcj0yMzIjMj70VmRd6PzI7MicyNzIukRT6IzI8siKRHPowsjHwUyYgsiiyOLIksjSyLeF9gc+gL+cI+6m/wRfyNvqi/yRfzxb3zJXyCv9mX9Lf4Uv5WX9rf5sv4231ZX86X94/5Rr6xb+Kb+mb+cd/cP+Fb+Ja+lX/St/ZP+Tb+aZ/on/Ft/bO+nf+bb++f8x38876jf8F38p19F/+i7+pf8t18d5/ke/ie/mXfy/f2fXxf38+/4vv7V/0A/5pP9gP9IP+6H+zf8EP8m36oH+aHx7zlR1y6RIaxPsWP8+P9236Cf8dP9JP8ZD/Fp/qpfpp/10/3M/xM/56f5d/3s/0cP9fP82n+Az/fL/Dp/kO/0H/kM/yiSzeV/XK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/x2/7Hf4T/xO/0uv9t/6vf4z/xe/7nf57/w+/2XPtN/5Q/4r/1B/40/5L/1h/13/og/6o/57/1x/4M/4U/6U/60P+N/9Gf9T/4c/581xhhjjLF/yrjLQ/HrPRdu5/f4nRzxi4N7AsDVW/Jn/nL/+RXl2jwXxr1FfOsIADzTvePDl7YqVZKSki4emyEhKDwH4NLfBJ0XA5fjRdAKnoJEaAklf7f+3qLzGfoH80dvA8jxi5xYuBxfnv9zAEz6nfkff3L4/DLhqbj/Yf45AEULX87JDpfjRdDq5/srLaHUH9Sft/kv64/97fzZv0gBaPGLnJxwOb5cfwI8Ac9C4q+OZIwxxhhjjDHGLugtyre/dP156V98/t71eby6nJMNLsf/6PqcMcYYY4wxxhhjV95znbs8/XhiYsv2//qg0v8q658eNIT/q5l58LsD7wEu/UQBwL85IcD5gfxPPopN/5FzJV986/z9rqWnfQD/Ha38MwZX+IOJMcYYY4wx9qe7vOj/9c/VlSqIMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLgv4Tv07sSj9GxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Er7fwEAAP//nXwDKg==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x8c000, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") 36.569772094s ago: executing program 8 (id=3125): epoll_create1(0x0) openat(0xffffffffffffff9c, 0x0, 0x46440, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 36.376709419s ago: executing program 8 (id=3127): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x38, 0x3, [0x286, 0x3, 0x9]}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close(0x3) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 34.523428787s ago: executing program 6 (id=3130): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000008000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e"], 0x48) 33.715367841s ago: executing program 6 (id=3135): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x6, 0x0, 0x27f}) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6d, 0x400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$admmidi(0x0, 0x20, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xe43}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r0}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) 33.468390443s ago: executing program 37 (id=3135): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x6, 0x0, 0x27f}) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6d, 0x400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$admmidi(0x0, 0x20, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xe43}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r0}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) 20.524019179s ago: executing program 38 (id=3127): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x38, 0x3, [0x286, 0x3, 0x9]}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close(0x3) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 6.249678956s ago: executing program 2 (id=3192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mkdirat(r3, &(0x7f0000000180)='./file0/file1\x00', 0x10c) 5.573717073s ago: executing program 3 (id=3194): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80) 4.600126728s ago: executing program 3 (id=3197): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00') unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.413708062s ago: executing program 3 (id=3199): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}, {@barrier}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x7f, 0x0, 0x4) 3.88177205s ago: executing program 3 (id=3202): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 3.773354765s ago: executing program 9 (id=3204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x28102, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) 2.895288357s ago: executing program 5 (id=3205): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000d6000/0x6000)=nil, 0x6000}, 0x6}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) close(0x3) 2.661693747s ago: executing program 5 (id=3206): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x9}}}}}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x40000040, &(0x7f00000005c0)=@un=@abs={0x0, 0x0, 0x4ea4}, 0x80) 2.592400326s ago: executing program 9 (id=3207): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x9, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x3c}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 2.572685049s ago: executing program 2 (id=3208): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004e80)="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", 0x2000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.171187381s ago: executing program 2 (id=3209): mmap(&(0x7f00008c5000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 2.124619776s ago: executing program 9 (id=3210): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) 2.041761927s ago: executing program 5 (id=3211): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ff8000/0x8000)=nil, &(0x7f000010c000/0x4000)=nil, 0x8000}) 2.01616852s ago: executing program 2 (id=3212): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_setup(0x94f, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x8, 0x128f, &(0x7f0000003700)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.805052348s ago: executing program 3 (id=3213): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="5800000010000104000069d44e10e26267fbf188", @ANYRES32=r2, @ANYBLOB="00010000ac000000380012800b000100697036746e6c000028000280050009000400000014000200fe880000000000"], 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 1.465396012s ago: executing program 2 (id=3214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x95) 1.223796243s ago: executing program 9 (id=3215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfffffe0b) 1.197240236s ago: executing program 3 (id=3216): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.137644654s ago: executing program 2 (id=3217): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mkdirat(r3, &(0x7f0000000180)='./file0/file1\x00', 0x10c) 1.125571835s ago: executing program 5 (id=3218): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc880) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x2001001000000000, 0x22072a18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8b28, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 277.816754ms ago: executing program 5 (id=3219): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x9, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x3c}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 277.615614ms ago: executing program 9 (id=3220): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 81.763519ms ago: executing program 9 (id=3221): syz_mount_image$erofs(&(0x7f0000000440), &(0x7f0000000180)='./file0\x00', 0x10410, &(0x7f0000000480)=ANY=[], 0x1, 0x1ed, &(0x7f0000000cc0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 0s ago: executing program 5 (id=3222): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x38, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x8, 0x10000, 0x4}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r4, 0xdffaa000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f00000008c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0100040000000400000009000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) kernel console output (not intermixed with test programs): h Linux 5.16 [ 1072.764077][T14932] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2581'. [ 1073.143548][T14942] loop6: detected capacity change from 0 to 4096 [ 1073.478083][T14942] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 1073.637226][ T26] audit: type=1800 audit(1768752053.484:84): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2584" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1073.716383][T11277] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1074.845797][T14952] team0: Device gtp0 is of different type [ 1076.072095][T11277] usb 9-1: device descriptor read/all, error -71 [ 1076.214728][T14969] loop3: detected capacity change from 0 to 1024 [ 1076.462542][T14969] EXT4-fs (loop3): Ignoring removed orlov option [ 1077.046051][T14969] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000007,usrjquota=,,errors=continue. Quota mode: writeback. [ 1077.135459][T14973] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2592'. [ 1077.167876][ T26] audit: type=1800 audit(1768752057.054:85): pid=14969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2591" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1077.235275][T14980] loop8: detected capacity change from 0 to 512 [ 1078.739251][T14966] loop9: detected capacity change from 0 to 16 [ 1079.561758][T14980] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 1079.758083][T14980] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1079.769224][T14987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2596'. [ 1079.950695][T14991] loop9: detected capacity change from 0 to 512 [ 1079.991511][T14991] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1080.045821][T14991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 1080.074864][T14991] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1080.081631][T14991] EXT4-fs error (device loop9): ext4_orphan_get:1427: comm syz.9.2598: bad orphan inode 267 [ 1080.093490][T14991] EXT4-fs (loop9): Remounting filesystem read-only [ 1080.114980][T14991] EXT4-fs (loop9): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 1081.084142][T15000] team0: Device gtp0 is of different type [ 1081.123766][T14991] EXT4-fs warning (device loop9): dx_probe:893: inode #2: comm syz.9.2598: dx entry: limit 0 != root limit 125 [ 1081.185021][T14991] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.2598: Corrupt directory, running e2fsck is recommended [ 1084.346136][T15017] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2607'. [ 1084.975736][T15031] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2611'. [ 1087.464430][T15046] loop9: detected capacity change from 0 to 512 [ 1088.473839][T15044] team0: Device gtp0 is of different type [ 1088.805210][T15046] EXT4-fs (loop9): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000009,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 1088.852197][T15046] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.094352][T15046] EXT4-fs error (device loop9): ext4_ext_check_inode:501: inode #2: comm syz.9.2615: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1090.148578][T15071] loop9: detected capacity change from 0 to 512 [ 1090.202201][T15071] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1090.285177][T15071] EXT4-fs (loop9): 1 truncate cleaned up [ 1090.312428][T15071] EXT4-fs (loop9): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 1091.088818][T15083] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2624'. [ 1091.108138][T15081] loop6: detected capacity change from 0 to 512 [ 1091.191678][T15089] loop3: detected capacity change from 0 to 128 [ 1091.211140][T15081] EXT4-fs (loop6): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 1091.238802][T15081] ext4 filesystem being mounted at /494/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1091.283577][T15089] EXT4-fs (loop3): Unrecognized mount option "subj_type=" or missing value [ 1091.320140][T15085] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1091.345455][T15085] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1091.455004][T15091] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1091.492173][T15091] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1092.426746][T15101] loop8: detected capacity change from 0 to 512 [ 1092.560621][T15101] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1092.587230][T15104] binder: BINDER_SET_CONTEXT_MGR already set [ 1092.589914][T15108] loop9: detected capacity change from 0 to 256 [ 1092.656924][T15104] binder: 15103:15104 ioctl 4018620d 200000000180 returned -16 [ 1092.666535][T15109] binder: 15103:15109 ioctl c0306201 0 returned -14 [ 1092.705781][T15108] FAT-fs (loop9): Directory bread(block 64) failed [ 1092.734255][T15101] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.767718][T15108] FAT-fs (loop9): Directory bread(block 65) failed [ 1092.774390][T15108] FAT-fs (loop9): Directory bread(block 66) failed [ 1092.836042][T15108] FAT-fs (loop9): Directory bread(block 67) failed [ 1092.858391][T15101] EXT4-fs warning (device loop8): verify_group_input:147: Cannot add at group 201326609 (only 1 groups) [ 1092.890179][T15108] FAT-fs (loop9): Directory bread(block 68) failed [ 1092.910483][T15108] FAT-fs (loop9): Directory bread(block 69) failed [ 1092.936445][T15108] FAT-fs (loop9): Directory bread(block 70) failed [ 1092.977485][T15108] FAT-fs (loop9): Directory bread(block 71) failed [ 1093.017062][T15108] FAT-fs (loop9): Directory bread(block 72) failed [ 1093.051673][T15108] FAT-fs (loop9): Directory bread(block 73) failed [ 1093.223515][T15116] loop8: detected capacity change from 0 to 256 [ 1093.261502][T15116] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1093.297440][T15116] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1093.345022][T15116] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1093.584866][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2639'. [ 1093.963738][T15132] loop9: detected capacity change from 0 to 256 [ 1094.024045][T15133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2641'. [ 1094.049503][T15132] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1094.061279][T15132] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1094.093800][T15132] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1094.155308][T15132] exFAT-fs (loop9): error, failed to bmap (inode : ffff88805ff81b60 iblock : 16, err : -5) [ 1094.165564][T15132] exFAT-fs (loop9): Filesystem has been set read-only [ 1096.002904][T15140] binder: 15139:15140 ioctl c0306201 0 returned -14 [ 1097.411206][T15154] team0: Device gtp0 is of different type [ 1097.980424][T15147] loop3: detected capacity change from 0 to 40427 [ 1098.146475][T15147] F2FS-fs (loop3): invalid crc value [ 1098.289056][T15147] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1098.441111][T15168] overlayfs: failed to clone upperpath [ 1098.464729][T15147] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1098.588420][ T4190] attempt to access beyond end of device [ 1098.588420][ T4190] loop3: rw=2049, want=45104, limit=40427 [ 1098.760399][T15151] loop8: detected capacity change from 0 to 40427 [ 1098.838516][T15151] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x35f7 [ 1098.874396][T15151] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1ffff [ 1099.135610][T15151] F2FS-fs (loop8): invalid crc value [ 