last executing test programs: 4m20.880831222s ago: executing program 0 (id=89): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000300)="25792a54b9b767921ab24f858411177062bc2fc7d3cc18832116d2", 0x1b}], 0x1}}], 0x1, 0x30040044) 4m20.490140416s ago: executing program 0 (id=93): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x0, 0x7fffffff}]}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4m19.776095837s ago: executing program 0 (id=96): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x6}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x9b}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4m19.509182713s ago: executing program 0 (id=99): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001cc0)={[{@discard}, {@gid}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@errors_continue}, {@gid}, {@discard}, {@utf8}, {@errors_remount}, {@errors_remount}]}, 0x1, 0x152d, &(0x7f0000000780)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x320c85c, &(0x7f00000004c0)=ANY=[]) 4m19.161383043s ago: executing program 0 (id=104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) 4m18.145472454s ago: executing program 0 (id=109): semop(0x0, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x1, 0xfffb}, {0x0, 0x4, 0x800}, {0x4, 0x1ff}, {0x1, 0x7, 0x3800}, {0x7, 0x3}, {0x0, 0x86, 0x3800}], 0x6) semctl$GETNCNT(0x0, 0x1, 0xe, 0x0) 4m16.886158618s ago: executing program 32 (id=109): semop(0x0, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x1, 0xfffb}, {0x0, 0x4, 0x800}, {0x4, 0x1ff}, {0x1, 0x7, 0x3800}, {0x7, 0x3}, {0x0, 0x86, 0x3800}], 0x6) semctl$GETNCNT(0x0, 0x1, 0xe, 0x0) 2m9.076428172s ago: executing program 2 (id=425): syz_emit_ethernet(0x5d, &(0x7f0000000100)={@broadcast, @remote, @void, {@generic={0x86dd, "760e44e6755948c75c4e1eea53241c21c79342926e6fbbb09235afcf3cc2406fa6d1da5306498662157bcb40ff5e47d1a4dab037b393d9373b2b03cb0687cd48e7f9361b71feb2dccdf8664d4d8916"}}}, &(0x7f0000000040)={0x0, 0x3, [0x5a4, 0x20e, 0x16d, 0xb76]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a000006090002"], 0xa4}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$fuse(0x0, 0x0, 0x0, 0x914005, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 2m2.762128044s ago: executing program 2 (id=440): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000759, &(0x7f0000000500)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x6}}, {@usrquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}, 0x0}, {@nojournal_checksum}, {@nobh}, {@dax_inode}, {@mblk_io_submit}, {@dax_always}, {@usrjquota}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@usrquota}, {@jqfmt_vfsold}, {@journal_checksum}, {@resgid}], [{@subj_role={'subj_role', 0x3d, 'dax=inode'}}, {@fowner_gt}, {@audit}], 0x2c}, 0x6, 0x50c, &(0x7f0000000a40)="$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") mknod(&(0x7f00000002c0)='./file0\x00', 0x1000, 0x761) 2m0.805602639s ago: executing program 2 (id=450): pipe(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) setreuid(0xee01, 0xee01) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r1, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) 1m59.325625517s ago: executing program 2 (id=454): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noload}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) unshare(0x22020600) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1m58.052904472s ago: executing program 2 (id=457): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000000040)={&(0x7f0000000d00)="dcef58b7f29c1f7c93d183044aedba28341374c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676df55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecedbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c91265d4573c80efbd50f91aeffa88b0d1446b784f607cc2c047cad702a8b7400861ae76535bab2952a6462bcc5be76c108957fafe56c430543eb2e58ee5a6f3f5625b668ce3509d288d6a9a592e0eb94e2089fcff7c8e3a8519d4bf2f527efa55793015dab7ddce6c6e3b58c5264b65326b3b1a27a1abe2721bc79e15ab8286103e00580edc3ada865bdf7fb7e1a631b5f63989d27fe5b4136bc8f78a58420a956c6f762274f8e49fb0bf7a4680ec298b072c1ea51f8d4e02f7129241adf7668bba22656385f1427a8da0d93cbb7cdd39ef72af613697acb04e3bb8dc275b08b06bc5c25c70556a74e155d7bd79c91db3e268c04599f351c13e05b6565369f3138bc9fe7054bbd29645d8580f007842d239872eca1c554b36f1c27571ab1920f80e9c9d61805c5c5", 0x1ba}) unshare(0x42000000) io_setup(0x8, &(0x7f0000000000)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0) io_destroy(r1) 1m56.562167769s ago: executing program 2 (id=460): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x16, "67856f081d9fc303c68bf9098547cc93f28104442487"}}) 1m56.175536392s ago: executing program 33 (id=460): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x16, "67856f081d9fc303c68bf9098547cc93f28104442487"}}) 21.456098475s ago: executing program 6 (id=764): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r3, &(0x7f0000000580)=""/174, 0xae) 19.412328346s ago: executing program 6 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$dupfd(r4, 0x406, r4) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x20000002}) 17.127479721s ago: executing program 6 (id=771): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) setreuid(0xee01, 0xee01) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r3, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) 15.471240149s ago: executing program 6 (id=776): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r3, &(0x7f0000000580)=""/174, 0xae) 13.662071265s ago: executing program 6 (id=779): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$inet(0x2, 0x802, 0x1) write(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f0000000040), 0x4) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[], 0xe) 9.007541099s ago: executing program 3 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$dupfd(r4, 0x406, r4) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x20000002}) 8.060295635s ago: executing program 5 (id=793): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/174, 0xae) 6.979295169s ago: executing program 3 (id=795): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@iter={&(0x7f00000006c0), 0x10}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x1000000000000]}, 0x8) setsockopt(r2, 0x8, 0x1, &(0x7f00000002c0)="53ce830316d750c03cf37c064c9d41e26bce1bae5d1cf76eefe6b14f0d6303b28b6a1e24377189f7fbb9ce57c96eba7225f2e6a73f36240ec05b23fc", 0x3c) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/58, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f00000001c0)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffeec) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_settime(0x0, 0x0) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 6.947627511s ago: executing program 4 (id=796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x406, r4) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x20000001}) 6.053611183s ago: executing program 4 (id=797): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x610) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r4, 0x25, 0x0, @val=@perf_event}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) chdir(&(0x7f0000000000)='./file0\x00') sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 4.997287706s ago: executing program 1 (id=799): syz_emit_ethernet(0x5d, &(0x7f0000000100)={@broadcast, @remote, @void, {@generic={0x86dd, "760e44e6755948c75c4e1eea53241c21c79342926e6fbbb09235afcf3cc2406fa6d1da5306498662157bcb40ff5e47d1a4dab037b393d9373b2b03cb0687cd48e7f9361b71feb2dccdf8664d4d8916"}}}, &(0x7f0000000040)={0x0, 0x3, [0x5a4, 0x20e, 0x16d, 0xb76]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a000006090002"], 0xa4}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$fuse(0x0, 0x0, 0x0, 0x914005, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 4.882981542s ago: executing program 6 (id=800): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r2, &(0x7f0000000580)=""/174, 0xae) 4.848379165s ago: executing program 1 (id=801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000003380)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x2, 0x101, 0xfffffc00, 0x400, 0x3, "54d208457f0b0000000001040000000000f700"}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000003180)={0x9, 0x1, [{0x4, 0x0, 0x6}, {0xe7, 0x0, 0x7fff}, {0x2, 0x0, 0x8}, {0x95}, {0x10, 0x0, 0x8}, {0xfffffffc, 0x0, 0x5}, {0x4, 0x0, 0xe9}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x1}, {0xc864, 0x0, 0x9}, {0xffffffff, 0x0, 0xfffffffffffffffb}, {0x8, 0x0, 0x120f}, {0x4, 0x0, 0xde2}, {0x5, 0x0, 0x6}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0x17}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)}, 0x5}], 0x1, 0x2000, 0x0) syz_genetlink_get_family_id$fou(0x0, r3) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x101042, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0/file0'}, 0x11) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file1\x00') fsync(0xffffffffffffffff) 4.429400529s ago: executing program 4 (id=802): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.192584894s ago: executing program 3 (id=803): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x40) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000240)={0x2c, 0x6, 0x0, {0x1, 0x1, 0x3, 0x0, '_#&'}}, 0x2c) 4.165179205s ago: executing program 1 (id=804): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r4, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000100)={0x2400000000000000, 0x80a0000, 0x10, 0x9, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x5}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 3.835780914s ago: executing program 4 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 