last executing test programs: 7m53.48786493s ago: executing program 4 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) close(0x3) 7m53.44851642s ago: executing program 4 (id=111): r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) fchdir(r1) r2 = fanotify_init(0x1a, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r2, 0x541, 0x1023, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 7m53.181426465s ago: executing program 4 (id=114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3eaa01000000000071"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r0, &(0x7f0000000000)='\"', 0xffffffffffffff69, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, 0x0, 0x0) 7m53.068586597s ago: executing program 4 (id=115): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f00000009c0)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[], 0x1, 0x6a7, &(0x7f00000002c0)="$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") r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x101a00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x100000000, 0x0, 0x1, 0x18, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x9, 0x3]}}) 7m52.686717683s ago: executing program 4 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0xa0000681) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x249, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r5, 0x2007ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x17b) getdents64(r6, &(0x7f0000000100)=""/134, 0x86) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001d0000012bbd7000fddbdf250a000000", @ANYRES32=r7, @ANYBLOB="0400e1000800077d3f7626e7f5769800ffffff562af1ac2cdb87f15abd2813bd2071ff0a00020000000000000000000600050000000000080009000200000008000a0004000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x14000080) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file2\x00', 0x800, &(0x7f0000000440)=ANY=[], 0x1, 0x1c7, &(0x7f0000001ec0)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfIFoPRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopb7FDDGa6pNEtwOvyR53BI0nTQYTri45E1o7GEc5KUphgbWybUaRpHGB6tYN5Y55nXWFeYOjUvLS+pKqsqa97EiRtnNnY2Nq6cWBeV5reKsSXFZVNTJyOTwxY1gc3MhuqTbLQnvGtf9TDJgbXHw695PwMDQyrzJeOFRVKnVlTNnPBF6Q+j4XeGOzxlKyQ0NJwkrkhYNJgwHKljb3BlqLiVnNLAkKYQxpikxibWtuXMnBBmfja3BQotySeYQo9yLJ0pYXFAqOrkT0vNtw6JbjO2PXVgO8Nz+DjPmoI+QaPjEgxOCwX/y4CMSWj48f//f6altgu+FGn8lfDiZHDKYHC3Z1rWDA1IlgYQuRLKkwXrSUhe4aGjqWmUkpzQsCn2CwNDgaEyw9Y9nKsFGhiQok2FgYFhOyMsbqEhCmOMglEwCkbBKBgFo2AUjIJRMApGwSgYEQAQAAD//7+pkWE=") ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000300)={{r0}, 0x3, &(0x7f0000000100)=[0x10000, 0xec8e, 0x3], 0x5, 0x2}) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) 7m52.40916454s ago: executing program 4 (id=118): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @loopback}, 0xffb5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x48, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfcff}, {0x0, 0x10}, {0xe, 0x7}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}, {0x4, 0x1b}}]}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7m52.072852974s ago: executing program 32 (id=118): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @loopback}, 0xffb5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x48, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfcff}, {0x0, 0x10}, {0xe, 0x7}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}, {0x4, 0x1b}}]}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m56.336319503s ago: executing program 3 (id=931): r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x99, 0x0, 0xee00}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x6}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) 3m55.929038237s ago: executing program 3 (id=933): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000025c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13e, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x108, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7, [{0x18, 0x18, "00540200a600828dadce42ce3d02d319e0cabb0171499f7642598cf1a1d40ca51300988c260ed2c4af88bdac1fc3925f5acb8e09cece04229969a0aee0537e1cc71b3009b0972d145d2e6c59b37cd8abb9b54f67fbd44a3c524f6d0749d6869636a90bca4c54c3ce345b74a1344d2cdda99627bb20ea64b77b50c6dd7ac0ce2c39bcfef115338e16fe0418e0f2894602231daf4f31b82654278904b95919abbb34b324bdfc5ea17efe35444c3cc8f5cb729268ea2d5032fee7123364eac5"}, {0x18, 0x5, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad9657926974"}, {0x3, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) 3m54.954138168s ago: executing program 3 (id=938): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@grpquota}, {@init_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x400}}, {@bh}, {@acl}]}, 0x1, 0x5a3, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0x7, 0x4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x2}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) unshare(0x24020400) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000980)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x6, 0x973b, 0x80000000, 0x1}) 3m53.611224563s ago: executing program 3 (id=945): ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000003140)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC, @ANYBLOB="2c66fefb470f725c", @ANYBLOB="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", @ANYBLOB="4402fa13e744bca9feafe7bc1a15734e45a2b1dc", @ANYRESHEX=r0, @ANYRESDEC=r0], 0x9, 0xc1e, &(0x7f0000001240)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4842, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) connect$unix(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) socket(0xa, 0x3, 0x6) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000400)={0x7}, 0x2000) 3m52.128934595s ago: executing program 3 (id=955): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@grpquota}, {@init_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x400}}, {@bh}, {@acl}]}, 0x1, 0x5a3, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0x7, 0x4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x2}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) unshare(0x24020400) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000980)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x6, 0x973b, 0x80000000, 0x1}) 3m50.985191504s ago: executing program 3 (id=958): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m50.566527571s ago: executing program 33 (id=958): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m34.21754563s ago: executing program 5 (id=1436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m32.788679028s ago: executing program 5 (id=1446): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0xa0000681) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x249, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r5, 0x2007ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x17b) getdents64(r6, &(0x7f0000000100)=""/134, 0x86) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x14000080) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file2\x00', 0x800, &(0x7f0000000440)=ANY=[], 0x1, 0x1c7, &(0x7f0000001ec0)="$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") ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000300)={{r0}, 0x3, &(0x7f0000000100)=[0x10000, 0xec8e, 0x3], 0x5, 0x2}) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) 1m30.778174738s ago: executing program 5 (id=1452): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_targets\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0x1a000000d}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4044004}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)="86c4efc2a7", 0x5) 1m26.875123725s ago: executing program 5 (id=1472): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x200000, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 1m26.194655905s ago: executing program 5 (id=1476): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="49ec34ea77775317d368b76dbb816423f0f334fc6157ce03c0a9a2cc9d60659ddf73c5d037040f15ece99b6359e9aedb74786c7ac998242a6b6073", @ANYRES16=0x0, @ANYRES64], 0x1, 0x314, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, &(0x7f00000003c0)=[{0x1, 0x5000}, {0x3, 0x4, 0x1000}, {0x4, 0x7f, 0x1800}], 0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) dup2(r3, r3) sendmmsg$inet6(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="384000000000ce8b2e44e6fb44858386d2a320b7531a3afd6b5b01702b8de4ab9c33af8b87553121", 0x28}], 0x1}}], 0x1, 0x0) 1m24.972662135s ago: executing program 5 (id=1480): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000001c0)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xd6}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[], 0x0) 1m24.797679844s ago: executing program 34 (id=1480): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000001c0)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xd6}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[], 0x0) 1m10.654823965s ago: executing program 6 (id=1529): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="49ec34ea77775317d368b76dbb816423f0f334fc6157ce03c0a9a2cc9d60659ddf73c5d037040f15ece99b6359e9aedb74786c7ac998242a6b6073", @ANYRES16=0x0, @ANYRES64], 0x1, 0x314, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, &(0x7f00000003c0)=[{0x1, 0x5000}, {0x3, 0x4, 0x1000}, {0x4, 0x7f, 0x1800}], 0x3) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) dup2(r1, r1) sendmmsg$inet6(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="384000000000ce8b2e44e6fb44858386d2a320b7531a3afd6b5b01702b8de4ab9c33af8b87553121", 0x28}], 0x1}}], 0x1, 0x0) 1m9.827133395s ago: executing program 6 (id=1532): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010209}]}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m8.66232543s ago: executing program 6 (id=1534): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) 1m8.532558236s ago: executing program 6 (id=1536): fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4cc, &(0x7f0000000c80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) 1m7.467096563s ago: executing program 6 (id=1542): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="49ec34ea77775317d368b76dbb816423f0f334fc6157ce03c0a9a2cc9d60659ddf73c5d037040f15ece99b6359e9aedb74786c7ac998242a6b6073", @ANYRES16=0x0, @ANYRES64], 0x1, 0x314, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, &(0x7f00000003c0)=[{0x1, 0x5000}, {0x3, 0x4, 0x1000}, {0x4, 0x7f, 0x1800}], 0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) dup2(r3, r3) sendmmsg$inet6(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="384000000000ce8b2e44e6fb44858386d2a320b7531a3afd6b5b01702b8de4ab9c33af8b87553121", 0x28}], 0x1}}], 0x1, 0x0) 1m6.07689061s ago: executing program 6 (id=1550): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_targets\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0x1a000000d}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4044004}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)="86c4efc2a7", 0x5) 1m5.704985383s ago: executing program 35 (id=1550): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_targets\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0x1a000000d}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4044004}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)="86c4efc2a7", 0x5) 32.622399001s ago: executing program 1 (id=1691): r0 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="fca9e7", 0x3, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001300), &(0x7f0000001340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 32.397064283s ago: executing program 1 (id=1693): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010209}]}) 32.307989908s ago: executing program 1 (id=1694): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40000) kcmp(r1, r1, 0x1, r2, r3) shutdown(0xffffffffffffffff, 0x1) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 30.970275701s ago: executing program 1 (id=1696): timer_create(0x2, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1be, &(0x7f0000000480)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) 29.463373171s ago: executing program 1 (id=1702): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf32(r0, 0x0, 0x1358) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)) fdatasync(r0) 28.795806177s ago: executing program 1 (id=1705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x4a, 0x0, 0x0, 0x2}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24, 0xc802, @rand_addr=' \x01\x00'}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.306778793s ago: executing program 36 (id=1705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x4a, 0x0, 0x0, 0x2}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24, 0xc802, @rand_addr=' \x01\x00'}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.252236098s ago: executing program 7 (id=1710): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$eJzs3cFvHFcdB/DvrNeOt1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitEKQAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn4+qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9Pa/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuP1PHNpNLPZlnvJP5PMHHa8e1CMWnh/8nEAAADAU5l9gm2+/CiPcjdHe/VOUb3m/0r1enk27+dm1rKatbSzkqv1a+jyVX9jY32xvbG+eKOcyvpwv9//957CmKl7mKpqo/Z8slqjlWtZrZaczZUqmKtpdPd9OjnZi2cgrgEflTEV36uNGVmzTmu5s9/v9C7Cvhh+K6LxmDVbm8El/Yws1LGVWx7rZqCo3qhJtmZi17PTHKrNVb1O9/d0Po3+Oz/HDyDnL9Tz8nh+c6A536t+JhqpMnGhN/rKa+bxmUi+8dc/vX29ffPd69funHl2DmkXUzss3zomFgcy8cpznYnmHtdfqDJxol+/nB/lJzmT+byZ21nNT7OctaykU7cv1+O5/Dn3+EwtDdXe3C2Smfq8dM/ZODHN54dVaTmnqm2PZjVFbuVqVvJ69e9CzufbuZiLuTRwhk/sGHd1bNVV39h61ffO9N9GBn/6m3WhvLv9dvMut/S4I95pdO6X7r2/zOuxgbx2R/3D/lrHBq6DhYEsvdTLzvTIzp/k3tj8al0o9/GrXZ4TkzVXZ6K8gHpPiV50L3cz0ayeRdvH+R865XZp3+x0ri+/t0P/97bUX6vn5bBa/9pua/eMPhX7qxwvL2W2vpMMj46y7eX+XWagrbM5lrttw0/ccrsTVVtR9K7UH+dWNQC2X6kz9e9w23u6ULW9MrJtsWo7OdA29PtWbqWdqxPIHwBP4h9v94tzeWGm9a/Wp61PWr9uXW+9MfuDI9858upMpv8+/d3mwtRrjVeLv+ST/Hzz9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDk7nzw4bvL7fbK7dGFxs5NQ4VWti7Zqecjo/sp6i/0GWNfz0VhNsnQkup7jiYeRmtrGNsKnV8kE89P70sER6/zu7LQ3DaiRhWWhpb8eXuHH+0xwmK86+IAC41MdqdTGT0ADvGmBEzEubUb752788GH31q9sfzOyjsrN6cvXry0cOni64vnrq22Vxa6Pw87SuAgbD70DzsSAAAAAAAAAAAAYFyjPhhw6sXdPjQy1mc8/M9CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF9cPpPm/RQ5v3B2oaxvrC+2y6lX3lyzmaTRSIqfJcWDZCndKXMD3RX544N0Ruzn49VLb332cOPzzb6a3fWTRj3f2eNbk9yrp8wnmarnT2GovytP3V/xn94xlAn7otPpLD1dfLA//hsAAP//P3v0tA==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x22020400) open_tree(0xffffffffffffff9c, 0x0, 0x89901) rename(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 26.766279562s ago: executing program 7 (id=1712): unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 25.360203194s ago: executing program 7 (id=1719): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1c0, &(0x7f0000000380)="$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") 24.251745463s ago: executing program 7 (id=1725): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='WIN', 0x3) 23.171140994s ago: executing program 7 (id=1729): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000380)='./file0\x00', 0x20000, 0x80) 21.953387223s ago: executing program 7 (id=1736): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x2400c0c0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x4, '\x00', @b}) 20.85322896s ago: executing program 0 (id=1740): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010209}]}) 20.188869145s ago: executing program 0 (id=1742): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448d4, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100), 0x8) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xd) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x0, 0x0, 0x3c, 0x3c}}}, 0x14) nanosleep(0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19.280951568s ago: executing program 0 (id=1745): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) 18.872129442s ago: executing program 0 (id=1746): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000380)='./file0\x00', 0x20000, 0x80) 18.41267248s ago: executing program 0 (id=1750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 16.811495956s ago: executing program 0 (id=1755): syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x200004, &(0x7f0000000800)=ANY=[], 0x5, 0x1c3, &(0x7f0000000500)="$eJzsVU+L2kAU/00SE9NC6bkIPdSDHqoxtqW39lQ89hOUiqatNPaPEVrFgz35PXrxi/Q79NCyF3dhWdiDe19mmZk3Y/YfgsiiMD9Ifu/PvHnzMpM3n7LvWQDgfDnp4DUkXDzAP8bgAXjMlO1NoPjEV1wj/dhTXCX7b+L/xNlo/LmdpslACEWQYCxbEbY/4wZCqOpFmlDl2HaKd7e6eHCzK5Tr2SwprlYRaqFkNjW8Xqk2rUlx9FYNW1k4u6v9ohONnTg2eyfcX7+5uyOs1Fe/HJzKnf+7nHSE8B4A55wLW1c9LD/GBfAnN+aRJx/mgpsxovkJhcNBfdj/Vs9G46e9fjtMPiZf4rj5InoWRc/j+odemkTizV3kUjh0EgVXAYieGub8BQAH1GDvwaCnfzK9NPKzfKyfa86VJ7gEh3kmVnORfCKWejujcOn7MdX/jfgwZblqD7KwFhhcUho6Ro0WH6YoHbXO17Q7A4O4V3gARHN4Zo7GAgWtiFCjJM2XU73sGXGZuEU8J14Q6ztL30WenOGQtMoU8PGzPRwOGsKkJGOLjS1+aDI7lPXMzxcHlAJYWFhYWFhYWOwZLgIAAP//bodFqw==") bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff0000000705010240000007050202400000070504024000000705060240000007058103400001070588"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x88, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) 