1099.144186][T15151] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1099.901033][T15151] F2FS-fs (loop8): Start checkpoint disabled! [ 1100.026555][T15151] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1100.110898][T15190] team0: Device gtp0 is of different type [ 1100.499985][T15186] loop9: detected capacity change from 0 to 1024 [ 1100.847921][T15186] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 1100.886372][T15186] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1101.181422][T15211] VFS: Mount too revealing [ 1101.206115][T15209] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2668'. [ 1101.326950][ T1106] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1102.616396][ T1106] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.648882][ T1106] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1102.654364][T15233] team0: Device gtp0 is of different type [ 1102.748347][ T1106] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1102.759345][T15228] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1102.767981][T15228] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1102.775178][ T1106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1102.824949][ T1106] usb 4-1: SerialNumber: syz [ 1103.478262][ T1106] usb 4-1: 0:2 : does not exist [ 1103.483250][ T1106] usb 4-1: unit 128 not found! [ 1103.632772][ T1106] usb 4-1: USB disconnect, device number 28 [ 1103.697804][T15252] loop9: detected capacity change from 0 to 1024 [ 1103.783020][T15252] EXT4-fs (loop9): Ignoring removed orlov option [ 1103.846819][T15252] EXT4-fs (loop9): inline encryption not supported [ 1103.872082][T15252] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 1103.937760][T15252] EXT4-fs (loop9): invalid journal inode [ 1103.963426][T11868] udevd[11868]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1104.637178][T15259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2686'. [ 1104.834404][T15230] loop6: detected capacity change from 0 to 40427 [ 1104.907099][T15230] F2FS-fs (loop6): invalid crc value [ 1104.960680][T15230] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1105.191486][T15230] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 1105.202907][T15230] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1106.213031][ T5249] attempt to access beyond end of device [ 1106.213031][ T5249] loop6: rw=2049, want=45104, limit=40427 [ 1106.345510][T15280] loop3: detected capacity change from 0 to 128 [ 1106.432631][T15280] EXT4-fs (loop3): Invalid want_extra_isize 4 [ 1106.460295][T15284] loop8: detected capacity change from 0 to 512 [ 1106.624793][T15284] EXT4-fs (loop8): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: writeback. [ 1106.679397][T15284] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.777035][ T1324] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1106.838111][T15284] loop_set_status: loop8 () has still dirty pages (nrpages=2) [ 1106.869222][T15288] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 3: comm syz.8.2696: path /364/file1: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 1107.042638][ T1324] usb 4-1: Using ep0 maxpacket: 16 [ 1107.129212][T15292] team0: Device gtp0 is of different type [ 1107.282451][T15294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2698'. [ 1107.296478][ T1324] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.399945][ T1324] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1107.639321][T15301] loop8: detected capacity change from 0 to 2048 [ 1107.917309][ T1324] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1107.930440][T15301] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv0,i_version,,errors=continue. Quota mode: none. [ 1107.992959][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.087330][T15301] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.109503][ T1324] usb 4-1: Product: syz [ 1108.179667][ T1324] usb 4-1: Manufacturer: syz [ 1108.220550][ T1324] usb 4-1: SerialNumber: syz [ 1108.636332][ T4305] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 1108.807113][ T1324] usb 4-1: 0:2 : does not exist [ 1108.835644][T15320] overlayfs: failed to clone upperpath [ 1108.874792][ T1324] usb 4-1: USB disconnect, device number 29 [ 1109.188446][ T4305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1109.200568][T15331] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2710'. [ 1109.291391][T15333] team0: Device gtp0 is of different type [ 1109.298778][ T4305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.308979][ T4305] usb 7-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1109.320094][T11868] udevd[11868]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1109.336744][ T4305] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.346982][ T4305] usb 7-1: config 0 descriptor?? [ 1109.652100][T15339] loop3: detected capacity change from 0 to 256 [ 1109.692093][T15339] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1109.703021][T15339] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1109.749268][T15339] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1109.942633][T15339] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805ff83be0 iblock : 16, err : -5) [ 1109.953412][T15339] exFAT-fs (loop3): Filesystem has been set read-only [ 1111.630527][T15348] loop9: detected capacity change from 0 to 256 [ 1111.949300][ T4305] holtek_mouse 0003:04D9:A067.000D: unknown main item tag 0x0 [ 1112.732332][ T4305] holtek_mouse 0003:04D9:A067.000D: unknown main item tag 0x0 [ 1112.754559][ T4305] holtek_mouse 0003:04D9:A067.000D: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.6-1/input0 [ 1113.879912][T15348] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1113.891548][T15348] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1113.947750][T15348] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1113.990504][ T2239] usb 7-1: USB disconnect, device number 18 [ 1114.020699][T15353] loop8: detected capacity change from 0 to 512 [ 1114.207164][T15353] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1114.466037][T15353] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2719: bg 0: block 248: padding at end of block bitmap is not set [ 1114.550060][T15362] device syzkaller0 entered promiscuous mode [ 1114.617208][T15353] Quota error (device loop8): write_blk: dquota write failed [ 1114.714430][T15353] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1114.724622][T15353] EXT4-fs error (device loop8): ext4_acquire_dquot:6209: comm syz.8.2719: Failed to acquire dquot type 1 [ 1114.914772][T15353] EXT4-fs (loop8): 1 truncate cleaned up [ 1114.931991][T15353] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1115.003479][T15363] fido_id[15363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1115.236436][ T2239] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1115.423287][T15376] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2726'. [ 1115.432991][T15376] netlink: del zone limit has 8 unknown bytes [ 1115.554409][T15379] team0: Device gtp0 is of different type [ 1115.594082][ T4487] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.637143][ T2239] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1115.648978][ T2239] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1115.665630][ T2239] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.692202][ T2239] usb 10-1: config 220 has no interface number 2 [ 1115.698889][ T2239] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1115.713437][ T2239] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1115.722656][ T2239] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1115.731367][ T2239] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1115.765618][ T4487] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.809529][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.916953][ T2239] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1115.955701][ T2239] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.112953][ T2239] usb 10-1: Product: syz [ 1116.153495][ T2239] usb 10-1: Manufacturer: syz [ 1116.197088][ T2239] usb 10-1: SerialNumber: syz [ 1116.231042][T15393] loop6: detected capacity change from 0 to 1024 [ 1116.247538][ T4487] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.292532][T15393] EXT4-fs (loop6): Ignoring removed orlov option [ 1116.367636][ T4487] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.410712][T15368] chnl_net:caif_netlink_parms(): no params data found [ 1116.418996][T15393] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000000,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: none. [ 1116.567475][ T2239] usb 10-1: selecting invalid altsetting 0 [ 1116.573954][ T2239] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 1116.583980][ T2239] usb 10-1: No valid video chain found. [ 1116.673856][ T2239] usb 10-1: selecting invalid altsetting 0 [ 1116.701322][ T2239] usbtest: probe of 10-1:220.1 failed with error -22 [ 1116.755378][ T2239] usb 10-1: USB disconnect, device number 4 [ 1116.784383][T15410] binder: BINDER_SET_CONTEXT_MGR already set [ 1116.796649][T15410] binder: 15409:15410 ioctl 4018620d 200000000180 returned -16 [ 1116.882782][T15368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.890526][T15368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.901757][T15368] device bridge_slave_0 entered promiscuous mode [ 1116.916873][T15412] binder: 15409:15412 ioctl c0306201 0 returned -14 [ 1116.965554][T15368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.006633][T15368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.034035][T15368] device bridge_slave_1 entered promiscuous mode [ 1117.187481][T15368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.205635][T11277] Bluetooth: hci0: command 0x0409 tx timeout [ 1117.281867][T15368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.335018][ T4487] tipc: Left network mode [ 1117.380893][T15425] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2740'. [ 1117.390798][T15425] netlink: del zone limit has 8 unknown bytes [ 1117.531289][T15368] team0: Port device team_slave_0 added [ 1117.557060][T15368] team0: Port device team_slave_1 added [ 1117.868391][T15368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.894237][T15368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.104030][T15436] loop8: detected capacity change from 0 to 512 [ 1118.139472][T15368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.152349][T15368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.159394][T15368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.206250][T15368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.533348][T15442] loop9: detected capacity change from 0 to 256 [ 1118.627415][T15446] loop6: detected capacity change from 0 to 512 [ 1118.717808][T15368] device hsr_slave_0 entered promiscuous mode [ 1118.729322][T15368] device hsr_slave_1 entered promiscuous mode [ 1118.751549][T15368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1118.774932][T15442] FAT-fs (loop9): Directory bread(block 64) failed [ 1118.802096][T15436] EXT4-fs (loop8): failed to open journal device unknown-block(0,0) -6 [ 1118.802098][T15446] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1118.802357][T15446] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.832167][T15442] FAT-fs (loop9): Directory bread(block 65) failed [ 1118.841287][T15368] Cannot create hsr debugfs directory [ 1118.863839][T15442] FAT-fs (loop9): Directory bread(block 66) failed [ 1118.916800][T15442] FAT-fs (loop9): Directory bread(block 67) failed [ 1118.923703][T15442] FAT-fs (loop9): Directory bread(block 68) failed [ 1118.932518][T15442] FAT-fs (loop9): Directory bread(block 69) failed [ 1118.962963][T15442] FAT-fs (loop9): Directory bread(block 70) failed [ 1118.997137][T15442] FAT-fs (loop9): Directory bread(block 71) failed [ 1119.041981][T15436] loop8: detected capacity change from 0 to 256 [ 1119.061511][T15442] FAT-fs (loop9): Directory bread(block 72) failed [ 1119.079566][T15442] FAT-fs (loop9): Directory bread(block 73) failed [ 1119.189010][T15436] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1119.425394][ T1106] Bluetooth: hci0: command 0x041b tx timeout [ 1119.469190][ T26] audit: type=1326 audit(1768752099.354:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15435 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c76cccb9 code=0x7ffc0000 [ 1119.914371][T15475] binder: BINDER_SET_CONTEXT_MGR already set [ 1119.923960][ T26] audit: type=1326 audit(1768752099.354:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15435 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c76cccb9 code=0x7ffc0000 [ 1119.977859][T15475] binder: 15470:15475 ioctl 4018620d 200000000180 returned -16 [ 1120.077761][T15477] binder: 15470:15477 ioctl c0306201 0 returned -14 [ 1120.102130][ T26] audit: type=1326 audit(1768752099.374:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15435 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f56c76cccb9 code=0x7ffc0000 [ 1120.124516][ T26] audit: type=1326 audit(1768752099.384:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15435 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c76cccb9 code=0x7ffc0000 [ 1120.147690][ T26] audit: type=1326 audit(1768752099.384:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15435 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c76cccb9 code=0x7ffc0000 [ 1120.171162][ T26] audit: type=1326 audit(1768752099.384:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15435 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f56c76cccb9 code=0x7ffc0000 [ 1120.626053][T15494] loop6: detected capacity change from 0 to 256 [ 1121.108540][T15492] loop8: detected capacity change from 0 to 8192 [ 1121.445393][ T4487] IPVS: stopping master sync thread 5716 ... [ 1121.743250][T15502] loop6: detected capacity change from 0 to 40427 [ 1121.943774][ T7862] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 1121.982324][ T7862] FAT-fs (loop8): Filesystem has been set read-only [ 1122.092691][T15368] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1122.135260][T15368] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1122.186102][T15368] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1122.236711][T15368] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1122.616106][T15368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.702234][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1122.706387][ T1106] Bluetooth: hci0: command 0x040f tx timeout [ 1122.746929][T15502] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1122.754810][T15502] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1122.767337][T15502] F2FS-fs (loop6): invalid crc value [ 