3.835310354s ago: executing program 3 (id=806): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) setreuid(0xee01, 0xee01) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r3, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) 3.3936159s ago: executing program 1 (id=807): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x406, r3) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000100)={0x80000000}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x40) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000240)={0x2c, 0x6, 0x0, {0x1, 0x1, 0x3, 0x0, '_#&'}}, 0x2c) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000000)={r5, r6, 0x20d}) 3.132543046s ago: executing program 5 (id=808): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x20000250, 0x0, 0x0, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) 2.869621661s ago: executing program 4 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYRES32=0x0, @ANYBLOB], 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @multicast1, @broadcast}, &(0x7f0000000840)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r3, 0x58, &(0x7f0000000880)}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x38, 0x6d, 0x1, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0xa, 0x22000}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000de6b13140003054000803a00000025021803ff8b75b872576d55c1a39871f3f99610fc6cb288f32a26950babccdd35061e617aae720bb2f1cba31a18b28b2d520000000000", @ANYRES32, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}]}}, 0x0, 0x32}, 0x28) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.015698912s ago: executing program 5 (id=810): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$inet(0x2, 0x802, 0x1) write(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f0000000040), 0x4) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[], 0xe) 971.874173ms ago: executing program 5 (id=811): syz_emit_ethernet(0x5d, &(0x7f0000000100)={@broadcast, @remote, @void, {@generic={0x86dd, "760e44e6755948c75c4e1eea53241c21c79342926e6fbbb09235afcf3cc2406fa6d1da5306498662157bcb40ff5e47d1a4dab037b393d9373b2b03cb0687cd48e7f9361b71feb2dccdf8664d4d8916"}}}, &(0x7f0000000040)={0x0, 0x3, [0x5a4, 0x20e, 0x16d, 0xb76]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a000006090002"], 0xa4}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$fuse(0x0, 0x0, 0x0, 0x914005, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 789.937724ms ago: executing program 1 (id=812): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x610) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r4, 0x25, 0x0, @val=@perf_event}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) chdir(&(0x7f0000000000)='./file0\x00') sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 433.437155ms ago: executing program 4 (id=813): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@iter={&(0x7f00000006c0), 0x10}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x1000000000000]}, 0x8) setsockopt(r2, 0x8, 0x1, &(0x7f00000002c0)="53ce830316d750c03cf37c064c9d41e26bce1bae5d1cf76eefe6b14f0d6303b28b6a1e24377189f7fbb9ce57c96eba7225f2e6a73f36240ec05b23fc", 0x3c) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/58, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f00000001c0)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffeec) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) keyctl$restrict_keyring(0xa, r3, 0x0, &(0x7f0000000000)='id:cb2e') 378.482558ms ago: executing program 5 (id=814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000003380)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x2, 0x101, 0xfffffc00, 0x400, 0x3, "54d208457f0b0000000001040000000000f700"}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000003180)={0x9, 0x1, [{0x4, 0x0, 0x6}, {0xe7, 0x0, 0x7fff}, {0x2, 0x0, 0x8}, {0x95}, {0x10, 0x0, 0x8}, {0xfffffffc, 0x0, 0x5}, {0x4, 0x0, 0xe9}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x1}, {0xc864, 0x0, 0x9}, {0xffffffff, 0x0, 0xfffffffffffffffb}, {0x8, 0x0, 0x120f}, {0x4, 0x0, 0xde2}, {0x5, 0x0, 0x6}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0x17}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$eJzs3Au0jtXWOPA511oPm8Sb5L7mmg9vclkkSS4JiSRJjiS5JSRJkoTEJrckJCH3JPeQ3EJyv99yT5IjSZKQkGT9h079nXM63+l83znn842z52+MZ+w19/vO+c5nz733+zxrjL2/7jCoSr2qleowM/xT8E8fUgEgBQD6AkAWAIgAoGTWklkBh0IGjan/3IuIf60Hpl7pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpua6RI+0e/3v7/yD7///nyPv/f5DDRUd/vr7odR3/Gyky/7RN5p+2yfzTNpl/2ibzT9tk/v/hIoCKf+dhmX/aJvMXIi270vvPclzZ40p//wkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESBvOhcsMAPy6vtJ9CSGEEEIIIYQQ4l8npP/zKN2Va0QIIYQQQgghhBD/RggKNBiIIB2khxTIABnhKsgEV0NmyAIJuAaywrWQDa6D7JADckIuyA15IC9YIHDAEEM+yA9JuB4KwA1QEApBYSgCHopCMbgRisNNUAJuhpJwC5SCW6E0lIGyUA5ug/JwO1SAilAJ7oDKcCdUgapwF1SDu6E63AM14F6oCfdBLbgfasMfoA48AHXhQagHD0F9eBgaQENoBI2hyf8o/3noAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXB4A0bASBgFo2EMjIVx8CaMh7dgArwNE2ESTIYpMBWmwXR4B2bATJgF78JseA/mwFyYB/NhAbwPC2ERLIYPYAl8CEthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+Oj/L388/+1f5HREQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jArJgVs2E2zI7ZMSfmxNyYG/NiXiQkZGTMh/kwiUksgAWwIBbEwlgYPXoshsWwON6EJbAElsSSWApLYWksg2WwHJbD8lgeK2AFrISVsDJWxipYBe/Cu/BurI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT2sj/WxATbARtgIm2ATbIpNsRk2wxbYAltiS2yFrbA1tsY22AbbYltsh+2wPbbHDtgBO2In7ITP4/P4Ar6A3bCy6o49sAf2xJ7YG/tgH3wJ++HL+DK+ggNwIA7CV/FVfA2H4BkcisNwOA7H8mokjsLRyGosjsNxOB7H4wScgBNxEk7CKTgVp+F0nI4zcCbOxHdxNr6H7+FcnIvzcQEuwIW4CBfjYlyCZ3EpLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAt+hB/hdtyOO3En7sbd+DF+jJ/gJzgA9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPIfn8Dyexwv4bO4v6+4utG4AqEuMMiqdSqdSVIrKqDKqTCqTyqwyq4RKqKwqq8qmsqnsKrvKqXKq3Cq3yqvyKlKkWMUqn8qnkiqpCqgCqqAqqAqrwsorr4qpYqq4Kq5KqBKqpLpFlVK3qtKqjGruy6lyqrxq4SuoiqqSqqQqqztVFVVVVVXVVDVVXVVXNVQNVVPVVLXU/aq26o698QF1aTL11ECsrwZhA9VQNVKN1Wv4iGqqhmAz1Vy1UI+pYTgUW6mmvrV6UrVRo7CtelqNxmdUezUWO6jnVEfVSXVWz6suqpnv+ut2p5qCPVUv1Vv1UTPwTnVpYlXUK2qAGqgGqVfVfHxNDVGvq6FqmBqu3lAj1Eg1So1WY9RYNU69qcart9QE9baaqCapyWqKmqqmqenqHTVDzVSz1LtqtnpPzVFz1Tw1Xy1Q76uFapFarD5QS9SHaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr+khtU9vVDrVT7VK71R71sdqrPlH71Kdqv/pMHVB/VAfV5+qQ+kIdVl+qI+ordVR9rY6pb9Rx9a06oU6qU+o7dVp9r86os+qc+kGdVz+qC+ondVEFBRq10lobHel0Or1O0Rl0Rn2VBn21zqyz6IS+RmfV1+ps+jqdXefQOXUunVvn0Xm11aSdZh3rfDq/TurrdQF9gy6oC+nCuoj2uqgupm/UxfVNuoS+WZfUt+hS+lZdWpfRZXU5fZsur2/XFXRFXUnfoSvrO3UVXVXfpavpu3V1fY+uoe/VNfV9upa+X9fWf9B19AO6rn5Q19MP6fr6Yd1AN9SNdGPdRD+im+pHdTPdXLfQj+mW+nHdSj+hW+sndRv9lG6rn9bt9DO6vX5Wd9DP6Y66k+6sf9IXddBddTedqrvrHvpF3VP30r11H91Xv6T76Zd1f/2KHqAH6kH6VT1Yv6aH6Nf1UD1MD9dv6BF6pB6lR+sxeqwep9/U4/VbeoJ+W0/Uk/RkPUVP1dN0718qzfoH8t/6G/n9f371LXqr/khv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+gv9On9ff6jD6rz+of9Hl9Xl/45WsABo0y2hgTmXQmvUkxGUxGc5XJZK42mU0WkzDXmKzmWpPNXGeymxwmp8llcps8Jq+xhowzbGKTz+Q3SXO9KWBuMAVNIVPYFDHeFDXFzI3/dP7v9dfENDFNTVPTzDQzLUwL09K0NK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1Xk2pSTQ/zoulpepnepo/pa14y/Uw/09/0NwPMADPIDDKDzWAzxAwxQ81QM9wMNyPMCDPKjDJjzBgzzowz4814M8FMMBPNRDPZTDZTzVQz3Uw3M8wMM8vMMrPNbDPHzDHzzDyzwCwwC81Cs9gsNkvMErPULDPLzAqzwqwyq8was8asM+vMBrPBbDKbzFKz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWFzxBwxR81Rc8wcM8fNcXPCnDCnzClz2pw2Z8wZc86cM+fNeXPBXDAXzcVLl32RilRkIhOli9JFKVFKlDHKGGWKMkWZo8xRIkpEWaOsUbbouih7lCPKGeWKckd5olSwEUUu4iiO8kX5o2R0fVQguiEqGBWKCkdFIh8VjYpFN0bFo5uiEtHNUcnolqhUdGtUOioTlY3KRbdF5aPbowpRxahSdEdUObozqhJVje6KqkV3R9Wje6Ia0b1Rzei+qFZ0f1Q7+kNUJ3ogqhs9GNWLHorqRw9HDaKGUaOocdTkX1o/hDM5HvVdbTebarvbHvZF29P2sr1tH9vXvmT72Zdtf/uKHWAH2kH2VTvYvmaH2NftUDvMDrdv2BF2pB1lR9sxdqwdZ9+04+1bdoJ92060k+xkO8VOtdPsdPuOnWFn2ln2XTvbvmfn2Ll2np1vF9j37UK7yC62H9gl9kO71C6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9V+ZLfZ7XaH3Wl32d12j/3Y7rWf2H32U7vffmYP2D/ag/Zze8h+YQ/bL+0R+5U9ar+2x+w39rj91p6wJ+0p+509bb+3Z+xZe87+YM/bH+0F+5O9aMOli/tLb+9kyFA6SkcplEIZKSNlokyUmTJTghKUlbJSNspG2Sk75aSclJtyU17KS5cwMeWjfJSkJBWgAlSQClJhKkyePBWjYlScilMJKkElqSSVolJUmkpTWSpLt9FtdDvdThWpIt1Bd9CddCdVpapUjapRdapONagG1aSaVItqUW2qTXWoDtWlulSP6lF9qk8NqAE1okbUhJpQU2pKzagZtaAW1JJaUitqRa2pNbWhNtSW2lI7akftqT11oA7UkTpSZ+pMXagLdaWulEqp1IN6UE/qSb2pN/WlvtSP+lF/6k8DaAANokE0mAbTEBpCQ2kYDac3aASNpFE0msbQWBpH42g8jacJNIEm0kSaTJNpKk2l6TSdZtAMmkWzaDbNpjk0h+bRPFpAC2ghLaTFtJiW0BJaSktpOS2nlbSSVtNqWktraT2tp420kTbTZtpKW2kbbaMdtIN20S7aQ3toL+2lfbSP9tN+OkAH6CAdpEN0iA7TYTpCR+goHaVjdIyO03E6QSfoFJ2i03SaztAZOkfn6Dz9SBfoJ7pIgVKcgozuKpfJXe0yuywuxWVwl+IIAC7FOV0ul9vlcXmdddldjr+IyTlX0BVyhV0R511RV8zd+Ju4tCvjyrpy7jZX3t3uKvwmrubudtXdPa6Gu9dVdXf9RVzT3edquYdcbfewq+MaurqusavnHnL13cOugWvoGrnGrqV73LVyT7jW7knXxj31m3ihW+TWunVuvdvg9rpP3Dn3gzvqvnbn3Y+uq+vm+rqXXD/3suvvXnED3MDfxMPdG26EG+lGudFujBv7m3iym+KmumluunvHzXAzfxMvcO+72W6xm+Pmunlu/s/xpZ4Wuw/cEvehW+qWueVuhVvpVrnVbs3/73WF2+Q2uy1uj/vYbXPb3Q630+1yu3+OL53HPvep2+8+c0fcV+6g+9wdcsfcYfflz/Gl8zvmvnHH3bfuhDvpTrnv3Gn3vTvjzv58/pfO/Tv3k7voggNGVqzZcMTpOD2ncAbOyFdxJr6aM3MWTvA1nJWv5Wx8HWfnHJyTc3FuzsN52TKxY+aY83F+TvL1XIBv4IJciAtzEfZclIvxjVycb+ISfDOX5Fu4FN/KpbkMl+VyfBuX59u5AlfkSnwHVw6Bq3BVvour8d1cne/hGnwv1+T7uBbfz7X5D1yHH+C6/CDX44e4Pj/MDbghN+LG3IQf4ab8KDfj5tyCH+OW/Di34ie4NT/JbfgpbstPczt+htvzs9yBn+OO3Ik78/PchV/grtyNU7k79+AXuSf34t7ch/vyS9yPX+b+/AoP4IE8iF/lwfwaD+HXeSgP4+H8Bo/gkTyKR/MYHsvj+E0ez2/xBH6bJ/IknsxTeCpP4+n8Ds/gmTyL3+XZ/B7P4bk8j+fzAn6fF/IiXswf8BL+kJfyMl7OK3glr+LVvIbX8jpezxt4I2/izbyFt/JHvI238w7eybt4N+/hj3kvf8L7+FPez5/xAf4jH+TP+RB/wYf5Sz7CX/FR/pqP8Td8nL/lE3yST/F3fJq/5zN8ls/xD3yef+QL/BNf5MAQY6xiHZs4itPF6eOUOEOcMb4qzhRfHWeOs8SJ+Jo4a3xtnC2+Ls4e54hzxrni3HGeOG9sY4pdzHEc54vzx8n4+rhAfENcMC4UF46LxD4uGheLb4yLxzfFJeKb45LxLXGp+NYYUsvED91bLr4tLh/fHleIK8aV4jviyvGdcZW4anxXXC2+O64e3xPXiO+NS8T3xbXi++Pa8R/iOvEDcd34wbhe/FBcP