16.486658547s ago: executing program 37 (id=1755): syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x200004, &(0x7f0000000800)=ANY=[], 0x5, 0x1c3, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff0000000705010240000007050202400000070504024000000705060240000007058103400001070588"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x88, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.561142492s ago: executing program 2 (id=1795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5.460030339s ago: executing program 2 (id=1799): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x100000000}) 5.435781125s ago: executing program 8 (id=1800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.128721521s ago: executing program 2 (id=1801): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, 0x0, 0x900, 0x140) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 5.128517971s ago: executing program 8 (id=1802): creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) readahead(r0, 0xcb, 0x10000) 4.190262582s ago: executing program 2 (id=1804): bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448d4, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100), 0x8) listen(r1, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xd) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x0, 0x0, 0x3c, 0x3c}}}, 0x14) accept4(r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.172262978s ago: executing program 8 (id=1805): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@grpquota}, {@nogrpid}, {@bsdgroups}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") epoll_create1(0x0) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 3.500574274s ago: executing program 8 (id=1806): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='WIN', 0x3) 3.341205839s ago: executing program 9 (id=1807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x40840) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x0, 0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getgroups(0x1, &(0x7f00000015c0)=[0xffffffffffffffff]) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001600)={{{@in6=@local}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@initdev}}, 0x0) geteuid() syz_mount_image$fuse(&(0x7f0000001540), &(0x7f0000001580)='./trace/events/kvm/kvm_entry/enable\x00', 0x2810, &(0x7f0000001740)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}]}}, 0x1, 0x0, &(0x7f0000001880)="3726e46009e6635933a7f748b102dcd811dbd5c0c0efa20db4939ef2ad9f952cefc6205ee8e57022b986bc6f42939755451d047dc2ff1bc848090ea091bab4e5b19b68d723663c12934c22a71de94047d3974e16482caac3db93a6efd7014c80ff4cc1967bbfe90dd791c4") sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001400)={&(0x7f0000000040), 0xc, &(0x7f00000013c0)={&(0x7f00000000c0)={0x34, 0x2, 0x3, 0x305, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2ea, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}]}, 0x34}}, 0x28884) 3.275947277s ago: executing program 2 (id=1808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.509039941s ago: executing program 9 (id=1809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a1080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x5, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.508875791s ago: executing program 8 (id=1810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@grpquota}, {@nogrpid}, {@bsdgroups}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") epoll_create1(0x0) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 2.293082741s ago: executing program 9 (id=1811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)) 2.089738597s ago: executing program 9 (id=1812): socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0xfe76, 0x9b, &(0x7f0000000240)="60704cc2c125a28e05d3a8ebe2b93092415c9425f4cd19a6060ae26c93b28a6917ee46378f6adbad3f9819ceae54c329bd9049949facd80bcf3405dbde566a427d16f440a76e3c3b32fe6d6906a4ed1c80b02b9db35210a4639b03fdda05a63b31686ec19917e4edfa193be42968773b31306686aa687936c90fdcfedb68f7722dedaf946a08759a02c6e3ca3c16b8ec267ba9f39173ef004c05c7", 0x6, 0x5, 0x9, 0x500, 0x8, 0x1, 0x7fff, 'syz1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents(r0, &(0x7f0000000040)=""/120, 0x78) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0xe5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffefffff}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.656231868s ago: executing program 2 (id=1813): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r0, 0x0, 0x9e, 0x0, &(0x7f0000000200)="d93b247c376ad6af9eb9b72460a0e0f676f99dffc2392dc6a648276c9e1bfe07faf27695e54f5ff870f7e42b3ad24eae146154e5424cd1112329a8442389ff6fc5f203f43894d2dfe4cf786412d653dd94d7cc6a647bfb6513b4369ddc39b4bec678334febd0b106b34b9db7739a352c4e19713517f1169a5a3790cd22adf268adc88a4459b6765d3edb827c8799c0db0e58be75ee0cb39fadc938117813", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x50) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24867, 0x0, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x2, 0x4, 0x8, 0x1], 0x54000, 0x100204}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1a04447, &(0x7f0000000640)=ANY=[], 0x8, 0x1e6, &(0x7f0000000400)="$eJzsmD+LE0EYxp+Z3UvuThFsLGwUPPCEu83uRsXGIn4CIfFfZzBriG4SSbZIAiLBxsaP4VewCAgWdnZptVBBsDCllcXITGazYzYbEkxQ8P1BZp7JzLzvzLvLUywIgvhv+fL5x6eXN65VjgCcxAHy+v9vVrKGG+s/7mrx4dW71qmno/l4bM38NoC3JQuRHgshhDl/oPsK+EzfAsclre+AwdH6Pjhuax2A4Z7Wjwzd3tMiDJwH7bD2sBEGrmw82fiyKc6fbzJkqAGQVxfW7+fv9gePq2EYdObFjojzpKaWiDdYsMvMl0vXz56UOK4b9ZPP6+6L50M5diCeyd416ueBw9O6CIZyXBPk4ThOUhLj/mftJL61yv1XFOMTwB9szxAMSpw+Xrb4aHmcnxs8zxoifsB/J/u/KuLXbSMBmfHPnhTMjHxmMnqf3vV1mxc8v90aQnt2amq8v8V3NfFPaS8XDX+yYc/8oxA1nxS6/cFxo1mtB/Wg5fvFq+5l173iF5QRTVtkYWNX+dO+EX8nY22O5dCrRlHH6wFRx5uN/WlrOG75dfu72sOV/3EcXpjGYLEH5xfnYPrHVS/VoZV5eIIgCIIgCIIgCIIgCIIgiLU4B6a+ggohmP4gugj/plr9KwAA//8epVZj") capset(0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) 1.437244739s ago: executing program 8 (id=1814): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@grpquota}, {@nogrpid}, {@bsdgroups}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") epoll_create1(0x0) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 364.478648ms ago: executing program 9 (id=1815): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0xa0000681) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x249, &(0x7f0000000900)="$eJzs2r9rZFUUB/Dzkqwbs2Qn4i92QbxooTaPTWqLDbILYkDRHWEtZN+aFx3ynAl5QyAWJtXa+idYi6WdIFvapPEvsLCRNCm3EJ9kZjSJxCxpZkL4fJocOPlyz+NeLreY/be//XJ9rc7Xin5MZVlM3Y7deJLFQkzFP3bjrTfu//LKR/c/eW95ZeXOhyndXb63uJRSuv7qz9Pxw2uP+9c+/vH6T1djb+HT/YOl3/de2rux/9e9Lzp16tSp2+unIj3s9frFw6pMq516PU/pg6os6jJ1unW5eaK/VvU2NrZT0V2dn9vYLOs6Fd3ttF5up34v9bOZVHxedLopz/M0Pxec5Zmn9NvfP2maOGiuPIimaZ79Lq49jvnfohXZcyl7/nb24oPs5d3sxkHTtMY0MeN1xv4v2//L79ilPhtRfbPV3moP/w77y2vRiSrKuBWt+DMOj8nIsL777sqdW2lgIR5VO6P8zlZ7+mR+MVqxcHp+cZhP8aj6Y3Rj7Wy1r8ZcxJWIUX4pWvHC6fmlo/xg/enB+rPx5uvH1s+jFb9+Fr2oYjUOs0f5rxdTeuf9lXRy/puD/wMAuGzy9K9T3295/n/9Yf4c78P/vK9m4ubMZL+diHr7q/WiqspNRVVuzl6MMS5DEZENDlg2OmjHWof3wgWYUHFmMdFriTE52vRJTwIAAAAAAAAAAMB5jOPnhJP+RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GL7OwAA//9TB8zx") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r5, 0x2007ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x17b) getdents64(r6, &(0x7f0000000100)=""/134, 0x86) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001d0000012bbd7000fddbdf250a000000", @ANYRES32=r7, @ANYBLOB="0400e1000800077d3f7626e7f5769800ffffff562af1ac2cdb87f15abd2813bd2071ff0a000200000000000000000006000500000000000800090002000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x14000080) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file2\x00', 0x800, &(0x7f0000000440)=ANY=[], 0x1, 0x1c7, &(0x7f0000001ec0)="$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") ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000300)={{r0}, 0x3, &(0x7f0000000100)=[0x10000, 0xec8e, 0x3], 0x5, 0x2}) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) 0s ago: executing program 9 (id=1816): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) kernel console output (not intermixed with test programs): 29] [ 498.484753][ T9973] EXT4-fs (loop1): Ignoring removed nobh option [ 498.522804][ T9953] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1495: lblock 3 mapped to illegal pblock 3 (length 1) [ 498.550957][ T9973] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 498.571955][ T9929] EXT4-fs (loop6): Total free blocks count 0 [ 498.572143][ T9973] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 498.578298][ T9929] EXT4-fs (loop6): Free/Dirty block details [ 498.596284][ T9929] EXT4-fs (loop6): free_blocks=0 [ 498.601296][ T9929] EXT4-fs (loop6): dirty_blocks=64 [ 498.610582][ T9929] EXT4-fs (loop6): Block reservation details [ 498.616980][ T9929] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 498.733490][ T9968] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1495: lblock 3 mapped to illegal pblock 3 (length 1) [ 498.800376][ T9953] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1495: lblock 3 mapped to illegal pblock 3 (length 1) [ 498.839782][ T9983] loop6: detected capacity change from 0 to 128 [ 498.880464][ T9968] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1495: lblock 3 mapped to illegal pblock 3 (length 1) [ 499.025955][ T9953] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1495: lblock 3 mapped to illegal pblock 3 (length 1) [ 499.640202][ T4473] team0 (unregistering): Port device team_slave_1 removed [ 499.691089][ T4473] team0 (unregistering): Port device team_slave_0 removed [ 499.707427][ T4473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.725366][ T4473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.808335][ T9991] loop6: detected capacity change from 0 to 128 [ 499.835464][ T4303] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 499.864056][ T4303] EXT4-fs (loop2): This should not happen!! Data will be lost [ 499.864056][ T4303] [ 499.980962][ T4473] bond0 (unregistering): Released all slaves [ 500.096857][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 500.360749][ T9995] FAULT_INJECTION: forcing a failure. [ 500.360749][ T9995] name failslab, interval 1, probability 0, space 0, times 0 [ 500.410289][ T9995] CPU: 0 PID: 9995 Comm: syz.2.1503 Not tainted syzkaller #0 [ 500.417749][ T9995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.427850][ T9995] Call Trace: [ 500.431165][ T9995] [ 500.434130][ T9995] dump_stack_lvl+0x188/0x250 [ 500.438891][ T9995] ? show_regs_print_info+0x20/0x20 [ 500.444131][ T9995] ? load_image+0x410/0x410 [ 500.448709][ T9995] ? __lock_acquire+0x7b50/0x7b50 [ 500.453778][ T9995] ? do_futex+0xdc2/0x12b0 [ 500.458241][ T9995] should_fail+0x383/0x4b0 [ 500.462710][ T9995] should_failslab+0x5/0x20 [ 500.467260][ T9995] slab_pre_alloc_hook+0x51/0xc0 [ 500.472248][ T9995] ? getname_flags+0xb7/0x4f0 [ 500.476974][ T9995] kmem_cache_alloc+0x3d/0x280 [ 500.482086][ T9995] getname_flags+0xb7/0x4f0 [ 500.486840][ T9995] do_sys_openat2+0xdd/0x500 [ 500.491580][ T9995] ? __lock_acquire+0x7b50/0x7b50 [ 500.496915][ T9995] ? do_sys_open+0xe0/0xe0 [ 500.501448][ T9995] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 500.507573][ T9995] ? lock_chain_count+0x20/0x20 [ 500.512922][ T9995] __x64_sys_openat+0x135/0x160 [ 500.518535][ T9995] do_syscall_64+0x4c/0xa0 [ 500.522998][ T9995] ? clear_bhb_loop+0x30/0x80 [ 500.527744][ T9995] ? clear_bhb_loop+0x30/0x80 [ 500.532532][ T9995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 500.538488][ T9995] RIP: 0033:0x7f87dbe6198e [ 500.542945][ T9995] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 500.562604][ T9995] RSP: 002b:00007f87da0f8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 500.571074][ T9995] RAX: ffffffffffffffda RBX: 00007f87da0f96c0 RCX: 00007f87dbe6198e [ 500.579091][ T9995] RDX: 0000000000000002 RSI: 00007f87da0f8c00 RDI: ffffffffffffff9c [ 500.587119][ T9995] RBP: 00007f87dbf3806b R08: 0000000000000000 R09: 0000000000000000 [ 500.595138][ T9995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.603150][ T9995] R13: 00007f87dc129038 R14: 00007f87dc128fa0 R15: 00007ffdec3c68c8 [ 500.611211][ T9995] [ 500.652156][T10003] loop6: detected capacity change from 0 to 1024 [ 500.804695][T10003] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 500.816404][ T9891] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 500.855072][ T9891] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 500.890198][T10003] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.914156][ T9891] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 500.931900][ T8098] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 500.949190][ T9891] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 501.107515][T10013] loop2: detected capacity change from 0 to 1024 [ 501.178449][T10013] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 501.249229][ T9891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.256568][T10013] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.302096][ T8098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.344737][ T8098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.416343][ T8098] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.435116][ T8098] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.441594][T10021] loop6: detected capacity change from 0 to 736 [ 501.447258][ T8098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.468440][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.469905][ T8098] usb 1-1: config 0 descriptor?? [ 501.476107][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.621600][ T9891] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.645071][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 501.659290][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 501.718881][T10028] loop1: detected capacity change from 0 to 512 [ 501.752827][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 501.781652][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 501.803246][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.810420][ T4243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.810795][T10030] loop2: detected capacity change from 0 to 1024 [ 501.841736][T10028] EXT4-fs (loop1): Ignoring removed nobh option [ 501.879941][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 501.921128][T10028] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 501.952157][T10028] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 501.974350][ T8098] plantronics 0003:047F:FFFF.001A: unknown main item tag 0xd [ 501.989976][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.004152][ T8098] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 502.029556][ T8098] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 502.061725][T10030] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 502.102159][T10038] loop6: detected capacity change from 0 to 128 [ 502.108709][T10030] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.142319][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.149511][ T4243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.218766][T10030] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.1510: lblock 3 mapped to illegal pblock 3 (length 3) [ 502.360240][ T8099] Bluetooth: hci1: command 0x0419 tx timeout [ 502.373335][T10030] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 502.411966][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 502.489121][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.876404][ T8098] usb 1-1: USB disconnect, device number 25 [ 502.923185][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.943035][T10041] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 502.991902][T10030] EXT4-fs (loop2): This should not happen!! Data will be lost [ 502.991902][T10030] [ 503.047273][T10045] fido_id[10045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 503.068403][T10041] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.204248][T10051] set_capacity_and_notify: 1 callbacks suppressed [ 503.204267][T10051] loop0: detected capacity change from 0 to 128 [ 503.223637][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 503.239593][T10043] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1510: lblock 3 mapped to illegal pblock 3 (length 1) [ 503.281387][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 503.299251][T10043] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1510: lblock 3 mapped to illegal pblock 3 (length 1) [ 503.316447][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 503.350274][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 503.379977][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 503.391016][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 503.404730][ T4303] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm kworker/u4:10: lblock 0 mapped to illegal pblock 0 (length 1) [ 503.434298][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 503.457047][ T4303] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 503.484344][ T4418] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 503.546276][ T4418] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 503.655825][ T4418] EXT4-fs (loop2): This should not happen!! Data will be lost [ 503.655825][ T4418] [ 503.686429][ T9891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.709003][ T4303] EXT4-fs (loop1): This should not happen!! Data will be lost [ 503.709003][ T4303] [ 503.791352][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 503.807741][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 504.087975][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.103496][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.166119][ T9891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.219269][T10074] loop2: detected capacity change from 0 to 1024 [ 504.249283][T10072] loop0: detected capacity change from 0 to 1024 [ 504.383070][T10072] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 504.394873][T10074] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 504.430791][T10074] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.452518][T10072] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.560337][T10072] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 3: comm syz.0.1528: lblock 3 mapped to illegal pblock 3 (length 3) [ 504.586793][T10090] FAULT_INJECTION: forcing a failure. [ 504.586793][T10090] name failslab, interval 1, probability 0, space 0, times 0 [ 504.643029][T10072] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 504.666428][T10090] CPU: 1 PID: 10090 Comm: syz.6.1522 Not tainted syzkaller #0 [ 504.673981][T10090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.684251][T10090] Call Trace: [ 504.687570][T10090] [ 504.690534][T10090] dump_stack_lvl+0x188/0x250 [ 504.695267][T10090] ? show_regs_print_info+0x20/0x20 [ 504.700509][T10090] ? load_image+0x410/0x410 [ 504.705073][T10090] ? __lock_acquire+0x7b50/0x7b50 [ 504.710162][T10090] ? do_futex+0xdc2/0x12b0 [ 504.714631][T10090] should_fail+0x383/0x4b0 [ 504.719104][T10090] should_failslab+0x5/0x20 [ 504.723697][T10090] slab_pre_alloc_hook+0x51/0xc0 [ 504.728688][T10090] ? getname_flags+0xb7/0x4f0 [ 504.733420][T10090] kmem_cache_alloc+0x3d/0x280 [ 504.738241][T10090] getname_flags+0xb7/0x4f0 [ 504.742890][T10090] do_sys_openat2+0xdd/0x500 [ 504.747703][T10090] ? __lock_acquire+0x7b50/0x7b50 [ 504.752881][T10090] ? do_sys_open+0xe0/0xe0 [ 504.757357][T10090] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 504.763412][T10090] ? lock_chain_count+0x20/0x20 [ 504.768330][T10090] __x64_sys_openat+0x135/0x160 [ 504.773269][T10090] do_syscall_64+0x4c/0xa0 [ 504.777930][T10090] ? clear_bhb_loop+0x30/0x80 [ 504.782943][T10090] ? clear_bhb_loop+0x30/0x80 [ 504.787683][T10090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 504.793807][T10090] RIP: 0033:0x7f00a5d5598e [ 504.798268][T10090] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 504.801058][T10072] EXT4-fs (loop0): This should not happen!! Data will be lost [ 504.801058][T10072] [ 504.818009][T10090] RSP: 002b:00007f00a3fecb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 504.818042][T10090] RAX: ffffffffffffffda RBX: 00007f00a3fed6c0 RCX: 00007f00a5d5598e [ 504.818058][T10090] RDX: 0000000000000002 RSI: 00007f00a3fecc00 RDI: ffffffffffffff9c [ 504.818074][T10090] RBP: 00007f00a5e2c06b R08: 0000000000000000 R09: 0000000000000000 [ 504.818088][T10090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.818101][T10090] R13: 00007f00a601d038 R14: 00007f00a601cfa0 R15: 00007ffcd0cd94f8 [ 504.818134][T10090] [ 504.881944][T10092] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1528: lblock 3 mapped to illegal pblock 3 (length 1) [ 504.967959][T10097] loop2: detected capacity change from 0 to 736 [ 505.015436][T10092] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1528: lblock 3 mapped to illegal pblock 3 (length 1) [ 505.141788][T10092] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1528: lblock 3 mapped to illegal pblock 3 (length 1) [ 505.235765][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 505.325501][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 505.352440][T10092] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1528: lblock 3 mapped to illegal pblock 3 (length 1) [ 505.392291][T10069] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1528: lblock 3 mapped to illegal pblock 3 (length 1) [ 505.439722][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 505.456736][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 505.484765][T10069] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1528: lblock 3 mapped to illegal pblock 3 (length 1) [ 505.524118][T10092] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1528: lblock 3 mapped to illegal pblock 3 (length 1) [ 505.536408][ T9891] device veth0_vlan entered promiscuous mode [ 505.586112][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 505.604198][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 505.630480][T10107] loop6: detected capacity change from 0 to 512 [ 505.635039][T10092] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1528: lblock 3 mapped to illegal pblock 3 (length 1) [ 505.656034][ T9891] device veth1_vlan entered promiscuous mode [ 505.665582][T10092] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1528: lblock 3 mapped to illegal pblock 3 (length 1) [ 505.765851][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 505.782538][T10107] EXT4-fs (loop6): Ignoring removed nobh option [ 505.783796][ T8097] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 505.801219][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 505.836888][T10107] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 505.853511][T10107] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.861326][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 505.873120][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 505.888590][ T9891] device veth0_macvtap entered promiscuous mode [ 505.900235][ T9891] device veth1_macvtap entered promiscuous mode [ 505.918705][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.929677][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.940077][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.951053][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.961010][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.972840][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.999798][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.032254][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 506.040635][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 506.122656][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 506.146831][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 506.168427][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.204504][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.215664][ T8097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.230646][T10072] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 506.250564][ T8097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.260731][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.272062][T10072] EXT4-fs (loop0): This should not happen!! Data will be lost [ 506.272062][T10072] [ 506.288971][ T8097] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 506.308021][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.318534][T10072] EXT4-fs (loop0): Total free blocks count 0 [ 506.324865][ T8097] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 506.334153][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.344949][T10072] EXT4-fs (loop0): Free/Dirty block details [ 506.350969][T10072] EXT4-fs (loop0): free_blocks=0 [ 506.356140][ T8097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.364257][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.374952][T10114] loop6: detected capacity change from 0 to 128 [ 506.382447][T10072] EXT4-fs (loop0): dirty_blocks=64 [ 506.394163][ T8097] usb 3-1: config 0 descriptor?? [ 506.399292][T10072] EXT4-fs (loop0): Block reservation details [ 506.406848][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.414622][T10072] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 506.422739][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 506.438284][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 506.465237][ T9891] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.585191][ T9891] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.641773][ T9891] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.669652][ T9891] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.400889][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.438439][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.445309][ T8097] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 507.455385][ T8097] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 507.466077][ T8097] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 507.540145][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 507.562094][T10119] loop0: detected capacity change from 0 to 1024 [ 507.647605][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.660625][ T23] usb 3-1: USB disconnect, device number 32 [ 507.668463][T10119] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 507.672680][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.689927][T10125] loop6: detected capacity change from 0 to 128 [ 507.696695][T10119] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.827656][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 507.839025][T10119] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 3: comm syz.0.1527: lblock 3 mapped to illegal pblock 3 (length 3) [ 507.873680][T10120] fido_id[10120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 507.902207][T10119] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 507.993639][T10119] EXT4-fs (loop0): This should not happen!! Data will be lost [ 507.993639][T10119] [ 508.081951][T10130] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1527: lblock 3 mapped to illegal pblock 3 (length 1) [ 508.212911][T10118] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1527: lblock 3 mapped to illegal pblock 3 (length 1) [ 508.309501][T10139] loop2: detected capacity change from 0 to 512 [ 508.317876][T10130] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1527: lblock 3 mapped to illegal pblock 3 (length 1) [ 508.393503][T10130] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1527: lblock 3 mapped to illegal pblock 3 (length 1) [ 508.402895][T10141] loop7: detected capacity change from 0 to 1024 [ 508.467362][T10139] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 508.467362][T10139] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 508.467362][T10139] [ 508.482027][T10130] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1527: lblock 3 mapped to illegal pblock 3 (length 1) [ 508.552856][T10139] EXT4-fs (loop2): Invalid want_extra_isize 524380 [ 508.738726][T10118] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1527: lblock 3 mapped to illegal pblock 3 (length 1) [ 508.777571][T10141] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 509.099660][T10141] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.177441][T10130] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1527: lblock 3 mapped to illegal pblock 3 (length 1) [ 509.448754][T10118] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1527: lblock 3 mapped to illegal pblock 3 (length 1) [ 509.472276][T10130] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.1527: lblock 3 mapped to illegal pblock 3 (length 1) [ 509.701242][T10158] loop6: detected capacity change from 0 to 512 [ 509.790190][T10158] EXT4-fs (loop6): Ignoring removed nobh option [ 509.883015][T10158] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1536: invalid indirect mapped block 256 (level 2) [ 510.001302][T10167] loop7: detected capacity change from 0 to 1024 [ 510.019310][T10158] EXT4-fs (loop6): 2 truncates cleaned up [ 510.039321][T10168] loop2: detected capacity change from 0 to 128 [ 510.072781][T10158] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 510.307737][T10167] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 510.318521][T10167] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.371981][ T4225] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 510.585486][ T4252] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 510.793069][ T4225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.880771][ T4252] EXT4-fs (loop0): This should not happen!! Data will be lost [ 510.880771][ T4252] [ 511.007276][ T4225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.143921][ T4225] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 511.174391][ T4225] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 511.185366][ T4225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.205624][ T4225] usb 2-1: config 0 descriptor?? [ 511.240978][T10167] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: block 3: comm syz.7.1538: lblock 3 mapped to illegal pblock 3 (length 3) [ 511.268043][T10167] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 511.304590][T10167] EXT4-fs (loop7): This should not happen!! Data will be lost [ 511.304590][T10167] [ 511.389592][T10176] EXT4-fs error (device loop7): ext4_free_blocks:6231: comm syz.7.1538: Freeing blocks not in datazone - block = 3, count = 1 [ 511.409752][T10176] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1538: bg 0: block 112: padding at end of block bitmap is not set [ 511.448872][T10185] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1543'. [ 511.458099][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1543'. [ 511.546476][T10176] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 24 with error 28 [ 511.580753][T10176] EXT4-fs (loop7): This should not happen!! Data will be lost [ 511.580753][T10176] [ 511.592183][T10187] loop0: detected capacity change from 0 to 1024 [ 511.612022][T10176] EXT4-fs (loop7): Total free blocks count 0 [ 511.622478][T10176] EXT4-fs (loop7): Free/Dirty block details [ 511.636955][T10176] EXT4-fs (loop7): free_blocks=0 [ 511.686097][T10176] EXT4-fs (loop7): dirty_blocks=32 [ 511.701050][T10176] EXT4-fs (loop7): Block reservation details [ 511.713520][ T4225] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 511.732185][T10176] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 511.752941][ T4225] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 511.780765][T10187] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 511.831360][T10187] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.844071][ T4225] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 511.993344][ T4473] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:14: lblock 8 mapped to illegal pblock 8 (length 8) [ 512.131022][ T5706] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.253918][ T5706] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.372870][ T5706] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.438442][ T8100] usb 2-1: USB disconnect, device number 29 [ 512.451564][ T5706] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.501571][T10216] loop0: detected capacity change from 0 to 1764 [ 513.447197][T10224] loop1: detected capacity change from 0 to 512 [ 513.462148][T10223] loop2: detected capacity change from 0 to 128 [ 513.518684][T10224] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 513.759953][T10231] loop7: detected capacity change from 0 to 1024 [ 513.772532][T10224] EXT4-fs (loop1): 1 truncate cleaned up [ 513.910627][T10224] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 514.323158][T10231] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 514.397959][T10231] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.533145][T10231] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: block 3: comm syz.7.1557: lblock 3 mapped to illegal pblock 3 (length 3) [ 514.655320][T10231] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 514.709789][T10231] EXT4-fs (loop7): This should not happen!! Data will be lost [ 514.709789][T10231] [ 