1122.851815][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1122.944944][T15502] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1122.997314][T15502] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1123.004493][T15502] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1123.026678][T15368] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.138988][ T26] audit: type=1804 audit(1768752102.984:92): pid=15502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2758" name="/newroot/517/file0/bus" dev="loop6" ino=10 res=1 errno=0 [ 1123.343496][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1123.370475][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1123.414486][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.421665][ T6882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.477563][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1123.517374][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1123.533155][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.540330][ T6882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.630986][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1123.755809][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2762'. [ 1123.874182][T15540] binder: 15538:15540 ioctl c0306201 0 returned -14 [ 1123.894019][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1123.952220][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1124.165298][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1124.393645][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1124.585314][ T4487] device hsr_slave_0 left promiscuous mode [ 1124.611436][ T4487] device hsr_slave_1 left promiscuous mode [ 1124.642694][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.664734][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.699764][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.716357][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.734058][ T4487] device bridge_slave_1 left promiscuous mode [ 1124.773443][ T4487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.794205][T11277] Bluetooth: hci0: command 0x0419 tx timeout [ 1124.802691][ T4487] device bridge_slave_0 left promiscuous mode [ 1124.811347][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.850380][ T4487] device veth1_macvtap left promiscuous mode [ 1124.857772][ T4487] device veth0_macvtap left promiscuous mode [ 1124.872779][ T4487] device veth1_vlan left promiscuous mode [ 1124.886616][ T4487] device veth0_vlan left promiscuous mode [ 1126.109147][ T4487] team0 (unregistering): Port device team_slave_1 removed [ 1126.154306][ T4487] team0 (unregistering): Port device team_slave_0 removed [ 1126.191438][ T4487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.226925][ T4487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.381883][ T4487] bond0 (unregistering): Released all slaves [ 1126.507062][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1126.527528][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1126.548778][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1126.579307][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1126.597720][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1126.615830][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1126.625916][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1126.675218][T15368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1127.070273][T15586] loop9: detected capacity change from 0 to 2048 [ 1127.110714][T15591] loop6: detected capacity change from 0 to 2048 [ 1127.890872][T15368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.901886][T15586] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 1127.933882][T15591] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1127.970408][T15598] team0: Device gtp0 is of different type [ 1128.378638][T15608] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1128.417495][T15608] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 302 with error 28 [ 1128.442386][T15608] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1128.442386][T15608] [ 1128.467006][T15608] EXT4-fs (loop9): Total free blocks count 0 [ 1128.495322][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1128.506805][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1128.519043][T15608] EXT4-fs (loop9): Free/Dirty block details [ 1128.529566][T15614] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2780'. [ 1128.596698][T15608] EXT4-fs (loop9): free_blocks=2415919104 [ 1128.602654][T15608] EXT4-fs (loop9): dirty_blocks=304 [ 1128.652719][T15608] EXT4-fs (loop9): Block reservation details [ 1128.689869][T15608] EXT4-fs (loop9): i_reserved_data_blocks=19 [ 1128.823319][ T4245] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1129.126231][ T4245] usb 7-1: Using ep0 maxpacket: 32 [ 1129.193727][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1129.213893][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1129.277031][ T4245] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.320714][T15639] binder: BINDER_SET_CONTEXT_MGR already set [ 1129.332728][ T4245] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.757452][T15639] binder: 15638:15639 ioctl 4018620d 200000000180 returned -16 [ 1129.768490][T15368] device veth0_vlan entered promiscuous mode [ 1129.776948][ T4245] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1129.786606][ T4245] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.896918][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1129.905777][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1129.917617][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1129.925717][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1129.940137][T15368] device veth1_vlan entered promiscuous mode [ 1129.976467][ T4245] usb 7-1: config 0 descriptor?? [ 1130.110896][ T1362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1130.161350][ T1362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1130.215426][T15651] loop8: detected capacity change from 0 to 4096 [ 1130.242581][T15368] device veth0_macvtap entered promiscuous mode [ 1130.282943][T15368] device veth1_macvtap entered promiscuous mode [ 1130.332407][T15651] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1130.363741][T15660] loop9: detected capacity change from 0 to 512 [ 1130.380623][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.433023][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.481403][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.502711][ T4245] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1130.532188][T15662] EXT4-fs (loop8): shut down requested (0) [ 1130.546756][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.565881][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.584648][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.627834][T15368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.636120][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1130.647306][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1130.661936][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1130.674999][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1130.735771][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.745709][T15660] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1130.762105][T15426] usb 7-1: USB disconnect, device number 19 [ 1130.776335][T15660] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.808462][T15666] fido_id[15666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1130.828790][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.877839][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.890183][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.900148][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.911148][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.928873][T15368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.948910][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1130.975544][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1131.004265][T15368] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.044979][T15368] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.068036][T15368] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.077005][T15368] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.491022][T15678] team0: Device gtp0 is of different type [ 1132.087456][T15682] device erspan0 entered promiscuous mode [ 1132.173586][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.223436][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.319217][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1132.364169][ T6882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.398324][ T6882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.458166][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1132.658105][T15702] loop3: detected capacity change from 0 to 512 [ 1132.854880][T15702] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 1132.999336][T15702] loop3: detected capacity change from 0 to 256 [ 1133.020527][T15702] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1133.270449][ T26] audit: type=1326 audit(1768752113.154:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2742f3cb9 code=0x7ffc0000 [ 1133.823078][ T26] audit: type=1326 audit(1768752113.154:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2742f3cb9 code=0x7ffc0000 [ 1133.858937][ T26] audit: type=1326 audit(1768752113.184:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb2742f3cb9 code=0x7ffc0000 [ 1134.558318][T15723] team0: Device gtp0 is of different type [ 1134.665179][T15722] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2800'. [ 1134.684093][ T26] audit: type=1326 audit(1768752113.184:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2742f3cb9 code=0x7ffc0000 [ 1134.731984][ T26] audit: type=1326 audit(1768752113.184:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2742f3cb9 code=0x7ffc0000 [ 1134.872176][ T26] audit: type=1326 audit(1768752113.184:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb2742f3cb9 code=0x7ffc0000 [ 1135.066275][T11277] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1136.736696][T11277] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1136.744955][T11277] usb 6-1: config 0 has no interface number 0 [ 1136.776355][T11277] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1136.826780][T11277] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1137.086431][T11277] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1137.095653][T11277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.104677][T11277] usb 6-1: Product: syz [ 1137.109259][T11277] usb 6-1: Manufacturer: syz [ 1137.113903][T11277] usb 6-1: SerialNumber: syz [ 1137.267410][T11277] usb 6-1: config 0 descriptor?? [ 1137.296539][T15725] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1137.306597][T15725] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1137.325086][T11277] smsc95xx v2.0.0 [ 1137.435047][T15754] loop8: detected capacity change from 0 to 128 [ 1137.457591][T15735] chnl_net:caif_netlink_parms(): no params data found [ 1137.540540][T15725] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1137.580751][T15725] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1137.601031][T15754] overlayfs: filesystem on './file0' not supported [ 1137.620605][T15735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.640372][T15735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.673373][T15735] device bridge_slave_0 entered promiscuous mode [ 1137.689086][T15735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.697382][T15735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.705817][T15735] device bridge_slave_1 entered promiscuous mode [ 1137.779061][T15735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.841930][T15735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.855513][T15761] loop6: detected capacity change from 0 to 512 [ 1137.857534][T11277] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1137.910641][T15735] team0: Port device team_slave_0 added [ 1137.916759][T11277] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1138.027485][T15735] team0: Port device team_slave_1 added [ 1138.073533][T15735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.080354][T15761] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1138.081007][T15735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.118947][T15735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.131897][T15735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.139223][T15761] ext4 filesystem being mounted at /532/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1138.139312][T15735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.179825][T15735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.316049][T15735] device hsr_slave_0 entered promiscuous mode [ 1138.367159][T15735] device hsr_slave_1 entered promiscuous mode [ 1138.422986][T15735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1138.436299][T15735] Cannot create hsr debugfs directory [ 1138.463799][T15768] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2822'. [ 1138.473145][T15768] netlink: del zone limit has 8 unknown bytes [ 1138.649275][T11277] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 1138.687451][T11277] smsc95xx: probe of 6-1:0.67 failed with error -32 [ 1138.751747][ T4240] Bluetooth: hci3: command 0x0409 tx timeout [ 1138.786053][ T4487] tipc: Left network mode [ 1139.246246][T15784] team0: Device gtp0 is of different type [ 1139.691013][ T1324] usb 6-1: USB disconnect, device number 13 [ 1140.640607][ T4487] device hsr_slave_0 left promiscuous mode [ 1140.693709][ T4487] device hsr_slave_1 left promiscuous mode [ 1140.705472][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.721308][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.778410][T11277] Bluetooth: hci3: command 0x041b tx timeout [ 1140.803335][ T4487] team0 (unregistering): Port device bridge1 removed [ 1141.007724][T15834] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2834'. [ 1141.017290][T15834] netlink: del zone limit has 8 unknown bytes [ 1141.154864][ T4487] team0 (unregistering): Port device team_slave_1 removed [ 1141.186330][ T4487] team0 (unregistering): Port device team_slave_0 removed [ 1141.206568][ T4487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1141.224820][ T4487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.210221][T15842] loop9: detected capacity change from 0 to 512 [ 1142.242476][ T4487] bond0 (unregistering): Released all slaves [ 1142.366882][T15844] loop6: detected capacity change from 0 to 512 [ 