344bhA3jBvFjeMm8SNx0/jRuFncPG4RPxa3jB+PW8VPxK3jJ+M28VO/+3hq3D3uEb8YvxiHcI/65T4xuTC5KLk4+UFySfLD5NLksuTy5IrkyuSq5OrkmuTa5Lrk+uSG5MbkpuTm5JZkCFXTg0evvPbGRz6dT+9TfAaf0V/lM/mrfWafxSf8NT6rv9Zn89f57D6Hz+lz+dw+j8/rrSfvPPvY5/P5fdJf7wv4G3xBX8gX9kW890V9Md/YN/FNfFP/qG/mm/sW/jH/mH/cP+6f8E/4J30b/5Rv65/27fwzvr1/1j/rn/MdfSff2T/vu/gXfFffzaf6VN/D9/A9fU/f2/f2fX1f38/38/19fz/AD/CD/CA/2A/2Q/wQP9QP9cP9cD/Cj/Cj/Cg/xo/x4/w4P96P9xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD+74Gw/x8/x8/w8v8Av8Av9Qr/YL/ZL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/hD/sv/RH/lT/qv/bH/Df+uP/Wn/An/Sn/nT/tv/dn/Fl/zv/gz/sf/QX/k7/ogx+XeDMxPvFWYkLi7cTExKTE5MSUxNTEtMT0xDuJGYmZiVmJdxOzE+8l5iTmJuYl5icWJN5PLEwsSixOfJBYkvgwsTSxLLE8sSKxMrEqEUKebXHIF/KHZLg+FAg3hIKhUCgcigQfioZi4cZQPNwUSoSbQ8lwSygVbg2lQ5lQNjwcGoSGoVFoHJqER0LT8GhoFpqHFuGx0DI8HlqFJ0Lr8GRoE54KbcPToV14JrQPz4YO4bnQMXQKncPzoUt4IXQN3UJq6B56hBdDz9Ar9A59Qt/wUugXXg79wythQBgYBoVXw+DwWhgSXg9Dw7AwPLwRRoSRYVQYHcaEsWFceDOMD2+FCeHtMDFMCpPDlDA1TAvTwzthRpgZZoV3w+zwXpgT5oZ5YX5YEN4PC8OisDh8EJaED8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBR2Ba2hx1hZ9gVdoc94eOwN3wS9oVPw/7wWTgQ/hgOhs/DofBFOBy+DEfCV+Fo+DocC9+E4+HbcCKcDKfCd+F0+D6cCWfDufBDOB9+DBfCT+Gi/M2aEEIIIcQ/RP/O493/xufSAcCvt0Q9AODq7bkO/3XNjdn/tO6lcrdMAMCT3To88OtRuXJqauovz12qIco/FwASf1n/13gZtIDHoTU0h+J/s79eqtN5/p36yVsAMv5ZTgpcji/Xv+m/qP/IY8MXlorPZf079ecCFMx/OScDXI4v1y/xX9TP0fR3+s/w+TiAZn+Wkwkux5frF4NH4Slo/RfPFEIIIYQQQggh/qSXKtvu9+6fL92f5zaXc9LD5fj37s+FEEIIIYQQQghx5T3TqfMTj7Ru3bzdP7bAX/YF/ntZspDFf84iwy8/Ov9X+vk3La7kbyUhhBBCCCHEv8Pli/4r3YkQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJF2/W/8O7ErfY5CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfb/AgAA//+wBDLo") r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)}, 0x5}], 0x1, 0x2000, 0x0) syz_genetlink_get_family_id$fou(0x0, r3) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x101042, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0/file0'}, 0x11) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file1\x00') fsync(0xffffffffffffffff) 349.679159ms ago: executing program 3 (id=815): syz_clone(0x86842000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r1 = open_tree(r0, &(0x7f0000000000)='./mnt\x00', 0x8801) close(r1) 125.663043ms ago: executing program 5 (id=816): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3cf, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200a05"], 0x0, 0x0, 0x0, 0x0}, 0x0) 125.450333ms ago: executing program 3 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) splice(r2, 0x0, r0, 0x0, 0xd9, 0x0) 0s ago: executing program 1 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) kernel console output (not intermixed with test programs): ] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.950746][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 64.958196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.961142][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 64.970121][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.982413][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.990771][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.001736][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.010310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.042879][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.056670][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.070783][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.082614][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.092486][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.102373][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.112592][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.122348][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.132909][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.142474][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.151393][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.162382][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.171382][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.179303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.189087][ T4186] device veth0_vlan entered promiscuous mode [ 65.225082][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.236587][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.245757][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.258076][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.267286][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.281609][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.290749][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.300440][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.309663][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.321270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.329159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.349210][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.359950][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.380293][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.393449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.404168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.412989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.422190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.431782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.441161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.451474][ T4186] device veth1_vlan entered promiscuous mode [ 65.464393][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.480868][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.495389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.505949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.513610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.619284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.639787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.649987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.659497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.679306][ T4186] device veth0_macvtap entered promiscuous mode [ 65.703176][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.718189][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.746675][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.782976][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.794594][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.816969][ T4187] device veth0_vlan entered promiscuous mode [ 65.834426][ T4186] device veth1_macvtap entered promiscuous mode [ 65.863514][ T4187] device veth1_vlan entered promiscuous mode [ 65.873719][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.891868][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.903572][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.918462][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.929514][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.956641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.967408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.976016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.988328][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.015253][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.025131][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.034055][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.044212][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.059964][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.069665][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.081949][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.091329][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.102966][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.112631][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.122168][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.131463][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.150346][ T4187] device veth0_macvtap entered promiscuous mode [ 66.163178][ T4187] device veth1_macvtap entered promiscuous mode [ 66.171147][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.180477][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.189293][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.199651][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.258389][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.268318][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.287819][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.299284][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.313391][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.334074][ T4199] device veth0_vlan entered promiscuous mode [ 66.352480][ T4197] device veth0_vlan entered promiscuous mode [ 66.361688][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.370946][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.381282][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.389849][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.399848][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.408663][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.417581][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.426051][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.434186][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.446629][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.458333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.468825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.486379][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.503775][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.521428][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.540725][ T4197] device veth1_vlan