514.805078][T10243] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: block 3: comm syz.7.1557: lblock 3 mapped to illegal pblock 3 (length 1) [ 514.879574][T10250] loop2: detected capacity change from 0 to 1024 [ 514.883388][T10229] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: block 3: comm syz.7.1557: lblock 3 mapped to illegal pblock 3 (length 1) [ 514.950429][T10243] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: block 3: comm syz.7.1557: lblock 3 mapped to illegal pblock 3 (length 1) [ 514.979384][T10229] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: block 3: comm syz.7.1557: lblock 3 mapped to illegal pblock 3 (length 1) [ 515.053960][T10243] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: block 3: comm syz.7.1557: lblock 3 mapped to illegal pblock 3 (length 1) [ 515.105089][T10243] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: block 3: comm syz.7.1557: lblock 3 mapped to illegal pblock 3 (length 1) [ 515.122751][T10252] loop1: detected capacity change from 0 to 128 [ 515.160994][T10250] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 515.240633][T10250] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.278528][T10243] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: block 3: comm syz.7.1557: lblock 3 mapped to illegal pblock 3 (length 1) [ 515.346852][T10243] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: block 3: comm syz.7.1557: lblock 3 mapped to illegal pblock 3 (length 1) [ 515.363265][T10229] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: block 3: comm syz.7.1557: lblock 3 mapped to illegal pblock 3 (length 1) [ 515.460606][T10233] chnl_net:caif_netlink_parms(): no params data found [ 515.791102][ T6411] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 515.812542][T10233] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.820023][T10275] loop2: detected capacity change from 0 to 2048 [ 515.832648][T10233] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.841501][T10233] device bridge_slave_0 entered promiscuous mode [ 515.862662][T10233] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.872356][T10233] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.933379][T10231] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 515.982539][T10231] EXT4-fs (loop7): This should not happen!! Data will be lost [ 515.982539][T10231] [ 516.000584][T10233] device bridge_slave_1 entered promiscuous mode [ 516.020314][T10231] EXT4-fs (loop7): Total free blocks count 0 [ 516.111579][T10275] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 516.266923][ T6411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.375652][T10231] EXT4-fs (loop7): Free/Dirty block details [ 516.408535][ T6411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.447473][T10275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 516.800858][ T8099] Bluetooth: hci3: command 0x0409 tx timeout [ 516.815128][T10231] EXT4-fs (loop7): free_blocks=0 [ 516.820156][T10231] EXT4-fs (loop7): dirty_blocks=64 [ 516.826151][T10231] EXT4-fs (loop7): Block reservation details [ 516.832298][T10231] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 516.842965][T10233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.884235][ T6411] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 516.984748][ T6411] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 517.036378][ T6411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.084462][ T6411] usb 2-1: config 0 descriptor?? [ 517.135331][T10233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.190455][T10292] loop0: detected capacity change from 0 to 512 [ 517.307742][T10292] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 517.386545][T10300] loop2: detected capacity change from 0 to 2048 [ 517.394286][T10296] loop7: detected capacity change from 0 to 128 [ 517.408754][T10292] EXT4-fs (loop0): 1 truncate cleaned up [ 517.420511][T10292] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 517.496680][T10300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 517.598526][ T6411] plantronics 0003:047F:FFFF.001D: unknown main item tag 0xd [ 517.665363][ T6411] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 517.860749][ T6411] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 518.386120][ T4382] usb 2-1: USB disconnect, device number 30 [ 518.484503][T10233] team0: Port device team_slave_0 added [ 518.535333][T10304] fido_id[10304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 518.616544][T10233] team0: Port device team_slave_1 added [ 518.776879][T10315] loop7: detected capacity change from 0 to 1024 [ 518.892372][ T8097] Bluetooth: hci3: command 0x041b tx timeout [ 518.926113][T10317] loop0: detected capacity change from 0 to 512 [ 518.994197][T10233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.019012][T10317] EXT4-fs (loop0): Ignoring removed nobh option [ 519.027404][T10233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.054219][T10233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.096087][T10315] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 519.145475][T10315] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.160964][T10317] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 519.253884][ T5706] device hsr_slave_0 left promiscuous mode [ 519.260529][ T5706] device hsr_slave_1 left promiscuous mode [ 519.465392][T10317] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 519.579581][T10336] loop2: detected capacity change from 0 to 1024 [ 519.686327][T10336] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 519.727100][T10336] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.813477][ T5706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.853258][T10336] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.1579: lblock 3 mapped to illegal pblock 3 (length 3) [ 519.878042][ T5706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.900493][T10336] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 519.934495][T10336] EXT4-fs (loop2): This should not happen!! Data will be lost [ 519.934495][T10336] [ 520.049317][T10347] loop0: detected capacity change from 0 to 128 [ 520.084572][ T5706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.092126][ T5706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.128598][T10348] loop7: detected capacity change from 0 to 2048 [ 520.140973][T10342] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1579: lblock 3 mapped to illegal pblock 3 (length 1) [ 520.167273][ T5706] device bridge_slave_1 left promiscuous mode [ 520.173536][ T5706] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.395627][ T5706] device bridge_slave_0 left promiscuous mode [ 520.399935][ T4243] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 520.421254][T10348] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.437942][ T5706] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.447828][ T8097] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 520.721877][ T4243] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 520.945993][ T8097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.085344][ T8097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.156871][ T4243] EXT4-fs (loop2): This should not happen!! Data will be lost [ 521.156871][ T4243] [ 521.178502][ T8097] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.237149][ T8097] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.246628][ T8097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.256010][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 521.263332][ T8097] usb 2-1: config 0 descriptor?? [ 521.375975][ T5706] device veth1_macvtap left promiscuous mode [ 521.382105][ T5706] device veth0_macvtap left promiscuous mode [ 521.389261][ T5706] device veth1_vlan left promiscuous mode [ 521.395231][ T5706] device veth0_vlan left promiscuous mode [ 521.438448][T10364] loop2: detected capacity change from 0 to 1024 [ 521.525736][T10366] loop0: detected capacity change from 0 to 128 [ 521.911904][T10373] binder_alloc: 10372: binder_alloc_buf, no vma [ 522.145619][ T5706] team0 (unregistering): Port device team_slave_1 removed [ 522.156010][T10379] loop7: detected capacity change from 0 to 1024 [ 522.183303][ T5706] team0 (unregistering): Port device team_slave_0 removed [ 522.220092][ T5706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.271829][T10379] hfsplus: unknown catalog record type 2308 [ 522.285186][ T5706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.354107][ T4383] hfsplus: b-tree write err: -5, ino 25 [ 522.370794][ T4383] hfsplus: b-tree write err: -5, ino 4 [ 522.398817][ T4383] hfsplus: b-tree write err: -5, ino 2 [ 522.427270][ T8097] usbhid 2-1:0.0: can't add hid device: -71 [ 522.434626][ T8097] usbhid: probe of 2-1:0.0 failed with error -71 [ 522.465483][T10381] loop1: detected capacity change from 0 to 512 [ 522.479924][ T8097] usb 2-1: USB disconnect, device number 31 [ 522.508054][T10381] EXT4-fs (loop1): Ignoring removed nobh option [ 522.619372][T10381] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 522.640004][ T5706] bond0 (unregistering): Released all slaves [ 522.648422][T10381] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 522.741117][T10233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.751846][T10233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.811008][T10233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.842882][T10377] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1587'. [ 522.897934][T10377] device gretap0 entered promiscuous mode [ 522.973578][T10394] loop1: detected capacity change from 0 to 1024 [ 523.059584][T10394] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 523.072302][T10394] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.202429][T10233] device hsr_slave_0 entered promiscuous mode [ 523.238556][T10233] device hsr_slave_1 entered promiscuous mode [ 523.324895][ T4225] Bluetooth: hci3: command 0x0419 tx timeout [ 523.599567][T10404] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 523.963785][T10408] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 524.426923][T10408] EXT4-fs (loop7): 1 truncate cleaned up [ 524.475755][T10408] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 524.685492][T10408] EXT4-fs warning (device loop7): ext4_resize_fs:1981: can't read last block, resize aborted [ 524.735381][T10233] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 524.840534][T10233] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 524.915924][T10233] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 524.975511][T10429] set_capacity_and_notify: 3 callbacks suppressed [ 524.975529][T10429] loop0: detected capacity change from 0 to 2048 [ 525.004858][T10233] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 525.178184][T10429] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 525.202329][T10429] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.297502][T10441] loop7: detected capacity change from 0 to 512 [ 525.323426][T10429] fs-verity (loop0, inode 13): Unknown hash algorithm number: 65 [ 525.334470][ T4267] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 525.369356][T10233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.384735][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 525.414454][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.464099][T10441] EXT4-fs (loop7): Ignoring removed nobh option [ 525.473818][T10233] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.557760][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 525.579541][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.601577][T10441] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 525.619221][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.626413][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.642096][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 525.661394][T10441] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 525.680314][T10450] loop0: detected capacity change from 0 to 1024 [ 525.701620][ T4267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.725135][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 525.747480][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.757171][ T4267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.800558][ T4267] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 525.816556][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.823806][ T1400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.846567][T10450] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 525.857736][T10450] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.884237][ T4267] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 525.894019][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.904880][ T4267] usb 2-1: config 0 descriptor?? [ 525.970651][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 526.049365][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 526.074304][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 526.113932][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 526.179844][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 526.200978][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 526.228437][T10464] loop7: detected capacity change from 0 to 128 [ 526.245688][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 526.286360][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 526.291944][T10469] loop2: detected capacity change from 0 to 128 [ 526.334641][T10233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.383614][T10233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 526.464170][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 526.473411][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 526.870370][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 527.358892][ T4267] usbhid 2-1:0.0: can't add hid device: -71 [ 527.365255][ T4267] usbhid: probe of 2-1:0.0 failed with error -71 [ 527.419727][ T4267] usb 2-1: USB disconnect, device number 32 [ 527.766174][T10491] Illegal XDP return value 4294967274, expect packet loss! [ 527.967466][T10499] loop1: detected capacity change from 0 to 128 [ 528.007534][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.021257][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.059978][T10233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.216993][T10504] loop0: detected capacity change from 0 to 128 [ 528.317360][T10504] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 528.430800][T10504] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 528.495983][T10498] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 528.518566][T10504] FAT-fs (loop0): Filesystem has been set read-only [ 528.736532][T10516] loop0: detected capacity change from 0 to 1024 [ 528.758834][ T4424] attempt to access beyond end of device [ 528.758834][ T4424] loop1: rw=1, want=1041, limit=128 [ 528.821285][T10516] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 528.832075][T10516] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.081541][T10526] loop0: detected capacity change from 0 to 128 [ 529.106322][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 529.147437][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 529.180612][T10526] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 529.305537][T10526] ext4 filesystem being mounted at /350/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 529.330033][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 529.347720][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 529.394759][T10233] device veth0_vlan entered promiscuous mode [ 529.416742][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 529.443447][T10526] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 529.462961][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 529.501675][T10233] device veth1_vlan entered promiscuous mode [ 529.565139][T10526] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 529.655700][T10233] device veth0_macvtap entered promiscuous mode [ 529.674982][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 529.695072][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 529.715755][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 529.754935][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 529.775233][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 529.783705][T10544] loop1: detected capacity change from 0 to 2048 [ 529.827685][T10233] device veth1_macvtap entered promiscuous mode [ 529.850015][T10544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.906219][ T8099] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 