1142.410949][T15735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1142.420854][T15735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1142.432748][T15735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1142.444721][T15735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1142.482029][T15842] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1142.597238][T15842] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.846723][ T4245] Bluetooth: hci3: command 0x040f tx timeout [ 1143.108830][T15844] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1143.173770][T15844] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.309371][T15844] EXT4-fs (loop6): shut down requested (2) [ 1143.485036][T15735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.503072][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1143.519428][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1143.570443][T15735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.650771][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1143.660480][T15869] binder: BINDER_SET_CONTEXT_MGR already set [ 1143.677388][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1143.685874][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.693052][ T6876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.726849][T15869] binder: 15868:15869 ioctl 4018620d 200000000180 returned -16 [ 1143.747019][T15869] binder: 15868:15869 ioctl c0306201 0 returned -14 [ 1143.947560][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1143.995824][T15879] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2846'. [ 1144.005196][T15879] netlink: del zone limit has 8 unknown bytes [ 1144.011288][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1144.020314][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1144.047013][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.054441][ T6876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.075998][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1144.102734][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1144.159485][T15735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1144.182796][T15735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1144.280335][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1144.299496][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1144.308436][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1144.317653][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1144.327375][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1144.336582][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1144.349796][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1144.365608][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1144.724523][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1144.744175][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1144.944390][T11277] Bluetooth: hci3: command 0x0419 tx timeout [ 1145.576417][ T4240] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1146.227415][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.263752][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.325097][ T4240] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1146.404497][ T4240] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1146.460024][ T4240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.251427][ T4240] usb 6-1: config 0 descriptor?? [ 1147.979094][T15904] loop9: detected capacity change from 0 to 2048 [ 1148.036727][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1148.055870][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1148.108121][T15735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.137790][ T4240] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 1148.158169][T15904] EXT4-fs (loop9): bad geometry: block count 36028797018964480 exceeds size of device (512 blocks) [ 1148.201656][ T4240] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1148.225427][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1148.326898][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1148.440483][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1148.457161][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1148.499716][T15735] device veth0_vlan entered promiscuous mode [ 1148.528391][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1148.537657][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1148.572396][T15735] device veth1_vlan entered promiscuous mode [ 1148.652558][T15735] device veth0_macvtap entered promiscuous mode [ 1148.667558][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1148.687927][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1148.724169][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1148.852771][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1148.861942][T15917] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2858'. [ 1148.871031][T15917] netlink: del zone limit has 8 unknown bytes [ 1148.899270][T15735] device veth1_macvtap entered promiscuous mode [ 1148.942417][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1148.954153][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1148.976038][T15735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1148.993901][T15735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1148.996771][ T4251] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1149.012468][T15735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.030647][T15735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.051918][T15735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.063254][T15735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.079229][T15735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.093105][T15735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.108979][T15735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1149.123580][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1149.135925][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1149.153746][T15735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1149.172327][T15735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.186913][T15735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1149.202872][T15735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.214553][T15735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1149.230102][T15735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.243397][T15735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1149.260138][T15735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.274222][T15735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1149.291633][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1149.304197][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1149.321151][T15735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.336125][T15735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.353114][T15735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.363745][T15735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.376496][ T4251] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.393934][ T4251] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.416038][ T4251] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1149.532592][ T4251] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1149.553414][ T4251] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.607702][ T4251] usb 10-1: config 0 descriptor?? [ 1149.628735][T14355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.716270][T14355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.779528][ T6870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.788318][ T1362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1150.008188][ T6870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.020167][ T1362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1151.184514][ T4251] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x1 [ 1151.193318][ T4251] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1151.200833][ T4251] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1151.208850][ T4251] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1151.216322][ T4251] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1151.223747][ T4251] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1151.231239][ T4251] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1151.239210][ T4251] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1151.256666][ T4251] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 1151.345957][ T6964] usb 6-1: USB disconnect, device number 14 [ 1151.382016][ T4251] plantronics 0003:047F:FFFF.0010: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1151.447023][ T4251] usb 10-1: USB disconnect, device number 5 [ 1151.880089][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2866'. [ 1153.414425][T15948] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2867'. [ 1154.427306][T15954] loop9: detected capacity change from 0 to 128 [ 1154.468046][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2868'. [ 1154.477229][T15957] netlink: del zone limit has 8 unknown bytes [ 1154.586822][ T6964] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1154.624688][T15954] attempt to access beyond end of device [ 1154.624688][T15954] loop9: rw=2049, want=182, limit=128 [ 1154.790271][T15953] attempt to access beyond end of device [ 1154.790271][T15953] loop9: rw=2049, want=178, limit=128 [ 1155.916430][ T6964] usb 6-1: Using ep0 maxpacket: 8 [ 1155.924470][T15963] fido_id[15963]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1156.047049][ T6964] usb 6-1: config index 0 descriptor too short (expected 34066, got 18) [ 1156.062945][ T6964] usb 6-1: config 114 has too many interfaces: 78, using maximum allowed: 32 [ 1156.266391][ T6964] usb 6-1: config 114 has 1 interface, different from the descriptor's value: 78 [ 1158.176319][ T6964] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 1158.185422][ T6964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.294737][ T6964] usb 6-1: can't set config #114, error -71 [ 1158.374535][ T6964] usb 6-1: USB disconnect, device number 15 [ 1158.540405][T16001] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2879'. [ 1159.221744][T16013] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2885'. [ 1159.231007][T16013] netlink: del zone limit has 8 unknown bytes [ 1159.794562][T16017] loop3: detected capacity change from 0 to 128 [ 1159.961490][T16023] loop8: detected capacity change from 0 to 512 [ 1160.066973][T16023] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1161.447066][ T6337] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1162.005809][ T6964] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1162.150165][ T6337] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.204297][ T6337] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.216724][ T6337] usb 10-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1162.234742][ T6337] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.250370][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'. [ 1162.261259][ T6337] usb 10-1: config 0 descriptor?? [ 1162.290982][ T6964] usb 9-1: Using ep0 maxpacket: 8 [ 1162.301862][T16045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1162.400905][T16041] team0: Device gtp0 is of different type [ 1162.446598][ T6964] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1162.469296][ T6964] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1162.494022][ T6964] usb 9-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1162.514058][ T6964] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.561942][ T6964] usb 9-1: config 0 descriptor?? [ 1162.768466][ T6337] petalynx 0003:18B1:0037.0011: report_id 0 is invalid [ 1162.775478][ T6337] petalynx 0003:18B1:0037.0011: item 0 4 1 8 parsing failed [ 1162.794402][ T6337] petalynx 0003:18B1:0037.0011: parse failed [ 1162.804149][ T6337] petalynx: probe of 0003:18B1:0037.0011 failed with error -22 [ 1162.964730][ T6852] Bluetooth: hci4: Frame reassembly failed (-84) [ 1163.082090][ T6337] usb 10-1: USB disconnect, device number 6 [ 1163.091965][T16051] loop5: detected capacity change from 0 to 40427 [ 1163.132829][T16051] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1163.161479][T16051] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1163.214156][T16051] F2FS-fs (loop5): invalid crc value [ 1163.242691][T16051] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1163.338855][T16051] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1163.348178][T16051] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1163.534708][T16037] loop8: detected capacity change from 0 to 256 [ 1163.954239][T16078] loop5: detected capacity change from 0 to 512 [ 1164.205869][T16078] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #3: comm syz.5.2903: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 1164.564165][T16078] EXT4-fs error (device loop5): ext4_quota_enable:6420: comm syz.5.2903: Bad quota inode: 3, type: 0 [ 1164.675126][T16078] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1164.961736][T16078] EXT4-fs (loop5): mount failed [ 1165.007732][ T6337] Bluetooth: hci4: command 0x1003 tx timeout [ 1165.032308][ T4186] Bluetooth: hci4: sending frame failed (-49) [ 1165.136929][ T6964] usbhid 9-1:0.0: can't add hid device: -71 [ 1165.142997][ T6964] usbhid: probe of 9-1:0.0 failed with error -71 [ 1165.190918][ T6964] usb 9-1: USB disconnect, device number 12 [ 1166.068180][T16119] loop9: detected capacity change from 0 to 1024 [ 1166.167710][T16119] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1166.226315][T11277] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1166.237176][ T26] audit: type=1800 audit(1768752146.114:99): pid=16119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2923" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1166.470457][T11277] usb 9-1: Using ep0 maxpacket: 16 [ 1166.486865][T16132] loop9: detected capacity change from 0 to 512 [ 1166.508749][T16132] EXT4-fs (loop9): Ignoring removed oldalloc option [ 1166.515718][T16132] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1166.612926][T16132] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 1166.650535][T16132] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0102] [ 1166.662022][T16132] System zones: 0-2, 18-18, 34-34 [ 1166.676492][T11277] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.687190][T11277] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1166.696700][T16132] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.2927: iget: bad i_size value: 360287970189639680 [ 1166.715486][T16135] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1166.722313][T16132] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.2927: couldn't read orphan inode 15 (err -117) [ 1166.735517][T16132] EXT4-fs (loop9): mounted filesystem without journal. Opts: abort,block_validity,init_itable,bsdgroups,inode_readahead_blks=0x0000000000800000,grpquota,oldalloc,grpjquota=,auto_da_alloc=0x0000000000000003,acl,,errors=continue. Quota mode: writeback. [ 1166.783620][T16135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1166.876436][T11277] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1166.887208][T11277] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.895251][T11277] usb 9-1: Product: syz [ 1166.951088][T11277] usb 9-1: Manufacturer: syz [ 1166.955791][T11277] usb 9-1: SerialNumber: syz [ 1167.096916][ T6964] Bluetooth: hci4: command 0x1001 tx timeout [ 1167.115902][ T4186] Bluetooth: hci4: sending frame failed (-49) [ 1167.371203][T16147] loop9: detected capacity change from 0 to 512 [ 1167.420710][T16147] FAT-fs (loop9): Directory bread(block 199916) failed [ 1167.443782][T16147] FAT-fs (loop9): Directory bread(block 199917) failed [ 1167.470689][T16147] FAT-fs (loop9): Directory bread(block 199918) failed [ 1167.477358][T11277] usb 9-1: 0:2 : does not exist [ 1167.492815][T16147] FAT-fs (loop9): Directory bread(block 199919) failed [ 1167.523492][T16147] FAT-fs (loop9): Directory bread(block 199920) failed [ 1167.525089][T11277] usb 9-1: USB disconnect, device number 13 [ 1167.543915][T16147] FAT-fs (loop9): Directory bread(block 199921) failed [ 1167.586851][T16147] FAT-fs (loop9): Directory bread(block 199922) failed [ 1167.593814][T16147] FAT-fs (loop9): Directory bread(block 199923) failed [ 1167.721042][T16147] FAT-fs (loop9): FAT read failed (blocknr 128) [ 1168.573736][T16153] loop8: detected capacity change from 0 to 40427 [ 1168.731130][T16153] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1168.750047][T16171] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1168.903787][T16153] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1168.940137][T16153] F2FS-fs (loop8): Unrecognized mount option "Jd" or missing value [ 1169.176335][ T6337] Bluetooth: hci4: command 0x1009 tx timeout [ 1169.202063][T16178] team0: Device gtp0 is of different type [ 1169.457028][T16187] loop9: detected capacity change from 0 to 512 [ 1169.489286][T16189] loop5: detected capacity change from 0 to 256 [ 1169.515159][T16187] EXT4-fs (loop9): inline encryption not supported [ 1169.546616][T16187] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1169.564247][T16187] EXT4-fs (loop9): Ignoring removed bh option [ 1169.574172][T16187] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1169.581302][T16187] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1169.630754][T16189] FAT-fs (loop5): Directory bread(block 64) failed [ 1169.645462][T16187] EXT4-fs (loop9): 1 truncate cleaned up [ 1169.661317][T16189] FAT-fs (loop5): Directory bread(block 65) failed [ 1169.668675][T16187] EXT4-fs (loop9): mounted filesystem without journal. Opts: inlinecrypt,mblk_io_submit,bh,auto_da_alloc,noinit_itable,test_dummy_encryption,block_validity,,errors=continue. Quota mode: none. [ 1169.673703][T16189] FAT-fs (loop5): Directory bread(block 66) failed [ 1169.694705][T16189] FAT-fs (loop5): Directory bread(block 67) failed [ 1169.704783][T16189] FAT-fs (loop5): Directory bread(block 68) failed [ 1169.711671][T16189] FAT-fs (loop5): Directory bread(block 69) failed [ 1169.719183][T16189] FAT-fs (loop5): Directory bread(block 70) failed [ 1169.725755][T16189] FAT-fs (loop5): Directory bread(block 71) failed [ 1169.741467][T16189] FAT-fs (loop5): Directory bread(block 72) failed [ 1169.748497][T16189] FAT-fs (loop5): Directory bread(block 73) failed [ 1170.125399][T16187] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1171.621482][T16230] team0: Device gtp0 is of different type [ 1172.505617][T16238] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1172.535465][T16238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1172.547162][T16238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1172.593677][T16238] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1172.627810][T16238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1172.636591][T16238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1172.675695][T16242] loop3: detected capacity change from 0 to 512 [ 1172.763166][T16242] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1172.809140][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2967'. [ 1172.820346][T16242] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.2966: inode has both inline data and extents flags [ 1172.869749][T16242] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.2966: couldn't read orphan inode 15 (err -117) [ 1172.884497][T16242] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1173.119998][T16251] loop3: detected capacity change from 0 to 128 [ 1173.279294][T16251] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1173.306341][T16251] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1173.357348][T16255] loop9: detected capacity change from 0 to 256 [ 1173.602864][T16258] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2972'. [ 1174.232640][T16255] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1174.256902][T16255] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1174.293701][T16251] syz.3.2968 (pid 16251) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1174.357740][T16255] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1174.409781][T16251] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1174.714741][T16271] team0: Device gtp0 is of different type [ 1175.032443][T16275] loop9: detected capacity change from 0 to 256 [ 1175.115986][T16275] FAT-fs (loop9): bogus number of FAT sectors [ 1175.202396][T16275] FAT-fs (loop9): Can't find a valid FAT filesystem [ 1175.716958][T16292] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2983'. [ 1175.806677][ T4240] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1175.877156][T15950] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1176.278133][T16301] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2985'. [ 1176.522425][T16303] loop5: detected capacity change from 0 to 512 [ 1177.120986][ T4240] usb 9-1: Using ep0 maxpacket: 16 [ 1177.302081][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.309159][T16303] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1177.318835][T16303] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1177.345388][T16303] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1177.352829][T16303] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1177.362481][T16303] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1177.377655][T16303] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1177.386664][T16306] loop6: detected capacity change from 0 to 256 [ 1177.397818][T16303] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2986: bg 0: block 40: padding at end of block bitmap is not set [ 1177.413799][T16303] EXT4-fs (loop5): Remounting filesystem read-only [ 1177.420527][T16303] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 1177.432289][T16303] EXT4-fs (loop5): Remounting filesystem read-only [ 1177.439741][T16303] EXT4-fs (loop5): 1 truncate cleaned up [ 1177.445474][T16303] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,data=writeback,. Quota mode: writeback. [ 1177.459471][T15950] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.464245][ T4240] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1177.481333][ T4240] usb 9-1: config 0 has no interface number 0 [ 1177.487839][ T4240] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.505371][T15950] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1177.525333][T16306] exFAT-fs (loop6): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 1177.535937][T16306] exFAT-fs (loop6): failed to load upcase table [ 1177.542473][T15950] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1177.542684][ T4240] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.553582][T16306] exFAT-fs (loop6): failed to recognize exfat type [ 1177.579557][T15950] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.615318][T15950] usb 10-1: config 0 descriptor?? [ 1177.669813][T15950] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1177.842260][T16311] loop5: detected capacity change from 0 to 128 [ 1177.850252][ T4240] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1177.860516][ T4240] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.884377][ T4240] usb 9-1: config 0 descriptor?? [ 1178.120471][T16311] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1178.140091][T16311] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1178.306270][ T4240] usbhid 9-1:0.1: can't add hid device: -71 [ 1178.312508][ T4240] usbhid: probe of 9-1:0.1 failed with error -71 [ 1178.344990][ T4240] usb 9-1: USB disconnect, device number 14 [ 1178.884301][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2993'. [ 1179.108544][T16322] loop8: detected capacity change from 0 to 40427 [ 1179.374524][T16322] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1179.490500][T16322] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1179.780097][ T4240] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1179.849406][ T4251] usb 10-1: USB disconnect, device number 7 [ 1179.866762][T16322] F2FS-fs (loop8): invalid crc value [ 1179.990033][T16338] loop5: detected capacity change from 0 to 128 [ 1180.002241][T16336] loop9: detected capacity change from 0 to 512 [ 1180.016045][T16322] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1180.063498][T16336] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1180.086620][ T4240] usb 7-1: Using ep0 maxpacket: 16 [ 1180.100775][T16336] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.2996: inode has both inline data and extents flags [ 1180.147447][T16336] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.2996: couldn't read orphan inode 15 (err -117) [ 1180.168565][T16338] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1180.207245][ T4240] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.219949][T16322] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1180.226393][T16336] EXT4-fs (loop9): mounted filesystem without journal. Opts: mblk_io_submit,dioread_lock,init_itable,journal_ioprio=0x0000000000000006,bsddf,,errors=continue. Quota mode: none. [ 1180.236916][ T4240] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1180.249910][T16338] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.334171][T16322] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1180.535231][ T26] audit: type=1804 audit(1768752160.414:100): pid=16320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2991" name="/newroot/426/bus/file0/file1" dev="overlay" ino=10 res=1 errno=0 [ 1180.646387][ T4240] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1180.655586][ T4240] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.714022][ T4240] usb 7-1: Product: syz [ 1180.761960][T16351] loop9: detected capacity change from 0 to 512 [ 1180.874049][ T4240] usb 7-1: Manufacturer: syz [ 1180.879385][ T4240] usb 7-1: SerialNumber: syz [ 1180.902891][T16351] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1180.930542][T16351] EXT4-fs (loop9): Ignoring removed oldalloc option [ 1181.067020][T16353] loop5: detected capacity change from 0 to 512 [ 1181.736365][T16351] EXT4-fs (loop9): 1 truncate cleaned up [ 1181.742194][T16351] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,bsdgroups,nouid32,i_version,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,,errors=continue. Quota mode: none. [ 1181.776530][T16353] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1181.784543][T16353] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1181.797208][T16353] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1181.804438][T16353] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1181.814080][T16353] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1181.829280][T16353] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1181.850395][T16353] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2999: bg 0: block 40: padding at end of block bitmap is not set [ 1181.866199][T16353] EXT4-fs (loop5): Remounting filesystem read-only [ 1181.872826][T16353] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 1181.881895][T16353] EXT4-fs (loop5): Remounting filesystem read-only [ 1181.888596][T16353] EXT4-fs (loop5): 1 truncate cleaned up [ 1181.894278][T16353] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,data=writeback,. Quota mode: writeback. [ 1181.947014][ T4240] usb 7-1: 0:2 : does not exist [ 1181.975228][ T4240] usb 7-1: USB disconnect, device number 20 [ 1182.412739][T11867] udevd[11867]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1182.738790][T16375] loop6: detected capacity change from 0 to 512 [ 1183.549938][T16381] loop8: detected capacity change from 0 to 256 [ 1183.963231][T16393] loop3: detected capacity change from 0 to 16 [ 1184.052752][T16381] loop8: detected capacity change from 0 to 256 [ 1184.137847][T16381] exfat: Deprecated parameter 'utf8' [ 1184.143329][T16381] exfat: Deprecated parameter 'utf8' [ 1184.274416][T16393] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 1184.292430][T16381] exfat: Deprecated parameter 'utf8' [ 1184.332670][T16395] loop6: detected capacity change from 0 to 512 [ 1184.903905][T16381] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1184.907918][T16395] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1184.923954][T16395] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1184.933151][T16395] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1184.939641][T16395] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1184.949060][T16395] EXT4-fs warning (device loop6): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1184.963641][T16395] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1184.974029][T16395] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3014: bg 0: block 40: padding at end of block bitmap is not set [ 1184.989323][T16395] EXT4-fs (loop6): Remounting filesystem read-only [ 1184.995982][T16395] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 1185.005664][T16395] EXT4-fs (loop6): Remounting filesystem read-only [ 1185.012458][T16395] EXT4-fs (loop6): 1 truncate cleaned up [ 1185.018188][T16395] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,data=writeback,. Quota mode: writeback. [ 1188.281996][T16416] loop3: detected capacity change from 0 to 512 [ 1188.632355][T16413] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3020'. [ 1188.846440][T16416] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1189.947673][T16422] loop5: detected capacity change from 0 to 256 [ 1190.023653][T16425] loop8: detected capacity change from 0 to 16 [ 1190.127368][T16425] erofs: (device loop8): mounted with root inode @ nid 36. [ 1190.209911][T16422] FAT-fs (loop5): Directory bread(block 64) failed [ 1190.270116][T16416] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1190.367259][T16416] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.377820][T16422] FAT-fs (loop5): Directory bread(block 65) failed [ 1190.384692][T16422] FAT-fs (loop5): Directory bread(block 66) failed [ 1190.406366][T16422] FAT-fs (loop5): Directory bread(block 67) failed [ 1190.433497][T16422] FAT-fs (loop5): Directory bread(block 68) failed [ 1190.454037][T16422] FAT-fs (loop5): Directory bread(block 69) failed [ 1190.476397][T16422] FAT-fs (loop5): Directory bread(block 70) failed [ 1190.508085][T16422] FAT-fs (loop5): Directory bread(block 71) failed [ 1190.528002][T16422] FAT-fs (loop5): Directory bread(block 72) failed [ 1190.534639][T16422] FAT-fs (loop5): Directory bread(block 73) failed [ 1191.553426][T16452] loop6: detected capacity change from 0 to 512 [ 1192.250362][T16452] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1192.258519][T16452] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1192.268259][T16452] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1192.274752][T16452] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1192.284434][T16452] EXT4-fs warning (device loop6): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1192.299571][T16452] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1192.315122][T16452] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3030: bg 0: block 40: padding at end of block bitmap is not set [ 1192.331688][T16452] EXT4-fs (loop6): Remounting filesystem read-only [ 1192.338397][T16452] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 1192.352278][T16452] EXT4-fs (loop6): Remounting filesystem read-only [ 1192.359514][T16452] EXT4-fs (loop6): 1 truncate cleaned up [ 1192.365298][T16452] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,data=writeback,. Quota mode: writeback. [ 1192.526318][ T4251] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1192.828125][ T4251] usb 4-1: Using ep0 maxpacket: 8 [ 1192.981764][ T4251] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 66 [ 1193.005852][T16442] loop5: detected capacity change from 0 to 40427 [ 1193.102670][T16442] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1193.181568][T16442] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1193.202481][ T4251] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1193.221918][ T4251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.253157][ T4251] usb 4-1: Product: syz [ 1193.296281][ T4251] usb 4-1: Manufacturer: syz [ 1193.300950][ T4251] usb 4-1: SerialNumber: syz [ 1193.357260][T16451] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1193.422574][T15368] attempt to access beyond end of device [ 1193.422574][T15368] loop5: rw=2049, want=45104, limit=40427 [ 1193.615966][ T4251] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1193.846272][ C1] usblp0: nonzero write bulk status received: -71 [ 1193.864332][ T4251] usb 4-1: USB disconnect, device number 30 [ 1193.887526][ T4251] usblp0: removed [ 1194.303735][T16488] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3040'. [ 1194.745757][T16496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3042'. [ 1194.755042][T16496] netlink: set zone limit has 8 unknown bytes [ 1195.836755][T16505] loop5: detected capacity change from 0 to 512 [ 1196.093951][T16505] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1196.102596][T16505] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1196.119491][T16505] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1196.127201][T16505] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1196.137126][T16505] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1196.151965][T16505] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1196.169536][T16505] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3045: bg 0: block 40: padding at end of block bitmap is not set [ 1196.194571][T16505] EXT4-fs (loop5): Remounting filesystem read-only [ 1196.201339][T16505] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 1196.212907][T16505] EXT4-fs (loop5): Remounting filesystem read-only [ 1196.222492][T16505] EXT4-fs (loop5): 1 truncate cleaned up [ 1196.228333][T16505] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,data=writeback,. Quota mode: writeback. [ 1196.281970][T16505] EXT4-fs (loop5): shut down requested (2) [ 1196.642595][T16501] loop3: detected capacity change from 0 to 40427 [ 1196.737822][T16501] F2FS-fs (loop3): invalid crc value [ 1196.781799][T16501] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1196.992242][T16501] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1198.662886][T16544] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3055'. [ 1198.672537][T16544] netlink: set zone limit has 8 unknown bytes [ 1199.257881][T16547] team0: Device gtp0 is of different type [ 1199.809825][T16552] loop5: detected capacity change from 0 to 512 [ 1201.874253][T16552] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1201.882890][T16552] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1201.892229][T16552] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1201.899155][T16552] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1201.912900][T16552] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1201.927808][T16552] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1201.935110][T16552] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3058: bg 0: block 40: padding at end of block bitmap is not set [ 1201.950793][T16552] EXT4-fs (loop5): Remounting filesystem read-only [ 1201.957545][T16552] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 1201.967172][T16552] EXT4-fs (loop5): Remounting filesystem read-only [ 1201.974384][T16552] EXT4-fs (loop5): 1 truncate cleaned up [ 1201.980695][T16552] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,data=writeback,. Quota mode: writeback. [ 1202.033275][T16559] loop6: detected capacity change from 0 to 256 [ 1202.799022][T16559] FAT-fs (loop6): Directory bread(block 64) failed [ 1202.835230][T16559] FAT-fs (loop6): Directory bread(block 65) failed [ 1202.889736][T16559] FAT-fs (loop6): Directory bread(block 66) failed [ 1202.929044][T16559] FAT-fs (loop6): Directory bread(block 67) failed [ 1202.935733][T16559] FAT-fs (loop6): Directory bread(block 68) failed [ 1202.973233][T16559] FAT-fs (loop6): Directory bread(block 69) failed [ 1203.015412][T16559] FAT-fs (loop6): Directory bread(block 70) failed [ 1203.032725][T16559] FAT-fs (loop6): Directory bread(block 71) failed [ 1203.045674][T16559] FAT-fs (loop6): Directory bread(block 72) failed [ 1203.065976][T16559] FAT-fs (loop6): Directory bread(block 73) failed [ 1204.513702][T16587] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3068'. [ 1204.523039][T16587] netlink: set zone limit has 8 unknown bytes [ 1204.602564][T16589] loop9: detected capacity change from 0 to 256 [ 1204.654181][T16591] overlayfs: failed to clone upperpath [ 1204.685089][T16589] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x445b3696, utbl_chksum : 0xe619d30d) [ 1204.751653][T16589] exFAT-fs (loop9): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 514, unilen : 257 > 255 [ 1204.954386][T16593] tipc: Enabling of bearer rejected, failed to enable media [ 1205.084455][T16596] loop9: detected capacity change from 0 to 512 [ 1205.222884][T16596] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1205.497650][T16596] EXT4-fs (loop9): 1 truncate cleaned up [ 1205.526984][T16596] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 1205.609311][T16605] loop3: detected capacity change from 0 to 512 [ 1205.887068][T16605] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1205.895234][T16605] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1205.908925][T16605] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1205.915928][T16605] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1205.925550][T16605] EXT4-fs warning (device loop3): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1205.940854][T16605] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1205.960038][T16605] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3075: bg 0: block 40: padding at end of block bitmap is not set [ 1205.986600][T16605] EXT4-fs (loop3): Remounting filesystem read-only [ 1205.993390][T16605] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 1206.007684][T16605] EXT4-fs (loop3): Remounting filesystem read-only [ 1206.015030][T16605] EXT4-fs (loop3): 1 truncate cleaned up [ 1206.021307][T16605] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,data=writeback,. Quota mode: writeback. [ 1206.068697][T16605] EXT4-fs (loop3): shut down requested (2) [ 1206.640301][T16616] xt_hashlimit: size too large, truncated to 1048576 [ 1209.563898][T16636] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3084'. [ 1209.573860][T16636] netlink: set zone limit has 8 unknown bytes [ 1209.902821][T16640] loop3: detected capacity change from 0 to 512 [ 1211.685829][T16640] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1211.728487][T16640] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.288686][T16658] loop9: detected capacity change from 0 to 512 [ 1213.426953][T16658] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1213.434957][T16658] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1213.444694][T16658] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1213.451823][T16658] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 1213.461299][T16658] EXT4-fs warning (device loop9): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1213.475884][T16658] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 1213.532265][T16658] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3088: bg 0: block 40: padding at end of block bitmap is not set [ 1213.565245][T16658] EXT4-fs (loop9): Remounting filesystem read-only [ 1213.571926][T16658] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 1213.585486][T16658] EXT4-fs (loop9): Remounting filesystem read-only [ 1213.592375][T16658] EXT4-fs (loop9): 1 truncate cleaned up [ 1213.598225][T16658] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,data=writeback,. Quota mode: writeback. [ 1213.619350][T16658] EXT4-fs (loop9): shut down requested (2) [ 1216.183783][T16675] overlayfs: missing 'lowerdir' [ 1216.586351][ T4245] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1217.858270][T16689] loop9: detected capacity change from 0 to 512 [ 1217.987881][T16689] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1218.026404][T16689] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.336227][ T4245] usb 6-1: Using ep0 maxpacket: 16 [ 1219.426515][ T4245] usb 6-1: device descriptor read/all, error -71 [ 1221.639596][T16734] team0: Device gtp0 is of different type [ 1223.292628][T16740] loop6: detected capacity change from 0 to 512 [ 1223.343850][T16742] overlayfs: failed to clone upperpath [ 1223.485948][T16740] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1223.567268][T16740] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1224.025328][T16751] loop3: detected capacity change from 0 to 256 [ 1224.896682][T16758] loop6: detected capacity change from 0 to 256 [ 1225.052491][T16758] exfat: Deprecated parameter 'utf8' [ 1225.059928][T16758] exfat: Unknown parameter 'keep_last_dots' [ 1225.990872][T16768] loop3: detected capacity change from 0 to 256 [ 1226.260637][T16758] loop6: detected capacity change from 0 to 8192 [ 1227.096247][T16777] loop9: detected capacity change from 0 to 512 [ 1228.105266][T16777] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1228.113345][T16777] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1228.123017][T16777] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1228.130218][T16777] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 1228.140228][T16777] EXT4-fs warning (device loop9): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1228.156312][T16777] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 1228.176550][T16777] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3124: bg 0: block 40: padding at end of block bitmap is not set [ 1228.193873][T16777] EXT4-fs (loop9): Remounting filesystem read-only [ 1228.200521][T16777] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 1228.209573][T16777] EXT4-fs (loop9): Remounting filesystem read-only [ 1228.216289][T16777] EXT4-fs (loop9): 1 truncate cleaned up [ 1228.222009][T16777] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,data=writeback,. Quota mode: writeback. [ 1228.953055][ T1362] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.077807][ T1362] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.182994][ T1362] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.356275][ T1362] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.750285][ T1362] tipc: Left network mode [ 1230.338064][T16824] chnl_net:caif_netlink_parms(): no params data found [ 1230.534855][T16822] loop5: detected capacity change from 0 to 40427 [ 1230.645166][T16822] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x16481 [ 1230.755157][T16822] F2FS-fs (loop5): invalid crc value [ 1230.767480][T16822] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1230.839216][T16822] F2FS-fs (loop5): Start checkpoint disabled! [ 1230.857426][T16824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.864574][T16824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.875769][T16824] device bridge_slave_0 entered promiscuous mode [ 1230.903222][T16824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.913174][T16824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.928958][T16822] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1230.947937][T16824] device bridge_slave_1 entered promiscuous mode [ 1231.037201][T16822] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3952632679 (7905265358 ns) > initial count (3639679846 ns). Using initial count to start timer. [ 1231.090537][T16824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.115297][T16850] kvm [16817]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 1231.164124][T16824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.177328][T16850] kvm [16817]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 1231.202912][T16850] APIC base relocation is unsupported by KVM [ 1231.303128][T16824] team0: Port device team_slave_0 added [ 1231.336472][T16824] team0: Port device team_slave_1 added [ 1231.425157][ T1362] device hsr_slave_0 left promiscuous mode [ 1231.442282][ T1362] device hsr_slave_1 left promiscuous mode [ 1231.516289][ T1362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1231.525136][ T1362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.594403][ T1362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.606632][ T1362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.624875][ T1362] device bridge_slave_1 left promiscuous mode [ 1231.667975][ T1362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.693964][ T1362] device bridge_slave_0 left promiscuous mode [ 1231.717528][ T1362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.886219][ T2239] Bluetooth: hci2: command 0x0409 tx timeout [ 1232.857618][ T1362] device veth1_macvtap left promiscuous mode [ 1232.863733][ T1362] device veth0_macvtap left promiscuous mode [ 1232.871385][ T1362] device veth1_vlan left promiscuous mode [ 1232.877322][ T1362] device veth0_vlan left promiscuous mode [ 1233.015129][ T1362] bond2 (unregistering): Released all slaves [ 1233.047329][ T1362] bond1 (unregistering): Released all slaves [ 1233.205714][ T1362] team0 (unregistering): Port device team_slave_1 removed [ 1233.222703][ T1362] team0 (unregistering): Port device team_slave_0 removed [ 1233.239400][ T1362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1233.270419][ T1362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.373150][ T1362] bond0 (unregistering): Released all slaves [ 1233.592359][T16824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.612901][T16824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.650710][T16824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.691850][T16824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.705664][T16824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.740992][T16824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.838606][T16824] device hsr_slave_0 entered promiscuous mode [ 1233.869132][T16824] device hsr_slave_1 entered promiscuous mode [ 1233.876101][T16824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1233.910312][T16824] Cannot create hsr debugfs directory [ 1234.059150][ T4251] Bluetooth: hci2: command 0x041b tx timeout [ 1236.126354][ T6964] Bluetooth: hci2: command 0x040f tx timeout [ 1236.346888][ T6964] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1236.596339][ T6964] usb 6-1: Using ep0 maxpacket: 16 [ 1236.857579][ T6964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1236.934546][T16917] loop3: detected capacity change from 0 to 256 [ 1236.978964][ T6964] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1237.204781][ T6964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.468687][ T6964] usb 6-1: config 0 descriptor?? [ 1237.735954][ T6964] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 1237.743850][ T6964] usb 6-1: No valid video chain found. [ 1238.003709][ T6964] usb 6-1: USB disconnect, device number 18 [ 1238.404049][T16910] Bluetooth: hci2: command 0x0419 tx timeout [ 1238.658101][T16917] exfat: Deprecated parameter 'namecase' [ 1238.663922][T16917] exfat: Unknown parameter 'keep_last_dots' [ 1239.666761][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.088987][T16917] loop3: detected capacity change from 0 to 40427 [ 1240.103705][T16917] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 1240.114554][T16917] F2FS-fs (loop3): invalid crc value [ 1240.121876][T16917] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1240.178916][T16917] F2FS-fs (loop3): Start checkpoint disabled! [ 1240.196439][T16824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1240.203423][T16917] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1240.255776][T16824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1240.275450][T16824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1240.319063][T16824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1240.506714][ T4245] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1240.766431][T16910] Bluetooth: hci0: command 0x0406 tx timeout [ 1240.773715][ T4245] usb 6-1: Using ep0 maxpacket: 16 [ 1240.783398][T16824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.848301][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1240.876528][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1240.900216][T16824] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.972038][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1241.030724][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1241.060226][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.067534][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.127120][ T4245] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1241.166255][ T4245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.225766][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1241.233815][ T4245] usb 6-1: Product: syz [ 1241.279404][ T4245] usb 6-1: Manufacturer: syz [ 1241.292891][ T4245] usb 6-1: SerialNumber: syz [ 1241.388798][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1241.596412][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1241.682401][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.689627][ T6852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.815569][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1241.874501][ T4245] r8152-cfgselector 6-1: config 0 descriptor?? [ 1241.893434][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1242.082883][T16824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1242.146753][ T4245] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1242.156569][T16920] loop5: detected capacity change from 0 to 512 [ 1242.218188][T16824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1242.240465][T16920] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 1242.325183][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1242.402090][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1242.599394][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1242.711248][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1242.771927][T16920] EXT4-fs (loop5): failed to open journal device unknown-block(0,8) -6 [ 1242.810035][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1242.894910][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1242.938188][ T4245] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 1243.007940][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1243.122765][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1243.141929][T16910] usb 6-1: USB disconnect, device number 19 [ 1243.217048][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1243.235944][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1243.903568][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1243.949233][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1244.029296][T16968] chnl_net:caif_netlink_parms(): no params data found [ 1244.126063][T16824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.270498][T16991] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1244.287771][T16991] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1244.334824][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1244.350608][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1244.418611][T16824] device veth0_vlan entered promiscuous mode [ 1244.431531][T16824] device veth1_vlan entered promiscuous mode [ 1244.460393][T16824] device veth0_macvtap entered promiscuous mode [ 1244.542468][T16968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.626214][T16968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.735490][T17005] loop9: detected capacity change from 0 to 512 [ 1245.082494][T17005] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3171: bg 0: block 393: padding at end of block bitmap is not set [ 1245.108494][T17005] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 1245.123252][T17005] EXT4-fs (loop9): 2 truncates cleaned up [ 1245.130072][T17005] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1245.272345][T16968] device bridge_slave_0 entered promiscuous mode [ 1245.663956][T15950] Bluetooth: hci4: command 0x0409 tx timeout [ 1245.674575][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1245.702124][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1245.728168][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1246.778983][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1246.901043][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1246.949015][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1246.987389][T16824] device veth1_macvtap entered promiscuous mode [ 1247.054808][T16824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.093044][T16824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.124291][T16824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.169691][T16824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.206254][T16824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.243920][T16824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.286086][T16824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.304746][T16824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.323575][T16824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.333010][T16968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.349751][T16968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.365454][T16968] device bridge_slave_1 entered promiscuous mode [ 1247.418320][T16968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.441715][T16968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.510400][T16968] team0: Port device team_slave_0 added [ 1247.529061][T16968] team0: Port device team_slave_1 added [ 1247.688963][T16968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.696014][T16968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.798443][T17022] loop9: detected capacity change from 0 to 512 [ 1247.815369][T11277] Bluetooth: hci4: command 0x041b tx timeout [ 1247.911385][T17022] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 1247.929702][T16968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.948893][T17022] EXT4-fs (loop9): Ignoring removed bh option [ 1247.971321][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1247.990137][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1248.010243][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1248.072150][T17022] EXT4-fs error (device loop9): mb_free_blocks:1860: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1248.080578][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1248.175963][T17027] xt_policy: neither incoming nor outgoing policy selected [ 1248.501961][T17022] EXT4-fs error (device loop9): ext4_do_update_inode:5218: inode #11: comm syz.9.3173: corrupted inode contents [ 1248.529014][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1249.040779][T17022] EXT4-fs error (device loop9): ext4_dirty_inode:6054: inode #11: comm syz.9.3173: mark_inode_dirty error [ 1249.072557][T17022] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.3173: invalid indirect mapped block 1 (level 1) [ 1249.143944][T16824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.165491][T17022] EXT4-fs error (device loop9): ext4_do_update_inode:5218: inode #11: comm syz.9.3173: corrupted inode contents [ 1249.181017][T16824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.202196][T16824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.227180][T17022] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 1249.245949][T16824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.259351][T16824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.269922][T17022] EXT4-fs error (device loop9): ext4_do_update_inode:5218: inode #11: comm syz.9.3173: corrupted inode contents [ 1249.293004][T17022] EXT4-fs error (device loop9): ext4_truncate:4279: inode #11: comm syz.9.3173: mark_inode_dirty error [ 1249.306194][T16824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.336181][T16824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.347764][T17022] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 1249.372036][T17022] EXT4-fs (loop9): 1 truncate cleaned up [ 1249.382724][T16824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.406928][T17022] EXT4-fs (loop9): mounted filesystem without journal. Opts: nomblk_io_submit,bh,,errors=continue. Quota mode: none. [ 1249.427524][T16824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.486504][T16968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.493596][T16968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.565385][T17022] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #2: block 13: comm syz.9.3173: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 1249.594780][T17032] loop3: detected capacity change from 0 to 1024 [ 1249.612408][T16968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.658855][T17032] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1249.702751][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1249.734165][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1249.820818][T16824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.830033][T16824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.866165][T16824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.895309][T16824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.904937][T15950] Bluetooth: hci4: command 0x040f tx timeout [ 1250.608689][T17051] loop9: detected capacity change from 0 to 512 [ 1251.960084][T17051] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3181: bg 0: block 393: padding at end of block bitmap is not set [ 1251.979213][T17051] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 1251.996977][T17051] EXT4-fs (loop9): 2 truncates cleaned up [ 1252.002951][T17051] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1252.672304][ T6463] Bluetooth: hci4: command 0x0419 tx timeout [ 1252.689701][T16968] device hsr_slave_0 entered promiscuous mode [ 1252.727747][T16968] device hsr_slave_1 entered promiscuous mode [ 1252.768863][T16968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1252.816335][T16968] Cannot create hsr debugfs directory [ 1253.859959][T17076] xt_policy: neither incoming nor outgoing policy selected [ 1255.127810][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.168634][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.204515][T17091] loop3: detected capacity change from 0 to 128 [ 1255.217095][ T1362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1255.271125][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.303871][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.377476][T17092] attempt to access beyond end of device [ 1255.377476][T17092] loop3: rw=2049, want=497, limit=128 [ 1255.421239][T17091] attempt to access beyond end of device [ 1255.421239][T17091] loop3: rw=524288, want=369, limit=128 [ 1255.482773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1255.521659][T17091] attempt to access beyond end of device [ 1255.521659][T17091] loop3: rw=0, want=153, limit=128 [ 1255.550526][T17091] attempt to access beyond end of device [ 1255.550526][T17091] loop3: rw=0, want=153, limit=128 [ 1255.587844][T17091] attempt to access beyond end of device [ 1255.587844][T17091] loop3: rw=0, want=153, limit=128 [ 1255.614285][T17091] attempt to access beyond end of device [ 1255.614285][T17091] loop3: rw=0, want=153, limit=128 [ 1255.639307][T17091] attempt to access beyond end of device [ 1255.639307][T17091] loop3: rw=0, want=153, limit=128 [ 1255.716055][T17091] attempt to access beyond end of device [ 1255.716055][T17091] loop3: rw=0, want=153, limit=128 [ 1255.774462][T17091] attempt to access beyond end of device [ 1255.774462][T17091] loop3: rw=0, want=153, limit=128 [ 1255.819134][T17091] attempt to access beyond end of device [ 1255.819134][T17091] loop3: rw=0, want=153, limit=128 [ 1255.857535][T17100] loop2: detected capacity change from 0 to 256 [ 1255.868598][T16968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1255.929230][T16968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1255.961470][T17100] FAT-fs (loop2): Directory bread(block 64) failed [ 1255.970168][T16968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1255.999411][T17100] FAT-fs (loop2): Directory bread(block 65) failed [ 1256.019163][T16968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1256.026899][T17100] FAT-fs (loop2): Directory bread(block 66) failed [ 1256.033637][T17100] FAT-fs (loop2): Directory bread(block 67) failed [ 1256.062353][T17100] FAT-fs (loop2): Directory bread(block 68) failed [ 1256.090042][T17100] FAT-fs (loop2): Directory bread(block 69) failed [ 1256.103991][T17100] FAT-fs (loop2): Directory bread(block 70) failed [ 1256.133641][T17100] FAT-fs (loop2): Directory bread(block 71) failed [ 1256.152760][T17100] FAT-fs (loop2): Directory bread(block 72) failed [ 1256.166742][T17100] FAT-fs (loop2): Directory bread(block 73) failed [ 1256.387429][T17116] loop5: detected capacity change from 0 to 1024 [ 1256.482114][T17116] EXT4-fs (loop5): Ignoring removed oldalloc option [ 1256.501423][T17116] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1256.711072][T17116] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,noload,jqfmt=vfsv1,user_xattr,stripe=0x0000000000004b48,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1257.006847][T16968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1257.107404][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1257.139965][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1257.174038][T16968] 8021q: adding VLAN 0 to HW filter on device team0 [ 1257.228446][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1257.258373][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1257.288685][T17057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.295882][T17057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.426767][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1257.434926][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1257.473327][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1257.512453][T17057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.519626][T17057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.575240][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1257.602016][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1257.627891][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1257.640623][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1257.660797][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1257.684913][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1257.725361][T16968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1257.750899][T16968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1257.774012][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1257.787264][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1257.808790][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1257.829511][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1257.852674][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1257.876754][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1258.025977][T17151] input: syz1 as /devices/virtual/input/input31 [ 1258.322258][T17162] loop3: detected capacity change from 0 to 2048 [ 1258.460365][T17162] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,nombcache,barrier,data_err=ignore,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 1258.477843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1258.488478][T17162] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1258.534692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1258.582635][T17173] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3199: bg 0: block 345: padding at end of block bitmap is not set [ 1258.596329][T17172] serio: Serial port ttyS3 [ 1258.616585][T17173] EXT4-fs (loop3): Remounting filesystem read-only [ 1258.623246][T16968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1258.813119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1258.850184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1259.065852][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1259.075314][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1259.134146][T17188] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1259.572111][T16968] device veth0_vlan entered promiscuous mode [ 1259.653527][T16968] device veth1_vlan entered promiscuous mode [ 1259.776821][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1259.807613][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1259.845947][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1259.855895][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1259.938446][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1259.989190][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1260.055711][T16968] device veth0_macvtap entered promiscuous mode [ 1260.091395][T16968] device veth1_macvtap entered promiscuous mode [ 1260.144628][T17200] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1260.424542][T17201] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1260.459615][T16968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.502650][T16968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.596351][T16968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.666835][T16968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.693288][T16968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.716248][T16968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.740423][T16968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.772953][T16968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.802200][T16968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.834060][T16968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.883201][T16968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.899095][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1260.908334][T17220] loop2: detected capacity change from 0 to 8192 [ 1260.923702][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1260.969420][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1261.001138][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1261.022762][T16968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.046424][T16968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.060858][T16968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.083278][T16968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.115412][T16968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.147341][T16968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.183710][T16968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.203212][T16968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.214716][T16968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.246936][ T2239] Bluetooth: hci3: command 0x0406 tx timeout [ 1261.253433][T16968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.280406][T16968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.310886][ T9] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.367048][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3213'. [ 1261.493673][ T9] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.315345][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1262.339265][T17057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1262.393464][T16968] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.420608][T16968] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.429851][T16968] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.440574][T16968] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.468490][ T9] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.549219][T17258] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1262.631342][ T9] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.641435][T17266] loop9: detected capacity change from 0 to 16 [ 1262.746983][T17266] erofs: (device loop9): mounted with root inode @ nid 36. [ 1262.782820][T17266] erofs: (device loop9): z_erofs_readpage: failed to read, err [-95] [ 1262.791991][T17266] BUG: sleeping function called from invalid context at fs/dcache.c:877 [ 1262.800414][T17266] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 17266, name: syz.9.3221 [ 1262.809618][T17266] 1 lock held by syz.9.3221/17266: [ 1262.814763][T17266] #0: ffff888040c94c00 (&type->i_mutex_dir_key#11/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 1262.825608][T17266] Preemption disabled at: [ 1262.825623][T17266] [] z_erofs_reload_indexes+0x347/0x590 [ 1262.837254][T17266] CPU: 1 PID: 17266 Comm: syz.9.3221 Not tainted syzkaller #0 [ 1262.844749][T17266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1262.854849][T17266] Call Trace: [ 1262.858211][T17266] [ 1262.861179][T17266] dump_stack_lvl+0x188/0x250 [ 1262.865908][T17266] ? show_regs_print_info+0x20/0x20 [ 1262.871161][T17266] ? load_image+0x400/0x400 [ 1262.875710][T17266] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 1262.881224][T17266] ___might_sleep+0x493/0x610 [ 1262.885951][T17266] ? z_erofs_reload_indexes+0x347/0x590 [ 1262.891539][T17266] ? __might_sleep+0xf0/0xf0 [ 1262.896167][T17266] ? __rwlock_init+0x140/0x140 [ 1262.900996][T17266] ? erofs_lookup+0x1af/0x330 [ 1262.905720][T17266] dput+0x26/0x1a0 [ 1262.909499][T17266] lookup_one_qstr_excl+0x1d6/0x240 [ 1262.914739][T17266] filename_create+0x23a/0x470 [ 1262.919543][T17266] ? kern_path_create+0x190/0x190 [ 1262.924624][T17266] do_mknodat+0x26f/0x630 [ 1262.926658][ T6882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.929012][T17266] ? __phys_addr_symbol+0x2b/0x70 [ 1262.929049][T17266] ? may_open+0x400/0x400 [ 1262.946687][T17266] ? getname_flags+0x1fe/0x500 [ 1262.951501][T17266] __x64_sys_mknodat+0xa5/0xc0 [ 1262.956309][T17266] do_syscall_64+0x4c/0xa0 [ 1262.960763][T17266] ? clear_bhb_loop+0x30/0x80 [ 1262.965482][T17266] ? clear_bhb_loop+0x30/0x80 [ 1262.970202][T17266] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1262.976160][T17266] RIP: 0033:0x7fc56b81ecb9 [ 1262.980629][T17266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.000490][T17266] RSP: 002b:00007fc569a7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 1263.004329][ T6882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.008944][T17266] RAX: ffffffffffffffda RBX: 00007fc56ba99fa0 RCX: 00007fc56b81ecb9 [ 1263.008967][T17266] RDX: 0000000000001000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1263.008984][T17266] RBP: 00007fc56b88cbf7 R08: 0000000000000000 R09: 0000000000000000 [ 1263.040294][T17266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1263.048351][T17266] R13: 00007fc56ba9a038 R14: 00007fc56ba99fa0 R15: 00007ffe55fca5d8 [ 1263.056466][T17266] [ 1263.059738][T17266] BUG: scheduling while atomic: syz.9.3221/17266/0x00000002 [ 1263.067473][T17266] no locks held by syz.9.3221/17266. [ 1263.072807][T17266] Modules linked in: [ 1263.076771][T17266] Preemption disabled at: [ 1263.076785][T17266] [] z_erofs_reload_indexes+0x347/0x590 [ 1263.088344][T17266] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 1263.097218][T17266] CPU: 1 PID: 17266 Comm: syz.9.3221 Tainted: G W syzkaller #0 [ 1263.106109][T17266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1263.116289][T17266] Call Trace: [ 1263.119606][T17266] [ 1263.122575][T17266] dump_stack_lvl+0x188/0x250 [ 1263.127301][T17266] ? show_regs_print_info+0x20/0x20 [ 1263.132540][T17266] ? load_image+0x400/0x400 [ 1263.137092][T17266] panic+0x2e5/0x810 [ 1263.141065][T17266] ? bpf_jit_dump+0xd0/0xd0 [ 1263.145605][T17266] ? z_erofs_reload_indexes+0x347/0x590 [ 1263.151216][T17266] ? z_erofs_reload_indexes+0x347/0x590 [ 1263.156806][T17266] check_panic_on_warn+0x80/0xa0 [ 1263.161795][T17266] ? z_erofs_reload_indexes+0x347/0x590 [ 1263.167371][T17266] __schedule_bug+0x193/0x1f0 [ 1263.172092][T17266] ? raw_spin_rq_unlock_irq+0x90/0x90 [ 1263.177499][T17266] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1263.183738][T17266] __schedule+0x1324/0x43c0 [ 1263.188289][T17266] ? kasan_quarantine_put+0xd4/0x220 [ 1263.193618][T17266] ? lockdep_hardirqs_on+0x94/0x140 [ 1263.198878][T17266] ? slab_free_freelist_hook+0xea/0x170 [ 1263.204477][T17266] ? rcu_is_watching+0x11/0xa0 [ 1263.209288][T17266] ? kmem_cache_free+0x14c/0x210 [ 1263.214285][T17266] ? release_firmware_map_entry+0x190/0x190 [ 1263.220333][T17266] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1263.226356][T17266] ? __phys_addr_symbol+0x2b/0x70 [ 1263.231433][T17266] ? lock_chain_count+0x20/0x20 [ 1263.236342][T17266] ? may_open+0x400/0x400 [ 1263.240719][T17266] schedule+0x11b/0x1e0 [ 1263.244925][T17266] exit_to_user_mode_loop+0x47/0x130 [ 1263.250246][T17266] exit_to_user_mode_prepare+0xee/0x180 [ 1263.255846][T17266] syscall_exit_to_user_mode+0x16/0x40 [ 1263.261466][T17266] do_syscall_64+0x58/0xa0 [ 1263.266634][T17266] ? clear_bhb_loop+0x30/0x80 [ 1263.268837][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1263.271477][T17266] ? clear_bhb_loop+0x30/0x80 [ 1263.271521][T17266] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1263.289354][T17266] RIP: 0033:0x7fc56b81ecb9 [ 1263.293812][T17266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.313673][T17266] RSP: 002b:00007fc569a7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 1263.322166][T17266] RAX: ffffffffffffffa1 RBX: 00007fc56ba99fa0 RCX: 00007fc56b81ecb9 [ 1263.330300][T17266] RDX: 0000000000001000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1263.338436][T17266] RBP: 00007fc56b88cbf7 R08: 0000000000000000 R09: 0000000000000000 [ 1263.346453][T17266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1263.354461][T17266] R13: 00007fc56ba9a038 R14: 00007fc56ba99fa0 R15: 00007ffe55fca5d8 [ 1263.362495][T17266] [ 1263.366308][T17266] Kernel Offset: disabled [ 1263.373603][T17266] Rebooting in 86400 seconds..