entered promiscuous mode [ 66.574302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.585803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.598759][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.609667][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.619044][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.628320][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.657742][ T4199] device veth1_vlan entered promiscuous mode [ 66.686793][ T4193] device veth0_vlan entered promiscuous mode [ 66.701748][ T4193] device veth1_vlan entered promiscuous mode [ 66.715791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.725627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.734063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.742707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.752002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.779915][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.790218][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.841632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.850616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.859675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.869037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.890429][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.892920][ T4193] device veth0_macvtap entered promiscuous mode [ 66.908566][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.915349][ T4193] device veth1_macvtap entered promiscuous mode [ 66.948652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.959725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.968482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.976924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.988224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.005660][ T4295] Bluetooth: hci4: command 0x040f tx timeout [ 67.013852][ T4197] device veth0_macvtap entered promiscuous mode [ 67.020803][ T4295] Bluetooth: hci0: command 0x040f tx timeout [ 67.027569][ T4295] Bluetooth: hci2: command 0x040f tx timeout [ 67.033971][ T4295] Bluetooth: hci1: command 0x040f tx timeout [ 67.047712][ T4295] Bluetooth: hci3: command 0x040f tx timeout [ 67.048122][ T4199] device veth0_macvtap entered promiscuous mode [ 67.063362][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.072435][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.084256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.101747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.111564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.121301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.131351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.157375][ T4197] device veth1_macvtap entered promiscuous mode [ 67.181139][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.194025][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.215605][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.236788][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.249393][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.262636][ T4199] device veth1_macvtap entered promiscuous mode [ 67.291324][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.301978][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.311675][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.316396][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.332120][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.341183][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.353218][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.371141][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.385605][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.399361][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.410067][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.420588][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.431538][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.444007][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.452731][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.467167][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.480273][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.491608][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.505990][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.531656][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.544293][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.560594][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.572674][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.584031][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.595496][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.608751][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.619395][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.631306][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.647890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.674595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.695788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.711989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.733556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.752581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.764204][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.775824][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.790363][ T4307] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9'. [ 67.802129][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.814104][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.826222][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.837469][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.848533][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.860106][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.871746][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.883842][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.895458][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.907292][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.917902][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.928272][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.940588][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.952120][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.966441][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.002741][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.012738][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.022969][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.034030][ T4307] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9'. [ 68.044587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.055761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.064849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.074037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.086343][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.095957][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.104833][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.113800][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.141747][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.151426][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.166369][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.175698][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.201461][ T4308] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9'. [ 68.215563][ T4309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9'. [ 68.554894][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.563795][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.579360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.075179][ T4295] Bluetooth: hci3: command 0x0419 tx timeout [ 69.090465][ T4295] Bluetooth: hci1: command 0x0419 tx timeout [ 69.163094][ T3087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.224932][ T3087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.232780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.241976][ T4295] Bluetooth: hci2: command 0x0419 tx timeout [ 69.261272][ T4295] Bluetooth: hci0: command 0x0419 tx timeout [ 69.281443][ T4295] Bluetooth: hci4: command 0x0419 tx timeout [ 69.352508][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.379163][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.428597][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.440750][ T4327] capability: warning: `syz.1.15' uses deprecated v2 capabilities in a way that may be insecure [ 69.468941][ T3087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.479325][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.485882][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.497678][ T3087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.515133][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.523844][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.533018][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.567901][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.589159][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.887331][ T4338] ======================================================= [ 69.887331][ T4338] WARNING: The mand mount option has been deprecated and [ 69.887331][ T4338] and is ignored by this kernel. Remove the mand [ 69.887331][ T4338] option from the mount to silence this warning. [ 69.887331][ T4338] ======================================================= [ 70.104341][ T4340] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 70.255264][ T4295] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.841476][ T4345] dummy0 speed is