529.930967][T10233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.977167][T10233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.997313][T10233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.019249][T10233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.037877][T10233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.067156][T10233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.090090][T10233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.131527][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 530.191292][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 530.281158][ T8099] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.307523][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 530.319394][T10233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.351585][ T8099] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.522608][T10233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.548465][ T8099] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 530.828430][T10233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.959378][ T8099] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 531.164137][T10233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.188567][T10233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.199154][T10233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.211668][T10233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.227314][ T8099] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.243807][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 531.274092][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 531.285698][ T8099] usb 8-1: config 0 descriptor?? [ 531.404374][T10233] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.461063][T10233] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.484058][T10233] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.516797][T10233] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.764674][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.779385][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.819781][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 531.873164][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.884096][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.907496][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 531.971291][T10573] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input45 [ 532.131004][T10575] set_capacity_and_notify: 1 callbacks suppressed [ 532.131022][T10575] loop8: detected capacity change from 0 to 1024 [ 532.309742][T10575] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 532.327974][T10575] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.373617][T10585] loop7: detected capacity change from 0 to 1024 [ 532.397675][ T8099] usbhid 8-1:0.0: can't add hid device: -71 [ 532.404379][ T8099] usbhid: probe of 8-1:0.0 failed with error -71 [ 532.420278][ T8099] usb 8-1: USB disconnect, device number 2 [ 532.446657][T10575] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: block 3: comm syz.8.1551: lblock 3 mapped to illegal pblock 3 (length 3) [ 532.463388][T10575] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 532.477270][T10575] EXT4-fs (loop8): This should not happen!! Data will be lost [ 532.477270][T10575] [ 532.498293][T10585] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 532.509910][T10585] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.528607][T10585] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: comm syz.7.1626: lblock 0 mapped to illegal pblock 0 (length 1) [ 532.545905][T10585] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 532.559251][T10585] EXT4-fs (loop7): This should not happen!! Data will be lost [ 532.559251][T10585] [ 532.591673][T10589] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1551: lblock 3 mapped to illegal pblock 3 (length 1) [ 532.610754][T10589] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1551: lblock 3 mapped to illegal pblock 3 (length 1) [ 532.658545][T10589] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1551: lblock 3 mapped to illegal pblock 3 (length 1) [ 532.708188][T10574] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1551: lblock 3 mapped to illegal pblock 3 (length 1) [ 532.799788][T10574] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1551: lblock 3 mapped to illegal pblock 3 (length 1) [ 532.814897][T10592] loop7: detected capacity change from 0 to 512 [ 532.855330][T10593] loop1: detected capacity change from 0 to 128 [ 532.877216][T10589] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1551: lblock 3 mapped to illegal pblock 3 (length 1) [ 532.968765][T10592] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 532.984477][T10589] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1551: lblock 3 mapped to illegal pblock 3 (length 1) [ 533.000736][T10592] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.037804][T10589] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1551: lblock 3 mapped to illegal pblock 3 (length 1) [ 533.065657][T10602] loop2: detected capacity change from 0 to 256 [ 533.068657][T10593] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 533.083391][T10593] ext4 filesystem being mounted at /330/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 533.096581][T10589] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1551: lblock 3 mapped to illegal pblock 3 (length 1) [ 533.174337][T10602] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 533.224897][T10593] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 534.763723][T10592] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz.7.1627: path /25/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 534.798569][T10592] EXT4-fs (loop7): Remounting filesystem read-only [ 534.815849][T10618] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 535.065207][T10623] loop7: detected capacity change from 0 to 128 [ 535.111859][ T4293] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 535.152588][ T4293] EXT4-fs (loop8): This should not happen!! Data will be lost [ 535.152588][ T4293] [ 535.588318][T10630] loop2: detected capacity change from 0 to 1024 [ 535.844584][T10630] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 535.855446][T10630] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.908665][T10630] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.1637: lblock 0 mapped to illegal pblock 0 (length 1) [ 535.922944][T10630] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 535.935444][T10630] EXT4-fs (loop2): This should not happen!! Data will be lost [ 535.935444][T10630] [ 536.036658][T10639] loop0: detected capacity change from 0 to 128 [ 536.146930][T10639] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 536.194155][T10643] loop2: detected capacity change from 0 to 128 [ 536.256823][T10639] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 536.297459][T10639] ext2 filesystem being mounted at /354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 536.398861][ T21] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 536.477946][T10650] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.1638: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 536.844302][T10660] loop7: detected capacity change from 0 to 512 [ 536.863419][ T21] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.883331][ T21] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.903746][ T21] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 536.989950][T10660] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 537.052969][ T21] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.063182][T10660] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.105328][ T21] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.177783][ T21] usb 9-1: config 0 descriptor?? [ 537.284088][T10672] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input46 [ 537.562269][T10681] loop1: detected capacity change from 0 to 164 [ 537.590919][T10671] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 537.798732][T10684] loop7: detected capacity change from 0 to 1024 [ 537.937911][T10694] loop0: detected capacity change from 0 to 1024 [ 538.004129][T10684] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 538.121996][T10694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 538.123091][T10684] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.133104][T10694] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.160316][T10694] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.1649: lblock 0 mapped to illegal pblock 0 (length 1) [ 538.174387][T10694] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 538.186787][T10694] EXT4-fs (loop0): This should not happen!! Data will be lost [ 538.186787][T10694] [ 538.204016][T10684] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: block 3: comm syz.7.1646: lblock 3 mapped to illegal pblock 3 (length 3) [ 538.280109][T10684] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 538.292694][T10684] EXT4-fs (loop7): This should not happen!! Data will be lost [ 538.292694][T10684] [ 538.326290][T10704] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: block 3: comm syz.7.1646: lblock 3 mapped to illegal pblock 3 (length 1) [ 538.344254][T10704] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: block 3: comm syz.7.1646: lblock 3 mapped to illegal pblock 3 (length 1) [ 538.376013][ T21] usbhid 9-1:0.0: can't add hid device: -71 [ 538.382139][ T21] usbhid: probe of 9-1:0.0 failed with error -71 [ 538.399586][T10704] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: block 3: comm syz.7.1646: lblock 3 mapped to illegal pblock 3 (length 1) [ 538.459038][ T21] usb 9-1: USB disconnect, device number 2 [ 538.475944][T10704] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: block 3: comm syz.7.1646: lblock 3 mapped to illegal pblock 3 (length 1) [ 538.575397][ T4424] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 538.688399][ T4424] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 538.731065][T10718] loop1: detected capacity change from 0 to 128 [ 538.737957][ T4424] EXT4-fs (loop7): This should not happen!! Data will be lost [ 538.737957][ T4424] [ 538.840934][T10718] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 539.264844][T10718] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 539.494262][T10723] loop2: detected capacity change from 0 to 128 [ 539.528454][T10718] ext2 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 539.687205][T10718] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.1.1653: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 539.713107][T10730] loop0: detected capacity change from 0 to 164 [ 539.930697][T10734] loop8: detected capacity change from 0 to 256 [ 540.643837][T10746] loop7: detected capacity change from 0 to 1024 [ 540.670308][T10747] loop0: detected capacity change from 0 to 1024 [ 540.675595][T10734] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 540.757327][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1659'. [ 540.791535][T10747] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 540.803421][T10747] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.819260][T10747] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.1661: lblock 0 mapped to illegal pblock 0 (length 1) [ 540.834931][T10747] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 540.847362][T10747] EXT4-fs (loop0): This should not happen!! Data will be lost [ 540.847362][T10747] [ 540.918126][T10753] loop2: detected capacity change from 0 to 1024 [ 540.940875][T10746] hfsplus: xattr searching failed [ 541.038739][ T5706] hfsplus: b-tree write err: -5, ino 3 [ 541.061424][T10753] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 541.094280][ T9891] hfsplus: node 4:3 still has 1 user(s)! [ 541.102161][T10753] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.151503][T10753] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.1664: lblock 3 mapped to illegal pblock 3 (length 3) [ 541.191753][T10753] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 541.204716][ T4267] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 541.264379][T10753] EXT4-fs (loop2): This should not happen!! Data will be lost [ 541.264379][T10753] [ 541.351576][T10751] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1664: lblock 3 mapped to illegal pblock 3 (length 1) [ 541.461587][T10751] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1664: lblock 3 mapped to illegal pblock 3 (length 1) [ 541.537633][T10772] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1664: lblock 3 mapped to illegal pblock 3 (length 1) [ 541.589687][ T4267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.621099][ T4267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.644460][T10772] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1664: lblock 3 mapped to illegal pblock 3 (length 1) [ 541.683070][ T4267] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.730457][ T4267] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.745096][T10751] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1664: lblock 3 mapped to illegal pblock 3 (length 1) [ 541.760349][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.809426][ T4267] usb 2-1: config 0 descriptor?? [ 541.875841][T10772] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1664: lblock 3 mapped to illegal pblock 3 (length 1) [ 542.037247][T10772] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1664: lblock 3 mapped to illegal pblock 3 (length 1) [ 542.081086][T10751] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1664: lblock 3 mapped to illegal pblock 3 (length 1) [ 542.147715][T10772] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1664: lblock 3 mapped to illegal pblock 3 (length 1) [ 542.319671][T10795] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 542.353692][T10795] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 542.400537][T10795] ext2 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 542.505406][T10800] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.7.1673: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 542.825804][T10810] set_capacity_and_notify: 3 callbacks suppressed [ 542.825823][T10810] loop8: detected capacity change from 0 to 1024 [ 543.042847][T10810] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 543.053843][T10810] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.069927][T10810] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: comm syz.8.1676: lblock 0 mapped to illegal pblock 0 (length 1) [ 543.085973][T10810] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 543.098942][T10810] EXT4-fs (loop8): This should not happen!! Data will be lost [ 543.098942][T10810] [ 543.163588][ T5706] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 543.191698][ T4267] usbhid 2-1:0.0: can't add hid device: -71 [ 543.201085][ T4267] usbhid: probe of 2-1:0.0 failed with error -71 [ 543.209884][ T8099] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 543.232954][ T4267] usb 2-1: USB disconnect, device number 33 [ 543.475249][ T5706] EXT4-fs (loop2): This should not happen!! Data will be lost [ 543.475249][ T5706] [ 543.572415][ T8099] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 543.668532][ T8099] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.085054][ T8099] usb 1-1: config 0 has no interface number 0 [ 544.095485][ T8099] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 544.110874][ T8099] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.134801][ T4267] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 544.276858][ T8099] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 544.306324][ T8099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.307272][T10826] vhci_hcd vhci_hcd.0: failed to lookup sock [ 544.346286][ T8099] usb 1-1: Product: syz [ 544.366812][ T8099] usb 1-1: Manufacturer: syz [ 544.386754][ T4267] usb 2-1: Using ep0 maxpacket: 8 [ 544.397430][ T8099] usb 1-1: SerialNumber: syz [ 544.431519][ T8099] usb 1-1: config 0 descriptor?? [ 544.528745][T10835] loop2: detected capacity change from 0 to 256 [ 544.550608][T10839] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1684'. [ 544.561429][T10839] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1684'. [ 544.579562][T10838] loop8: detected capacity change from 0 to 1024 [ 544.697765][T10842] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1686'. [ 544.709707][T10842] device gretap0 entered promiscuous mode [ 544.724641][T10838] hfsplus: xattr searching failed [ 544.746773][T10808] loop0: detected capacity change from 0 to 1024 [ 544.835437][T10808] EXT4-fs (loop0): Ignoring removed orlov option [ 544.862514][ T1183] hfsplus: b-tree write err: -5, ino 3 [ 544.873292][T10233] hfsplus: node 4:3 still has 1 user(s)! [ 544.889659][T10808] EXT4-fs (loop0): Ignoring removed nobh option [ 