unknown, defaulting to 1000 [ 70.865170][ T4345] dummy0 speed is unknown, defaulting to 1000 [ 70.876239][ T4295] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 70.882398][ T4345] dummy0 speed is unknown, defaulting to 1000 [ 70.908418][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.936102][ T4345] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 70.968781][ T4295] usb 2-1: config 0 descriptor?? [ 70.980951][ T4352] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.049879][ T4345] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 71.141333][ T4345] dummy0 speed is unknown, defaulting to 1000 [ 71.166549][ T4345] dummy0 speed is unknown, defaulting to 1000 [ 71.189624][ T4345] dummy0 speed is unknown, defaulting to 1000 [ 71.232874][ T4345] dummy0 speed is unknown, defaulting to 1000 [ 71.282690][ T4345] dummy0 speed is unknown, defaulting to 1000 [ 72.165877][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.172716][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.247237][ T4295] usbhid 2-1:0.0: can't add hid device: -71 [ 72.253513][ T4295] usbhid: probe of 2-1:0.0 failed with error -71 [ 72.311048][ T4295] usb 2-1: USB disconnect, device number 2 [ 72.793520][ T4394] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.899003][ T4397] batadv0: mtu greater than device maximum [ 73.164112][ T4406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 73.175982][ T4403] loop0: detected capacity change from 0 to 256 [ 73.234255][ T4403] exfat: Deprecated parameter 'utf8' [ 73.264201][ T4403] exfat: Deprecated parameter 'utf8' [ 73.301093][ T4403] exfat: Deprecated parameter 'utf8' [ 73.324341][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.754419][ T4403] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 73.944238][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.969982][ T4414] loop2: detected capacity change from 0 to 512 [ 74.116128][ T4414] EXT4-fs (loop2): unsupported inode size: 143 [ 74.143478][ T4414] EXT4-fs (loop2): blocksize: 1024 [ 74.148744][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.197968][ T4418] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.413915][ T4426] xt_hashlimit: size too large, truncated to 1048576 [ 75.038442][ T4439] binder: 4438:4439 ioctl c0306201 2000000003c0 returned -14 [ 75.135415][ T4441] netlink: 60 bytes leftover after parsing attributes in process `syz.3.51'. [ 75.162622][ T4441] netlink: 60 bytes leftover after parsing attributes in process `syz.3.51'. [ 75.195107][ T4446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.51'. [ 75.224988][ T4295] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.228249][ T4441] netlink: 60 bytes leftover after parsing attributes in process `syz.3.51'. [ 75.308107][ T4441] netlink: 60 bytes leftover after parsing attributes in process `syz.3.51'. [ 75.748559][ T4454] kernel profiling enabled (shift: 15) [ 76.765094][ T4295] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.786095][ T4295] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.915038][ T4295] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.937217][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.954935][ T4295] usb 5-1: SerialNumber: syz [ 77.306297][ T4295] usb 5-1: 0:2 : does not exist [ 77.392765][ T4295] usb 5-1: USB disconnect, device number 2 [ 77.717948][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.050748][ T4489] loop0: detected capacity change from 0 to 512 [ 78.142008][ T4489] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.180327][ T4492] loop1: detected capacity change from 0 to 512 [ 78.407249][ T4489] EXT4-fs (loop0): 1 orphan inode deleted [ 78.411678][ T4492] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.413540][ T4489] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.413660][ T4489] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.588352][ T4492] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 21: comm syz.1.68: bad entry in directory: inode out of bounds - offset=44, inode=12, rec_len=16, size=1024 fake=0 [ 78.632419][ T4504] loop4: detected capacity change from 0 to 512 [ 78.682733][ T4504] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 78.734902][ T4504] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 78.783093][ T4504] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 78.865769][ T4504] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 78.873983][ T4504] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 78.921557][ T4504] EXT4-fs (loop4): orphan cleanup on readonly fs [ 78.943592][ T4504] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.70: bg 0: block 34: padding at end of block bitmap is not set [ 79.087975][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.102134][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.832880][ T4514] syz.3.73 (4514) used greatest stack depth: 21040 bytes left [ 79.938311][ T4518] loop0: detected capacity change from 0 to 128 [ 79.962896][ T4504] Quota error (device loop4): write_blk: dquota write failed [ 79.978876][ T4504] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 80.044860][ T4504] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.70: Failed to acquire dquot type 1 [ 80.074545][ T4504] EXT4-fs (loop4): 1 truncate cleaned up [ 80.093734][ T4504] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 82.246111][ T4543] fuse: Unknown parameter '' [ 82.253316][ T4543] overlayfs: missing 'workdir' [ 82.281132][ T23] cfg80211: failed to load regulatory.db [ 82.324659][ C0] sched: RT throttling activated [ 82.349825][ T26] audit: type=1326 audit(2000000003.900:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dde52eb9 code=0x7ffc0000 [ 82.467329][ T4544] ipt_CLUSTERIP: Please specify destination IP [ 85.407609][ T26] audit: type=1326 audit(2000000003.900:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dde52eb9 code=0x7ffc0000 [ 85.443692][ T4549] loop4: detected capacity change from 0 to 128 [ 85.926307][ T4549] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.025608][ T4549] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.121542][ T26] audit: type=1326 audit(2000000003.900:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f89dde52eb9 code=0x7ffc0000 [ 86.246472][ T4549] syz.4.84 (pid 4549) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 86.247574][ T4558] loop1: detected capacity change from 0 to 128 [ 86.263107][ T26] audit: type=1326 audit(2000000003.900:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dde52eb9 code=0x7ffc0000 [ 86.612157][ T26] audit: type=1326 audit(2000000003.900:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dde52eb9 code=0x7ffc0000 [ 87.671273][ T4549] fscrypt (loop4, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 87.984546][ T4549] fscrypt (loop4, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 88.128282][ T26] audit: type=1326 audit(2000000003.900:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f89dde52eb9 code=0x7ffc0000 [ 88.194738][ T26] audit: type=1804 audit(2000000009.510:8): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.87" name="/newroot/27/bus/bus" dev="loop1" ino=1048590 res=1 errno=0 [ 88.350132][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 88.569704][ T4593] loop3: detected capacity change from 0 to 512 [ 88.633610][ T4593] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 89.166369][ T4593] EXT4-fs (loop3): 1 truncate cleaned up [ 89.191964][ T4593] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,noload,data_err=abort,noload,data_err=ignore,auto_da_alloc,,errors=continue. Quota mode: none. [ 89.401869][ T4609] loop0: detected capacity change from 0 to 256 [ 89.418619][ T4593] overlayfs: upper fs needs to support d_type. [ 89.465512][ T4609] exfat: Deprecated parameter 'utf8' [ 89.497211][ T4187] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 89.536006][ T4609] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 89.595909][ T4187] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 89.652510][ T4187] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 90.185645][ T4618] loop4: detected capacity change from 0 to 512 [ 90.198802][ T4623] loop3: detected capacity change from 0 to 256 [ 90.241273][ T4618] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 90.248018][ T4618] EXT4-fs (loop4): mount failed [ 90.304075][ T4623] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 90.420963][ T26] audit: type=1800 audit(2000000000.190:9): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.101" name="file1" dev="loop3" ino=1048597 res=0 errno=0 [ 90.510430][ T4628] loop1: detected capacity change from 0 to 512 [ 90.568542][ T4630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 91.668644][ T4628] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.687255][ T3056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.699761][ T4628] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.905870][ T3056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.030802][ T3056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.711953][ T4656] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 94.364532][ T4655] loop2: detected capacity change from 0 to 8 [ 94.667902][ T4658] 9pnet: Insufficient options for proto=fd [ 94.984460][ T4652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.113'. [ 95.057229][ T4655] SQUASHFS error: zlib decompression failed, data probably corrupt [ 95.066191][ T4655] SQUASHFS error: Failed to read block 0x9b: -5 [ 95.072474][ T4655] SQUASHFS error: Unable to read metadata cache entry [99] [ 95.079889][ T4655] SQUASHFS error: Unable to read inode 0x127 [ 95.143460][ T3056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.307302][ T4663] process 'syz.4.117' launched './file1' with NULL argv: empty string added [ 95.651128][ T4671] loop1: detected capacity change from 0 to 512 [ 95.992374][ T4671] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 95.999191][ T4671] EXT4-fs (loop1): mount failed [ 96.217597][ T4672] dummy0 speed is unknown, defaulting to 1000 [ 96.288539][ T4679] loop1: detected capacity change from 0 to 256 [ 96.306442][ T4679] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.342591][ T4679] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 96.417113][ T4679] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc6d768d4, utbl_chksum : 0xe619d30d) [ 96.824268][ T4692] loop4: detected capacity change from 0 to 256 [ 97.665250][ T4696] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 97.722638][ T4672] chnl_net:caif_netlink_parms(): no params data found [ 97.731536][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 98.235831][ T4702] dummy0 speed is unknown, defaulting to 1000 [ 98.278617][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.302105][ T4672] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.345036][ T4672] device bridge_slave_0 entered promiscuous mode [ 98.414826][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.430109][ T4672] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.463818][ T4672] device bridge_slave_1 entered promiscuous mode [ 98.612676][ T4672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.679640][ T4672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.719141][ T4723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.128'. [ 98.837514][ T4672] team0: Port device team_slave_0 added [ 98.897094][ T4672] team0: Port device team_slave_1 added [ 98.974038][ T4672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.462384][ T4735] loop2: detected capacity change from 0 to 8 [ 99.763684][ T4672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.795370][ T4540] Bluetooth: hci3: command 0x041b tx timeout [ 99.918936][ T4672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.926625][ T4735] SQUASHFS error: zlib decompression failed, data probably corrupt [ 99.938975][ T4735] SQUASHFS error: Failed to read block 0x9b: -5 [ 99.945640][ T4735] SQUASHFS error: Unable to read metadata cache entry [99] [ 99.953073][ T4735] SQUASHFS error: Unable to read inode 0x127 [ 100.000701][ T4699] loop1: detected capacity change from 0 to 40427 [ 100.119352][ T4672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.149891][ T4672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.179115][ T4699] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 100.194421][ T4699] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 100.282714][ T4672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.444446][ T4699] F2FS-fs (loop1): invalid crc value [ 100.487517][ T4699] F2FS-fs (loop1): Found nat_bits in checkpoint [ 100.562048][ T4672] device hsr_slave_0 entered promiscuous mode [ 100.662671][ T4672] device hsr_slave_1 entered promiscuous mode [ 100.684856][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.714024][ T4672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.755850][ T4672] Cannot create hsr debugfs directory [ 100.885635][ T4756] loop3: detected capacity change from 0 to 16 [ 100.956200][ T4756] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0xde366481, 0xc32427af expected [ 101.834969][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 101.882649][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 101.955170][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.996947][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.050855][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 102.145219][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.215796][ T4772] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.341836][ T4775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.138'. [ 104.115250][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 104.205966][ T3056] device hsr_slave_0 left promiscuous mode [ 104.218201][ T7] usb 3-1: config 0 descriptor?? [ 104.240921][ T7] usb 3-1: can't set config #0, error -71 [ 104.256879][ T7] usb 3-1: USB disconnect, device number 2 [ 104.264127][ T3056] device hsr_slave_1 left promiscuous mode [ 104.326316][ T3056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.333860][ T3056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.351943][ T4780] loop3: detected capacity change from 0 to 1024 [ 104.383403][ T3056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.394539][ T3056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.414598][ T3056] device bridge_slave_1 left promiscuous mode [ 104.422655][ T3056] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.463802][ T4780] EXT4-fs (loop3): Ignoring removed nobh option [ 104.488637][ T3056] device bridge_slave_0 left promiscuous mode [ 104.495169][ T4780] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.525791][ T3056] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.603949][ T4780] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none. [ 104.633073][ T3056] device veth1_macvtap left promiscuous mode [ 104.647351][ T3056] device veth0_macvtap left promiscuous mode [ 104.660390][ T3056] device veth1_vlan left promiscuous mode [ 104.679159][ T3056] device veth0_vlan left promiscuous mode [ 106.523904][ T3056] team0 (unregistering): Port device team_slave_1 removed [ 106.541008][ T3056] team0 (unregistering): Port device team_slave_0 removed [ 106.560251][ T3056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.605126][ T3056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.288535][ T3056] bond0 (unregistering): Released all slaves [ 108.982005][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.141'. [ 109.308575][ T7] dummy0 speed is unknown, defaulting to 1000 [ 109.621537][ T4826] Zero length message leads to an empty skb [ 109.648419][ T4830] netlink: 32 bytes leftover after parsing attributes in process `syz.4.149'. [ 109.781702][ T4833] loop3: detected capacity change from 0 to 512 [ 109.892177][ T4833] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 109.899005][ T4833] EXT4-fs (loop3): mount failed [ 110.029754][ T4672] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.079248][ T4838] loop1: detected capacity change from 0 to 1024 [ 110.098000][ T4672] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.187151][ T4672] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.201116][ T4672] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.281198][ T4838] EXT4-fs (loop1): Ignoring removed bh option [ 110.308223][ T4844] loop4: detected capacity change from 0 to 512 [ 110.317250][ T4838] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.459866][ T4857] loop3: detected capacity change from 0 to 16 [ 110.470399][ T4844] EXT4-fs (loop4): Ignoring removed orlov option [ 110.485989][ T4844] EXT4-fs (loop4): Test dummy encryption mode enabled [ 110.563921][ T4857] erofs: (device loop3): mounted with root inode @ nid 36. [ 110.572255][ T4844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.592278][ T4838] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,stripe=0x0000000000000009,dioread_nolock,,errors=continue. Quota mode: writeback. [ 110.639885][ T4844] EXT4-fs (loop4): 1 truncate cleaned up [ 110.659015][ T4857] attempt to access beyond end of device [ 110.659015][ T4857] loop3: rw=524288, want=32, limit=16 [ 110.661671][ T4844] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 110.706798][ T4672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.790270][ T4857] erofs: (device loop3): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 110.802849][ T4857] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 110.805190][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.813673][ T4857] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 110.841600][ T4857] attempt to access beyond end of device [ 110.841600][ T4857] loop3: rw=524288, want=56, limit=16 [ 110.868503][ T4857] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 110.907193][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.937331][ T4672] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.943580][ T26] audit: type=1800 audit(2000000000.280:10): pid=4857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.156" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 110.981912][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.007655][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.065005][ T4578] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.072128][ T4578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.132368][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.140749][ T4857] syz.3.156 (4857) used greatest stack depth: 19984 bytes left [ 111.211002][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.286424][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.323229][ T4578] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.326572][ T4874] loop4: detected capacity change from 0 to 512 [ 111.330436][ T4578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.350258][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.362995][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.373054][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.474495][ T4874] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 111.474913][ T4874] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.480581][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.538413][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.540099][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.540959][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.541677][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.542229][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.542817][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.569489][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.712217][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.819696][ T4899] loop2: detected capacity change from 0 to 8 [ 113.330039][ T4899] SQUASHFS error: zlib decompression failed, data probably corrupt [ 113.338376][ T4899] SQUASHFS error: Failed to read block 0x9b: -5 [ 113.345011][ T4899] SQUASHFS error: Unable to read metadata cache entry [99] [ 113.352244][ T4899] SQUASHFS error: Unable to read inode 0x127 [ 113.753614][ T4909] netlink: 32 bytes leftover after parsing attributes in process `syz.4.163'. [ 113.979062][ T4912] loop3: detected capacity change from 0 to 512 [ 114.242691][ T4912] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 114.249758][ T4912] EXT4-fs (loop3): mount failed [ 114.738109][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.784899][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.795818][ T4672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.383474][ T4933] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 116.454840][ T4241] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 116.468013][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.502294][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.589602][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.608743][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.645217][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.701822][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.732391][ T4672] device veth0_vlan entered promiscuous mode [ 116.782404][ T4672] device veth1_vlan entered promiscuous mode [ 116.850600][ T4949] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 116.887299][ T4949] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 116.974870][ T4241] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 116.984544][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.993335][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.023159][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.043052][ T4241] usb 4-1: Product: syz [ 117.060060][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.075009][ T4241] usb 4-1: Manufacturer: syz [ 117.112816][ T4241] usb 4-1: SerialNumber: syz [ 117.118033][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.136715][ T4672] device veth0_macvtap entered promiscuous mode [ 117.146813][ T4241] r8152-cfgselector 4-1: config 0 descriptor?? [ 117.329623][ T4672] device veth1_macvtap entered promiscuous mode [ 117.506707][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.568292][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.646947][ T4959] loop4: detected capacity change from 0 to 1024 [ 117.898884][ T4672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.940336][ T4672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.013482][ T4672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.066789][ T4672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.101165][ T4672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.146712][ T4672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.286501][ T4971] loop2: detected capacity change from 0 to 8 [ 119.549460][ T4672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.758262][ T4672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.977145][ T4241] r8152-cfgselector 4-1: Unknown version 0x0000 [ 120.005038][ T4241] r8152-cfgselector 4-1: Unknown version 0x0000 [ 120.019356][ T4971] SQUASHFS error: zlib decompression failed, data probably corrupt [ 120.019747][ T4672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.027489][ T4971] SQUASHFS error: Failed to read block 0x9b: -5 [ 120.027508][ T4971] SQUASHFS error: Unable to read metadata cache entry [99] [ 120.027523][ T4971] SQUASHFS error: Unable to read inode 0x127 [ 120.079827][ T4241] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 120.090105][ T4959] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.127050][ T4977] netlink: 32 bytes leftover after parsing attributes in process `syz.3.178'. [ 120.138437][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.215908][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.235984][ T4959] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3887: comm syz.4.174: Allocating blocks 385-513 which overlap fs metadata [ 120.337891][ T4672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.412883][ T4672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.483926][ T4672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.501297][ T4987] loop2: detected capacity change from 0 to 512 [ 120.523751][ T4959] EXT4-fs (loop4): pa ffff8880742440e0: logic 16, phys. 129, len 24 [ 120.532747][ T4959] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 8 [ 120.551017][ T4989] loop3: detected capacity change from 0 to 128 [ 120.565187][ T4672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.582792][ T4672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.593851][ T4672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.615995][ T4672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.633440][ T4672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.675271][ T4672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.684821][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.708523][ T4989] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 120.742598][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.783180][ T4987] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 120.790512][ T4987] EXT4-fs (loop2): mount failed [ 120.810367][ T4672] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.854751][ T4672] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.907574][ T4672] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.920739][ T4996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 120.940494][ T4672] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.353543][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.388761][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.420185][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.431134][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.496424][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.527098][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.945014][ T4974] loop1: detected capacity change from 0 to 40427 [ 122.160242][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 122.178132][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 122.280510][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 122.382925][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 122.832671][ T5019] loop4: detected capacity change from 0 to 512 [ 122.874842][ T4989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.180'. [ 122.945969][ T5019] EXT4-fs warning (device loop4): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 123.389051][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 123.494684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 123.593876][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 125.367847][ T5035] fuse: Unknown parameter '‘d}' [ 125.377375][ T5035] loop3: detected capacity change from 0 to 128 [ 125.436845][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 125.446093][ T5035] FAT-fs (loop3): Unrecognized mount option "gid=0x0000000000000000ÿÿÿÿÿÿÿÿ[mem 0x23fff8000-0x23fffcfff] [ 125.446093][ T5035] <6>[ 0.115377][ T0] Zone ranges: [ 125.446093][ T5035] <6>[ 0.116146][ T0] DMA [mem 0x0000000000001" or missing value [ 125.469505][ T5038] netlink: 32 bytes leftover after parsing attributes in process `syz.4.189'. [ 125.518163][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.190'. [ 125.864772][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 125.877920][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 125.955546][ T5048] loop1: detected capacity change from 0 to 512 [ 126.022604][ T5054] loop2: detected capacity change from 0 to 1024 [ 126.049154][ T5048] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 126.055969][ T5048] EXT4-fs (loop1): mount failed [ 126.574711][ T4540] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.620969][ T5054] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.723213][ T5066] loop5: detected capacity change from 0 to 4096 [ 126.841530][ T5066] EXT4-fs (loop5): inline encryption not supported [ 126.873855][ T5066] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,delalloc,inlinecrypt,user_xattr,nodelalloc,errors=continue,mb_optimize_scan=0x0000000000000001,barrier,,errors=continue. Quota mode: writeback. [ 126.954839][ T4540] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 126.964762][ T4540] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 126.994801][ T4540] usb 5-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 127.014696][ T4540] usb 5-1: config 220 has no interface number 2 [ 127.021266][ T4540] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 127.035188][ T4540] usb 5-1: config 220 interface 0 has no altsetting 0 [ 127.042047][ T4540] usb 5-1: config 220 interface 76 has no altsetting 0 [ 127.059873][ T4540] usb 5-1: config 220 interface 1 has no altsetting 0 [ 127.174338][ T26] audit: type=1804 audit(2000000003.270:11): pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.195" name="/newroot/2/file0/file0/file0" dev="loop5" ino=13 