544.988155][T10808] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nobh,,errors=continue. Quota mode: none. [ 545.020370][ T4267] usb 2-1: unable to get BOS descriptor or descriptor too short [ 545.060856][ T8099] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 545.080724][ T4267] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 545.088363][ T4267] usb 2-1: can't read configurations, error -71 [ 545.094964][ T8099] usb 1-1: USB disconnect, device number 26 [ 545.110862][ T23] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 545.133792][T10854] loop8: detected capacity change from 0 to 1024 [ 545.283608][T10854] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 545.352427][T10854] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.491027][T10854] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: block 3: comm syz.8.1688: lblock 3 mapped to illegal pblock 3 (length 3) [ 545.557805][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.580345][T10854] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 545.602527][ T23] usb 3-1: config 0 has no interfaces? [ 545.619277][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 545.634267][T10854] EXT4-fs (loop8): This should not happen!! Data will be lost [ 545.634267][T10854] [ 545.639660][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.690983][ T23] usb 3-1: config 0 descriptor?? [ 545.744610][T10858] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1688: lblock 3 mapped to illegal pblock 3 (length 1) [ 545.810718][T10852] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1688: lblock 3 mapped to illegal pblock 3 (length 1) [ 545.849490][T10876] loop0: detected capacity change from 0 to 128 [ 545.995058][T10852] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1688: lblock 3 mapped to illegal pblock 3 (length 1) [ 546.054303][ T23] usb 3-1: USB disconnect, device number 33 [ 546.117070][T10852] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1688: lblock 3 mapped to illegal pblock 3 (length 1) [ 546.324053][T10858] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1688: lblock 3 mapped to illegal pblock 3 (length 1) [ 546.637971][T10852] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1688: lblock 3 mapped to illegal pblock 3 (length 1) [ 546.994567][T10858] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1688: lblock 3 mapped to illegal pblock 3 (length 1) [ 547.023610][T10852] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1688: lblock 3 mapped to illegal pblock 3 (length 1) [ 547.067850][T10858] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1688: lblock 3 mapped to illegal pblock 3 (length 1) [ 547.686626][T10899] loop1: detected capacity change from 0 to 8 [ 548.405959][ T5706] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 548.452769][ T5706] EXT4-fs (loop8): This should not happen!! Data will be lost [ 548.452769][ T5706] [ 548.652549][T10905] loop7: detected capacity change from 0 to 128 [ 548.669034][ T4192] SQUASHFS error: Unable to read directory block [629:1f] [ 548.709962][ T4192] SQUASHFS error: Unable to read directory block [629:1f] [ 548.793345][T10905] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 549.004788][T10913] loop2: detected capacity change from 0 to 1024 [ 549.158835][T10913] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 549.561562][T10926] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 549.854111][T10933] loop2: detected capacity change from 0 to 512 [ 549.866076][T10931] loop8: detected capacity change from 0 to 1024 [ 549.976501][T10933] EXT4-fs (loop2): 1 truncate cleaned up [ 549.982242][T10933] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 550.084737][T10931] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 550.095847][T10931] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.128286][T10931] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: block 3: comm syz.8.1709: lblock 3 mapped to illegal pblock 3 (length 3) [ 550.143100][T10931] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 550.155867][T10931] EXT4-fs (loop8): This should not happen!! Data will be lost [ 550.155867][T10931] [ 550.167615][T10931] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1709: lblock 3 mapped to illegal pblock 3 (length 1) [ 550.182378][T10931] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1709: lblock 3 mapped to illegal pblock 3 (length 1) [ 550.197452][T10931] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1709: lblock 3 mapped to illegal pblock 3 (length 1) [ 550.213186][T10931] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1709: lblock 3 mapped to illegal pblock 3 (length 1) [ 550.227993][T10930] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1709: lblock 3 mapped to illegal pblock 3 (length 1) [ 550.235290][T10939] loop7: detected capacity change from 0 to 1024 [ 550.347312][T10931] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1709: lblock 3 mapped to illegal pblock 3 (length 1) [ 550.370240][T10931] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1709: lblock 3 mapped to illegal pblock 3 (length 1) [ 550.376802][ T26] audit: type=1800 audit(1790298368.318:27): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1708" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 550.387788][T10931] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1709: lblock 3 mapped to illegal pblock 3 (length 1) [ 550.419093][T10931] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1709: lblock 3 mapped to illegal pblock 3 (length 1) [ 550.777936][T10943] chnl_net:caif_netlink_parms(): no params data found [ 551.132901][T10943] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.148715][T10953] hfsplus: xattr search failed [ 551.230355][T10943] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.300273][T10943] device bridge_slave_0 entered promiscuous mode [ 551.407687][T10943] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.427812][ T9891] hfsplus: node 4:3 still has 1 user(s)! [ 551.428222][T10943] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.517352][T10943] device bridge_slave_1 entered promiscuous mode [ 551.735174][T10943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.748395][T10943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.952339][T10972] loop2: detected capacity change from 0 to 128 [ 551.989853][ T4383] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 552.014255][T10943] team0: Port device team_slave_0 added [ 552.043345][ T4383] EXT4-fs (loop8): This should not happen!! Data will be lost [ 552.043345][ T4383] [ 552.070295][T10943] team0: Port device team_slave_1 added [ 552.148372][T10972] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 552.221110][T10943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.343107][T10943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.351523][ T4262] Bluetooth: hci2: command 0x0409 tx timeout [ 552.422117][T10983] loop0: detected capacity change from 0 to 256 [ 552.481777][T10981] loop8: detected capacity change from 0 to 4096 [ 552.491587][T10943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.506104][T10943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.513202][T10943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.563308][T10981] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 552.570634][T10943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.582118][T10981] EXT4-fs (loop8): Test dummy encryption mode enabled [ 552.610924][T10981] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,mblk_io_submit,bsddf,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 552.750999][T10983] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x28ba01bf, utbl_chksum : 0xe619d30d) [ 552.824857][T10989] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4196] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10989] [ 553.307516][T10995] loop7: detected capacity change from 0 to 8 [ 553.366734][T10943] device hsr_slave_0 entered promiscuous mode [ 553.411174][T10997] loop2: detected capacity change from 0 to 128 [ 553.428592][T10943] device hsr_slave_1 entered promiscuous mode [ 553.445623][T10943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.473367][T10995] unable to read id index table [ 553.487228][T10943] Cannot create hsr debugfs directory [ 553.627283][T10997] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 553.724872][T10997] ext4 filesystem being mounted at /350/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 553.736013][T11006] loop8: detected capacity change from 0 to 1024 [ 553.820440][T10997] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 553.850489][T11009] loop0: detected capacity change from 0 to 128 [ 553.994888][T11006] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 554.005937][T11006] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.034760][T11006] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: block 3: comm syz.8.1724: lblock 3 mapped to illegal pblock 3 (length 3) [ 554.059240][T11006] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 554.072028][T11006] EXT4-fs (loop8): This should not happen!! Data will be lost [ 554.072028][T11006] [ 554.084123][T11006] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1724: lblock 3 mapped to illegal pblock 3 (length 1) [ 554.102557][T11006] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1724: lblock 3 mapped to illegal pblock 3 (length 1) [ 554.194660][T11006] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1724: lblock 3 mapped to illegal pblock 3 (length 1) [ 554.217091][T11006] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1724: lblock 3 mapped to illegal pblock 3 (length 1) [ 554.235167][T11006] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1724: lblock 3 mapped to illegal pblock 3 (length 1) [ 554.271058][T11006] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1724: lblock 3 mapped to illegal pblock 3 (length 1) [ 554.286941][T11006] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1724: lblock 3 mapped to illegal pblock 3 (length 1) [ 554.307750][T11005] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1724: lblock 3 mapped to illegal pblock 3 (length 1) [ 554.598731][ T4907] Bluetooth: hci2: command 0x041b tx timeout [ 554.611892][T11005] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.1724: lblock 3 mapped to illegal pblock 3 (length 1) [ 555.127386][T10943] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 555.173378][T10943] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 555.183924][T11031] loop7: detected capacity change from 0 to 128 [ 555.265619][T10943] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 555.335559][T10943] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 555.404141][T11039] loop0: detected capacity change from 0 to 256 [ 555.598133][T11039] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 555.799722][ T8100] kernel write not supported for file /snd/seq (pid: 8100 comm: kworker/0:15) [ 555.833534][ T4303] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.974286][T11051] loop2: detected capacity change from 0 to 1024 [ 556.001587][ T4303] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.080810][ T4418] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 556.096573][T11051] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 556.107289][T11051] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.126708][T11051] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.1733: lblock 3 mapped to illegal pblock 3 (length 3) [ 556.141185][ T4418] EXT4-fs (loop8): This should not happen!! Data will be lost [ 556.141185][ T4418] [ 556.144799][ T9891] FAT-fs (loop7): error, invalid access to FAT (entry 0xffff0000) [ 556.151247][T11051] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 556.151282][T11051] EXT4-fs (loop2): This should not happen!! Data will be lost [ 556.151282][T11051] [ 556.184361][T11051] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1733: lblock 3 mapped to illegal pblock 3 (length 1) [ 556.226614][T11051] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1733: lblock 3 mapped to illegal pblock 3 (length 1) [ 556.246263][T11051] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1733: lblock 3 mapped to illegal pblock 3 (length 1) [ 556.265471][T11051] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1733: lblock 3 mapped to illegal pblock 3 (length 1) [ 556.286075][T11051] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1733: lblock 3 mapped to illegal pblock 3 (length 1) [ 556.300869][T11057] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.1733: Freeing blocks not in datazone - block = 3, count = 1 [ 556.316924][T11055] loop0: detected capacity change from 0 to 2048 [ 556.337165][T11057] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1733: bg 0: block 112: padding at end of block bitmap is not set [ 556.366126][ T9891] FAT-fs (loop7): Filesystem has been set read-only [ 556.376397][T11057] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 556.386848][T10943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.409881][T11057] EXT4-fs (loop2): This should not happen!! Data will be lost [ 556.409881][T11057] [ 556.481771][T11057] EXT4-fs (loop2): Total free blocks count 0 [ 556.506870][T11057] EXT4-fs (loop2): Free/Dirty block details [ 556.522923][T11057] EXT4-fs (loop2): free_blocks=0 [ 556.548696][T11057] EXT4-fs (loop2): dirty_blocks=64 [ 556.567307][T11057] EXT4-fs (loop2): Block reservation details [ 556.573720][T11057] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 556.590261][ T9891] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 556.604048][ T4303] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.671388][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 556.679641][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 556.727549][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 556.737773][ T9891] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 556.762263][ T4383] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 556.779884][T10943] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.821045][ T4303] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.887966][T11067] loop8: detected capacity change from 0 to 128 [ 557.116312][T11076] loop2: detected capacity change from 0 to 512 [ 557.147234][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 557.179703][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 557.935032][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.942217][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.961329][ T4191] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 557.971109][T11076] EXT4-fs (loop2): Ignoring removed nobh option [ 557.971312][ T4191] CPU: 1 PID: 4191 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 557.984989][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.995167][ T4191] Workqueue: hci0 hci_rx_work [ 557.999933][ T4191] Call Trace: [ 558.003248][ T4191] [ 558.006212][ T4191] dump_stack_lvl+0x188/0x250 [ 558.010930][ T4191] ? show_regs_print_info+0x20/0x20 [ 558.016158][ T4191] ? load_image+0x410/0x410 [ 558.020686][ T4191] sysfs_create_dir_ns+0x26a/0x290 [ 558.025886][ T4191] ? sysfs_warn_dup+0xa0/0xa0 [ 558.030573][ T4191] ? ret_from_fork+0x1f/0x30 [ 558.035213][ T4191] ? do_raw_spin_unlock+0x11d/0x230 [ 558.040434][ T4191] kobject_add_internal+0x5ba/0xcd0 [ 558.045724][ T4191] kobject_add+0x160/0x230 [ 558.050159][ T4191] ? kobject_init+0x1c0/0x1c0 [ 558.055020][ T4191] ? __raw_spin_lock_init+0x41/0x100 [ 558.060314][ T4191] ? get_device_parent+0x121/0x3e0 [ 558.065523][ T4191] device_add+0x470/0x1050 [ 558.069956][ T4191] hci_conn_add_sysfs+0xd1/0x1e0 [ 558.075030][ T4191] hci_sync_conn_complete_evt+0x647/0x9d0 [ 558.080818][ T4191] ? __rwlock_init+0x140/0x140 [ 558.085632][ T4191] hci_event_packet+0x8cf/0x1310 [ 558.090579][ T4191] ? _raw_spin_unlock+0x40/0x40 [ 558.095479][ T4191] ? rcu_lock_release+0x20/0x20 [ 558.100367][ T4191] ? hci_send_to_monitor+0x9c/0x4a0 [ 558.105581][ T4191] ? hci_rx_work+0x63e/0xa10 [ 558.110183][ T4191] hci_rx_work+0x255/0xa10 [ 558.114612][ T4191] process_one_work+0x867/0xff0 [ 558.119540][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 558.125204][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 558.130573][ T4191] ? _raw_spin_lock_irq+0xb7/0xf0 [ 558.135607][ T4191] ? _raw_spin_lock_irqsave+0x100/0x100 [ 558.141166][ T4191] ? wq_worker_running+0x97/0x170 [ 558.146200][ T4191] worker_thread+0xad7/0x12a0 [ 558.150911][ T4191] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 558.156854][ T4191] kthread+0x42e/0x520 [ 558.161010][ T4191] ? rcu_lock_release+0x20/0x20 [ 558.165889][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 558.170527][ T4191] ret_from_fork+0x1f/0x30 [ 558.174977][ T4191] [ 558.181664][ T4191] kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 558.194995][ T4191] Bluetooth: hci0: failed to register connection device [ 558.211671][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 558.220624][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 558.232292][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.239416][ T4383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.247350][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 558.369241][T11076] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 558.408145][T11076] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 558.560061][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 558.601816][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 558.616080][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 558.659991][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 558.690013][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 558.711280][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 558.724867][T11098] loop2: detected capacity change from 0 to 1024 [ 558.732062][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 558.743286][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 558.756205][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 558.777000][T10943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 558.798234][T10943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 558.826246][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 558.850086][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 558.885068][T11098] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 558.895903][T11098] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.920271][T11098] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.1744: lblock 3 mapped to illegal pblock 3 (length 3) [ 558.943121][T11098] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 558.955521][T11098] EXT4-fs (loop2): This should not happen!! Data will be lost [ 558.955521][T11098] [ 558.966733][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 558.967459][T11098] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1744: lblock 3 mapped to illegal pblock 3 (length 1) [ 558.991631][T11098] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1744: lblock 3 mapped to illegal pblock 3 (length 1) [ 559.006815][T11098] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1744: lblock 3 mapped to illegal pblock 3 (length 1) [ 559.023308][T11097] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1744: lblock 3 mapped to illegal pblock 3 (length 1) [ 559.053759][T11098] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1744: lblock 3 mapped to illegal pblock 3 (length 1) [ 559.069292][T11098] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1744: lblock 3 mapped to illegal pblock 3 (length 1) [ 559.084538][T11098] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1744: lblock 3 mapped to illegal pblock 3 (length 1) [ 559.103373][T11098] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1744: lblock 3 mapped to illegal pblock 3 (length 1) [ 559.118061][T11098] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1744: lblock 3 mapped to illegal pblock 3 (length 1) [ 559.268224][T11112] loop0: detected capacity change from 0 to 128 [ 559.682379][ T4184] FAT-fs (loop0): error, invalid access to FAT (entry 0xffff0000) [ 559.735179][ T4184] FAT-fs (loop0): Filesystem has been set read-only [ 559.806457][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 559.814039][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 559.927516][ T4184] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 559.989384][T11127] loop8: detected capacity change from 0 to 128 [ 560.014903][T10943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.018707][ T4184] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 560.399562][ T4243] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 560.549795][ T4243] EXT4-fs (loop2): This should not happen!! Data will be lost [ 560.549795][ T4243] [ 561.094206][T11129] chnl_net:caif_netlink_parms(): no params data found [ 561.196274][T11150] loop8: detected capacity change from 0 to 512 [ 561.301534][T11150] EXT4-fs (loop8): Ignoring removed nobh option [ 561.417282][T11150] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 561.459349][T11150] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 561.483380][T11129] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.491975][T11129] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.502477][T11129] device bridge_slave_0 entered promiscuous mode [ 561.550751][T11129] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.557882][T11129] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.590467][T11129] device bridge_slave_1 entered promiscuous mode [ 561.637824][T11166] loop2: detected capacity change from 0 to 1024 [ 561.646576][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 561.691623][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 561.711652][T11129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.892024][T11129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.030421][ T8098] Bluetooth: hci1: command 0x0409 tx timeout [ 562.056943][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 562.081388][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 562.097386][T10943] device veth0_vlan entered promiscuous mode [ 562.117505][T11129] team0: Port device team_slave_0 added [ 562.155982][T11129] team0: Port device team_slave_1 added [ 562.188773][ T4303] device hsr_slave_0 left promiscuous mode [ 562.216735][ T4303] device hsr_slave_1 left promiscuous mode [ 562.235391][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.248403][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.288841][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.311926][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.320064][ T4303] device bridge_slave_1 left promiscuous mode [ 562.333944][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.348680][ T4303] device bridge_slave_0 left promiscuous mode [ 562.372414][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.425146][ T4303] device veth1_macvtap left promiscuous mode [ 562.449625][ T4303] device veth0_macvtap left promiscuous mode [ 562.464431][ T4303] device veth1_vlan left promiscuous mode [ 562.478956][ T4303] device veth0_vlan left promiscuous mode [ 562.588050][T11197] loop2: detected capacity change from 0 to 512 [ 562.665111][T11197] EXT4-fs (loop2): Ignoring removed nobh option [ 562.728973][T11197] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 562.779656][T11197] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 562.947321][ T4303] team0 (unregistering): Port device team_slave_1 removed [ 562.969854][ T4303] team0 (unregistering): Port device team_slave_0 removed [ 562.988262][T11203] loop2: detected capacity change from 0 to 512 [ 562.988536][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.036913][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.038875][T11203] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 563.058999][T11203] EXT4-fs (loop2): Unrecognized mount option """ or missing value [ 563.188928][ T4303] bond0 (unregistering): Released all slaves [ 563.279064][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 563.288020][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 563.335631][T11209] loop2: detected capacity change from 0 to 2048 [ 563.395059][T10943] device veth1_vlan entered promiscuous mode [ 563.431013][T11209] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 563.454502][T11129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.461508][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.520468][T11215] loop8: detected capacity change from 0 to 256 [ 563.545840][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.552270][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.616593][T11129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.692799][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 563.738166][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 563.774375][T11129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.781400][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.846519][T11129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.871165][T11221] loop8: detected capacity change from 0 to 4096 [ 563.896904][T10943] device veth0_macvtap entered promiscuous mode [ 563.945124][T10943] device veth1_macvtap entered promiscuous mode [ 564.023190][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.068753][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.087077][T11228] loop2: detected capacity change from 0 to 512 [ 564.098000][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.107227][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 564.109738][ T4907] Bluetooth: hci0: command 0x0409 tx timeout [ 564.144710][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.168257][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.183833][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.224181][T10943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.245362][T11228] EXT4-fs (loop2): Ignoring removed nobh option [ 564.286081][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 564.294391][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 564.642310][T11228] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 564.730078][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 564.837339][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 564.849013][T11228] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 565.217828][T11248] loop8: detected capacity change from 0 to 2048 [ 565.306276][T11248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 565.704149][T11129] device hsr_slave_0 entered promiscuous mode [ 565.857483][T11253] loop8: detected capacity change from 0 to 128 [ 565.893003][T11129] device hsr_slave_1 entered promiscuous mode [ 565.903095][T11255] loop2: detected capacity change from 0 to 512 [ 565.910961][T11129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.923536][T11129] Cannot create hsr debugfs directory [ 565.933405][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.949410][T11255] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 565.951836][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.975979][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.987064][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.993668][T11255] EXT4-fs (loop2): 1 truncate cleaned up [ 566.002849][T11255] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 566.006615][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.048211][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.070342][T10943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.177340][ T4196] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 566.195206][ T4369] Bluetooth: hci0: command 0x041b tx timeout [ 566.313527][ T8100] Bluetooth: hci1: command 0x040f tx timeout [ 566.340108][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 566.549580][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 566.737763][T10943] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.786046][T10943] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.820463][T10943] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.867575][T10943] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.304589][T11129] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.421856][T11278] loop8: detected capacity change from 0 to 128 [ 567.699784][T11174] chnl_net:caif_netlink_parms(): no params data found [ 567.867962][ T4424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.894496][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.900331][T11282] loop2: detected capacity change from 0 to 512 [ 567.925224][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.931537][ T4424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.947704][T11129] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.000292][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 568.020278][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 568.051719][T11282] EXT4-fs (loop2): Ignoring removed nobh option [ 568.099416][T11129] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.134125][T11282] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 568.243007][T11282] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 568.281922][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 568.409881][T11129] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.513864][ T4369] Bluetooth: hci1: command 0x0419 tx timeout [ 568.568509][T11174] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.593896][T11174] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.603295][T11174] device bridge_slave_0 entered promiscuous mode [ 569.778365][T11174] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.803946][T11174] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.879842][T11174] device bridge_slave_1 entered promiscuous mode [ 570.032932][T11174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.076504][T11321] loop8: detected capacity change from 0 to 1024 [ 570.126968][T11174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.215222][T11321] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 570.226083][T11321] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.292227][ T4418] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: comm kworker/u4:12: lblock 0 mapped to illegal pblock 0 (length 1) [ 570.315616][T11174] team0: Port device team_slave_0 added [ 570.357228][ T4369] Bluetooth: hci0: command 0x0419 tx timeout [ 570.376124][T11129] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 570.402533][ T4418] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 570.425298][T11129] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 570.458986][T11174] team0: Port device team_slave_1 added [ 570.489871][ T4418] EXT4-fs (loop8): This should not happen!! Data will be lost [ 570.489871][ T4418] [ 570.497673][T11129] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 570.729743][T11129] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 571.365533][T11344] loop9: detected capacity change from 0 to 512 [ 571.458337][T11174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.496910][T11344] EXT4-fs (loop9): Ignoring removed nobh option [ 571.548634][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.589479][T11344] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 571.616709][T11354] loop2: detected capacity change from 0 to 1024 [ 571.685942][T11174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.702723][T11174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.710070][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.730066][T11344] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 571.751976][T11174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.778964][T11354] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 571.789702][T11354] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.808190][T11354] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.1795: lblock 3 mapped to illegal pblock 3 (length 3) [ 571.822960][T11354] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 571.835398][T11354] EXT4-fs (loop2): This should not happen!! Data will be lost [ 571.835398][T11354] [ 571.846722][T11354] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1795: lblock 3 mapped to illegal pblock 3 (length 1) [ 571.863183][T11354] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1795: lblock 3 mapped to illegal pblock 3 (length 1) [ 571.878434][T11354] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1795: lblock 3 mapped to illegal pblock 3 (length 1) [ 571.893438][T11354] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1795: lblock 3 mapped to illegal pblock 3 (length 1) [ 571.908617][T11354] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1795: lblock 3 mapped to illegal pblock 3 (length 1) [ 571.923306][T11354] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1795: lblock 3 mapped to illegal pblock 3 (length 1) [ 571.938723][T11354] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1795: lblock 3 mapped to illegal pblock 3 (length 1) [ 571.957078][T11354] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1795: lblock 3 mapped to illegal pblock 3 (length 1) [ 571.972030][T11354] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1795: lblock 3 mapped to illegal pblock 3 (length 1) [ 572.214295][T11174] device hsr_slave_0 entered promiscuous mode [ 572.222196][T11365] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 572.302661][T11365] EXT4-fs (loop2): This should not happen!! Data will be lost [ 572.302661][T11365] [ 572.330314][T11372] loop9: detected capacity change from 0 to 128 [ 572.343175][T11174] device hsr_slave_1 entered promiscuous mode [ 572.358343][T11365] EXT4-fs (loop2): Total free blocks count 0 [ 572.365608][T11365] EXT4-fs (loop2): Free/Dirty block details [ 572.372478][T11174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.382369][T11174] Cannot create hsr debugfs directory [ 572.392577][T11365] EXT4-fs (loop2): free_blocks=0 [ 572.468394][T11365] EXT4-fs (loop2): dirty_blocks=64 [ 572.498155][T11365] EXT4-fs (loop2): Block reservation details [ 572.504213][T11365] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 572.656406][T11129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.795177][T11381] loop8: detected capacity change from 0 to 1024 [ 572.825102][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 572.876946][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 572.885409][T11381] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 572.896357][T11381] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.927746][ T4424] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: comm kworker/u4:13: lblock 0 mapped to illegal pblock 0 (length 1) [ 572.969518][T11129] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.039364][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 573.059304][ T4424] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 573.089167][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 573.093661][ T4424] EXT4-fs (loop8): This should not happen!! Data will be lost [ 573.093661][ T4424] [ 573.119204][T11389] loop2: detected capacity change from 0 to 16 [ 573.129224][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.136358][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.203421][T11389] erofs: (device loop2): mounted with root inode @ nid 36. [ 573.472864][T11129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 573.534576][T11129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.000558][ T4191] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 574.010697][ T4191] CPU: 1 PID: 4191 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 574.018288][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 574.028482][ T4191] Workqueue: hci4 hci_rx_work [ 574.033303][ T4191] Call Trace: [ 574.036621][ T4191] [ 574.039578][ T4191] dump_stack_lvl+0x188/0x250 [ 574.044301][ T4191] ? show_regs_print_info+0x20/0x20 [ 574.049536][ T4191] ? load_image+0x410/0x410 [ 574.054096][ T4191] sysfs_create_dir_ns+0x26a/0x290 [ 574.059249][ T4191] ? sysfs_warn_dup+0xa0/0xa0 [ 574.063962][ T4191] ? ret_from_fork+0x1f/0x30 [ 574.068607][ T4191] ? do_raw_spin_unlock+0x11d/0x230 [ 574.073854][ T4191] kobject_add_internal+0x5ba/0xcd0 [ 574.079112][ T4191] kobject_add+0x160/0x230 [ 574.083582][ T4191] ? kobject_init+0x1c0/0x1c0 [ 574.088578][ T4191] ? __raw_spin_lock_init+0x41/0x100 [ 574.093959][ T4191] ? get_device_parent+0x121/0x3e0 [ 574.099119][ T4191] device_add+0x470/0x1050 [ 574.103599][ T4191] hci_conn_add_sysfs+0xd1/0x1e0 [ 574.108598][ T4191] hci_sync_conn_complete_evt+0x647/0x9d0 [ 574.114371][ T4191] ? __rwlock_init+0x140/0x140 [ 574.119182][ T4191] hci_event_packet+0x8cf/0x1310 [ 574.124175][ T4191] ? _raw_spin_unlock+0x40/0x40 [ 574.129109][ T4191] ? rcu_lock_release+0x20/0x20 [ 574.134014][ T4191] ? hci_send_to_monitor+0x9c/0x4a0 [ 574.139262][ T4191] hci_rx_work+0x255/0xa10 [ 574.143736][ T4191] process_one_work+0x867/0xff0 [ 574.148653][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 574.154335][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 574.159717][ T4191] ? _raw_spin_lock_irq+0xb7/0xf0 [ 574.164790][ T4191] ? _raw_spin_lock_irqsave+0x100/0x100 [ 574.170395][ T4191] ? wq_worker_running+0x97/0x170 [ 574.175559][ T4191] worker_thread+0xad7/0x12a0 [ 574.180310][ T4191] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 574.186259][ T4191] kthread+0x42e/0x520 [ 574.190381][ T4191] ? rcu_lock_release+0x20/0x20 [ 574.195283][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 574.199925][ T4191] ret_from_fork+0x1f/0x30 [ 574.204498][ T4191] [ 574.213471][ T4191] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 574.229091][ T4191] Bluetooth: hci4: failed to register connection device [ 574.270667][T11410] loop8: detected capacity change from 0 to 512 [ 574.281191][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 574.292121][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 574.328441][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 574.384133][T11410] EXT4-fs (loop8): Ignoring removed nobh option [ 574.391204][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.398314][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.431370][T11410] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 574.465246][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 574.477268][T11410] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 574.486018][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 574.498516][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 574.512835][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 574.530333][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 574.576992][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 574.586215][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 574.598913][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 574.644375][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 574.662607][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 574.674236][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 574.684587][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 574.888151][T11430] loop2: detected capacity change from 0 to 1024 [ 574.996048][T11430] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 575.007525][T11430] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.048628][T11430] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.1808: lblock 3 mapped to illegal pblock 3 (length 3) [ 575.068604][T11430] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 575.081228][T11430] EXT4-fs (loop2): This should not happen!! Data will be lost [ 575.081228][T11430] [ 575.099606][T11435] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1808: lblock 3 mapped to illegal pblock 3 (length 1) [ 575.116796][T11435] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1808: lblock 3 mapped to illegal pblock 3 (length 1) [ 575.133504][T11435] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1808: lblock 3 mapped to illegal pblock 3 (length 1) [ 575.149689][T11435] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1808: lblock 3 mapped to illegal pblock 3 (length 1) [ 575.168165][T11429] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1808: lblock 3 mapped to illegal pblock 3 (length 1) [ 575.286009][T11429] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1808: lblock 3 mapped to illegal pblock 3 (length 1) [ 575.414984][T11435] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1808: lblock 3 mapped to illegal pblock 3 (length 1) [ 575.587033][T11429] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1808: lblock 3 mapped to illegal pblock 3 (length 1) [ 575.640819][T11429] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.1808: lblock 3 mapped to illegal pblock 3 (length 1) [ 575.686570][T11441] loop8: detected capacity change from 0 to 512 [ 575.771175][T11129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.797448][T11441] EXT4-fs (loop8): Ignoring removed nobh option [ 575.824698][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 575.849783][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 575.894452][T11441] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 576.043043][T11441] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 576.105318][T11430] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 576.118120][T11430] EXT4-fs (loop2): This should not happen!! Data will be lost [ 576.118120][T11430] [ 576.128052][T11430] EXT4-fs (loop2): Total free blocks count 0 [ 576.134133][T11430] EXT4-fs (loop2): Free/Dirty block details [ 576.140326][T11430] EXT4-fs (loop2): free_blocks=0 [ 576.145394][T11430] EXT4-fs (loop2): dirty_blocks=64 [ 576.150665][T11430] EXT4-fs (loop2): Block reservation details [ 576.152962][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 576.156894][T11430] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 577.146208][T11471] loop9: detected capacity change from 0 to 128 [ 578.035663][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 578.061966][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 578.132442][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 578.170027][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 578.219467][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 578.273615][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 578.313079][T11129] device veth0_vlan entered promiscuous mode [ 578.343440][ T4369] Bluetooth: hci4: command 0x0406 tx timeout [ 578.351911][T11481] ------------[ cut here ]------------ [ 578.374083][T11481] WARNING: CPU: 0 PID: 11481 at arch/x86/kvm/x86.c:10384 kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 578.390579][T11486] loop8: detected capacity change from 0 to 512 [ 578.401424][ T4303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.434803][T11481] Modules linked in: [ 578.434975][T11486] EXT4-fs (loop8): Ignoring removed nobh option [ 578.453885][T11129] device veth1_vlan entered promiscuous mode [ 578.461016][T11481] CPU: 1 PID: 11481 Comm: syz.2.1813 Not tainted syzkaller #0 [ 578.461223][T11491] loop2: detected capacity change from 0 to 16 [ 578.515096][ T4303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.538477][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.593655][T11481] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 578.611985][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 578.653391][T11486] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 578.671572][T11491] erofs: (device loop2): mounted with root inode @ nid 36. [ 578.679004][T11481] Code: e8 a1 11 af 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 86 11 af 00 e9 e4 f7 ff ff e8 ec dd 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c [ 578.679065][T11481] RSP: 0018:ffffc90002fdfca0 EFLAGS: 00010287 [ 578.679091][T11481] RAX: ffffffff810f36b4 RBX: 1ffff1100e8ef062 RCX: 0000000000080000 [ 578.679111][T11481] RDX: ffffc90004595000 RSI: 000000000000041d RDI: 000000000000041e [ 578.679128][T11481] RBP: 0000000000000000 R08: ffffffff8d8b1eef R09: 1ffffffff1b163dd [ 578.679146][T11481] R10: dffffc0000000000 R11: fffffbfff1b163de R12: ffff88807d5ec001 [ 578.679166][T11481] R13: ffff8880747780f0 R14: ffff888074778000 R15: ffff88807d5ec000 [ 578.679185][T11481] FS: 00007f87da0f96c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 578.679205][T11481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.733171][T11486] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 578.775567][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 578.807147][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 578.824522][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 578.847087][T11481] CR2: 00007fdbb7b28a10 CR3: 000000004fefc000 CR4: 00000000003526f0 [ 578.855143][T11481] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 578.863810][ T4303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.881475][T11129] device veth0_macvtap entered promiscuous mode [ 578.888369][T11481] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 578.902643][T11129] device veth1_macvtap entered promiscuous mode [ 578.941935][ T4303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.960032][T11481] Call Trace: [ 578.963394][T11481] [ 579.035975][T11481] kvm_vcpu_ioctl+0x8f2/0xc10 [ 579.047239][T11481] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 579.062393][T11481] ? bpf_lsm_file_ioctl+0x5/0x10 [ 579.067370][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.082589][T11481] ? security_file_ioctl+0x7c/0xa0 [ 579.110763][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.111890][T11481] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 579.129712][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.153009][T11481] __se_sys_ioctl+0xfa/0x170 [ 579.158125][T11481] do_syscall_64+0x4c/0xa0 [ 579.162694][T11481] ? clear_bhb_loop+0x30/0x80 [ 579.168406][T11481] ? clear_bhb_loop+0x30/0x80 [ 579.173442][T11481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 579.179975][T11481] RIP: 0033:0x7f87dbea1159 [ 579.185122][T11481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.196057][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.214382][T11481] RSP: 002b:00007f87da0f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.232766][T11481] RAX: ffffffffffffffda RBX: 00007f87dc128fa0 RCX: 00007f87dbea1159 [ 579.241646][T11481] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 579.250523][T11481] RBP: 00007f87dbf3806b R08: 0000000000000000 R09: 0000000000000000 [ 579.259231][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.266325][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.269323][T11481] R13: 00007f87dc129038 R14: 00007f87dc128fa0 R15: 00007ffdec3c68c8 [ 579.286129][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.286155][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.286174][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.300367][T11129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.330619][T11481] [ 579.333752][T11481] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 579.341064][T11481] CPU: 0 PID: 11481 Comm: syz.2.1813 Not tainted syzkaller #0 [ 579.348575][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 579.358671][T11481] Call Trace: [ 579.361991][T11481] [ 579.363640][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.364957][T11481] dump_stack_lvl+0x188/0x250 [ 579.364992][T11481] ? show_regs_print_info+0x20/0x20 [ 579.385548][T11481] ? load_image+0x410/0x410 [ 579.390118][T11481] panic+0x2f8/0x850 [ 579.394152][T11481] ? bpf_jit_dump+0xd0/0xd0 [ 579.398720][T11481] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 579.398752][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.404573][T11481] __warn+0x248/0x2b0 [ 579.404616][T11481] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 579.424451][T11481] report_bug+0x1b9/0x2e0 [ 579.428834][T11481] handle_bug+0x3a/0x70 [ 579.433160][T11481] exc_invalid_op+0x16/0x40 [ 579.435746][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.437819][T11481] asm_exc_invalid_op+0x16/0x20 [ 579.437847][T11481] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 579.437872][T11481] Code: e8 a1 11 af 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 86 11 af 00 e9 e4 f7 ff ff e8 ec dd 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c [ 579.437891][T11481] RSP: 0018:ffffc90002fdfca0 EFLAGS: 00010287 [ 579.437911][T11481] RAX: ffffffff810f36b4 RBX: 1ffff1100e8ef062 RCX: 0000000000080000 [ 579.437927][T11481] RDX: ffffc90004595000 RSI: 000000000000041d RDI: 000000000000041e [ 579.437940][T11481] RBP: 0000000000000000 R08: ffffffff8d8b1eef R09: 1ffffffff1b163dd [ 579.437956][T11481] R10: dffffc0000000000 R11: fffffbfff1b163de R12: ffff88807d5ec001 [ 579.437972][T11481] R13: ffff8880747780f0 R14: ffff888074778000 R15: ffff88807d5ec000 [ 579.437996][T11481] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 579.438034][T11481] kvm_vcpu_ioctl+0x8f2/0xc10 [ 579.438062][T11481] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 579.438105][T11481] ? bpf_lsm_file_ioctl+0x5/0x10 [ 579.438127][T11481] ? security_file_ioctl+0x7c/0xa0 [ 579.438151][T11481] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 579.438172][T11481] __se_sys_ioctl+0xfa/0x170 [ 579.438196][T11481] do_syscall_64+0x4c/0xa0 [ 579.438217][T11481] ? clear_bhb_loop+0x30/0x80 [ 579.438240][T11481] ? clear_bhb_loop+0x30/0x80 [ 579.438265][T11481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 579.438289][T11481] RIP: 0033:0x7f87dbea1159 [ 579.438309][T11481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.438328][T11481] RSP: 002b:00007f87da0f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.438351][T11481] RAX: ffffffffffffffda RBX: 00007f87dc128fa0 RCX: 00007f87dbea1159 [ 579.438367][T11481] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 579.438382][T11481] RBP: 00007f87dbf3806b R08: 0000000000000000 R09: 0000000000000000 [ 579.438397][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.438410][T11481] R13: 00007f87dc129038 R14: 00007f87dc128fa0 R15: 00007ffdec3c68c8 [ 579.438443][T11481] [ 579.449407][T11481] Kernel Offset: disabled [ 579.663046][T11481] Rebooting in 86400 seconds..