res=1 errno=0 [ 128.054857][ T4540] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 128.071396][ T4540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.115291][ T4540] usb 5-1: Product: syz [ 128.120046][ T4540] usb 5-1: Manufacturer: syz [ 128.260324][ T4540] usb 5-1: SerialNumber: syz [ 128.380811][ T5087] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 128.661417][ T4540] usb 5-1: selecting invalid altsetting 0 [ 128.711997][ T4540] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 128.776673][ T4540] usb 5-1: No valid video chain found. [ 129.043232][ T4540] usb 5-1: selecting invalid altsetting 0 [ 129.059270][ T4540] usbtest: probe of 5-1:220.1 failed with error -22 [ 129.186740][ T4540] usb 5-1: USB disconnect, device number 3 [ 129.267911][ T5095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.203'. [ 129.394336][ T5104] loop1: detected capacity change from 0 to 8 [ 131.821342][ T5104] SQUASHFS error: zlib decompression failed, data probably corrupt [ 131.829353][ T5104] SQUASHFS error: Failed to read block 0x9b: -5 [ 131.835628][ T5104] SQUASHFS error: Unable to read metadata cache entry [99] [ 131.842910][ T5104] SQUASHFS error: Unable to read inode 0x127 [ 131.855736][ T5110] loop5: detected capacity change from 0 to 256 [ 132.024996][ T5115] loop3: detected capacity change from 0 to 16 [ 134.181097][ T5115] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 134.236357][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.245162][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.349752][ T5115] erofs: (device loop3): erofs_read_superblock: blkszbits 0 isn't supported on this platform [ 135.282946][ T5129] loop1: detected capacity change from 0 to 512 [ 135.709799][ T5129] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.210: bg 0: block 248: padding at end of block bitmap is not set [ 135.823565][ T5140] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 136.645669][ T5129] Quota error (device loop1): write_blk: dquota write failed [ 137.089792][ T5129] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 137.316575][ T5129] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.210: Failed to acquire dquot type 1 [ 137.465880][ T5146] loop2: detected capacity change from 0 to 512 [ 137.566473][ T5129] EXT4-fs (loop1): 1 truncate cleaned up [ 137.572271][ T5129] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.660446][ T5152] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 137.681712][ T5129] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.127991][ T5146] EXT4-fs (loop2): Ignoring removed orlov option [ 138.402545][ T5146] EXT4-fs (loop2): Test dummy encryption mode enabled [ 138.409730][ T5146] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.437728][ T5146] EXT4-fs (loop2): 1 truncate cleaned up [ 138.454785][ T5146] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 138.640336][ T5159] netlink: 32 bytes leftover after parsing attributes in process `syz.4.216'. [ 138.687759][ T5164] loop5: detected capacity change from 0 to 256 [ 139.064334][ T5164] FAT-fs (loop5): Directory bread(block 64) failed [ 139.118314][ T5173] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 139.266368][ T5164] FAT-fs (loop5): Directory bread(block 65) failed [ 139.316426][ T5164] FAT-fs (loop5): Directory bread(block 66) failed [ 139.368741][ T5164] FAT-fs (loop5): Directory bread(block 67) failed [ 140.320715][ T5164] FAT-fs (loop5): Directory bread(block 68) failed [ 140.368694][ T5164] FAT-fs (loop5): Directory bread(block 69) failed [ 140.414868][ T5164] FAT-fs (loop5): Directory bread(block 70) failed [ 140.565167][ T5164] FAT-fs (loop5): Directory bread(block 71) failed [ 140.759834][ T5164] FAT-fs (loop5): Directory bread(block 72) failed [ 140.766692][ T5164] FAT-fs (loop5): Directory bread(block 73) failed [ 140.904940][ T5187] netlink: 'syz.1.221': attribute type 4 has an invalid length. [ 141.707711][ T5204] loop4: detected capacity change from 0 to 128 [ 141.948979][ T5204] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 141.957660][ T5204] FAT-fs (loop4): Filesystem has been set read-only [ 142.148789][ T5218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.230'. [ 142.181419][ T5217] loop5: detected capacity change from 0 to 512 [ 142.469268][ T5220] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 142.485721][ T5217] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.651324][ T5217] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 142.759823][ T5232] loop1: detected capacity change from 0 to 8 [ 143.372516][ T5232] SQUASHFS error: zlib decompression failed, data probably corrupt [ 143.381904][ T5232] SQUASHFS error: Failed to read block 0x9b: -5 [ 143.388382][ T5232] SQUASHFS error: Unable to read metadata cache entry [99] [ 143.395711][ T5232] SQUASHFS error: Unable to read inode 0x127 [ 143.635437][ T5217] EXT4-fs (loop5): 1 truncate cleaned up [ 143.653192][ T5217] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 143.914967][ T5239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 144.148494][ T5236] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 144.443142][ T5204] syz.4.224 (5204) used greatest stack depth: 18512 bytes left [ 145.180048][ T5249] netlink: 28 bytes leftover after parsing attributes in process `syz.5.236'. [ 145.514873][ T5249] netlink: 28 bytes leftover after parsing attributes in process `syz.5.236'. [ 146.004258][ T5265] netlink: 32 bytes leftover after parsing attributes in process `syz.5.242'. [ 146.300892][ T5273] loop2: detected capacity change from 0 to 512 [ 147.312250][ T5273] EXT4-fs (loop2): Ignoring removed orlov option [ 147.374809][ T5273] EXT4-fs (loop2): Test dummy encryption mode enabled [ 147.381653][ T5273] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.607500][ T5285] fuse: Bad value for 'fd' [ 147.608079][ T5273] EXT4-fs (loop2): 1 truncate cleaned up [ 147.625064][ T5273] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 149.741066][ T4199] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 150.897467][ T5327] netlink: 32 bytes leftover after parsing attributes in process `syz.1.254'. [ 151.164789][ T5336] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 151.395012][ T4540] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 152.164981][ T4540] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.216954][ T4540] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.274778][ T4540] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 152.325767][ T5307] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 152.362885][ T4540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.449364][ T4540] usb 5-1: config 0 descriptor?? [ 152.993359][ T4540] kovaplus 0003:1E7D:2D50.0001: item fetching failed at offset 5/7 [ 153.026336][ T4540] kovaplus 0003:1E7D:2D50.0001: parse failed [ 153.043212][ T4540] kovaplus: probe of 0003:1E7D:2D50.0001 failed with error -22 [ 153.188851][ T4540] usb 5-1: USB disconnect, device number 4 [ 153.658253][ T5381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.267'. [ 154.997152][ T5391] loop4: detected capacity change from 0 to 16 [ 155.212142][ T5391] erofs: (device loop4): mounted with root inode @ nid 36. [ 155.637428][ T5363] loop2: detected capacity change from 0 to 40427 [ 155.764550][ T5363] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 155.785461][ T5363] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 155.825794][ T5363] F2FS-fs (loop2): invalid crc value [ 155.883975][ T5363] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 156.854491][ T5408] loop4: detected capacity change from 0 to 256 [ 156.985124][ T5408] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.046717][ T5408] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.289366][ T5419] loop1: detected capacity change from 0 to 1024 [ 157.371152][ T5419] EXT4-fs (loop1): Ignoring removed bh option [ 157.389514][ T5419] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.563932][ T5419] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,stripe=0x0000000000000009,dioread_nolock,,errors=continue. Quota mode: writeback. [ 157.731696][ T5430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.279'. [ 163.032518][ T5483] netlink: 48 bytes leftover after parsing attributes in process `syz.5.291'. [ 163.199431][ T5490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.684887][ T5498] tmpfs: Bad value for 'huge' [ 169.304722][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 170.655109][ T7] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 171.327031][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.346643][ T7] usb 3-1: config 0 descriptor?? [ 171.634847][ T7] usb 3-1: can't set config #0, error -71 [ 171.653946][ T7] usb 3-1: USB disconnect, device number 3 [ 172.089641][ T5563] loop4: detected capacity change from 0 to 2048 [ 172.201521][ T5563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.038812][ T5595] netlink: 'syz.1.317': attribute type 13 has an invalid length. [ 174.765303][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.824406][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.849574][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.988820][ T5600] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 175.695742][ T5627] loop2: detected capacity change from 0 to 8 [ 176.044664][ T5627] SQUASHFS error: zlib decompression failed, data probably corrupt [ 176.053284][ T5627] SQUASHFS error: Failed to read block 0x9b: -5 [ 176.058077][ T5621] loop3: detected capacity change from 0 to 4096 [ 176.059735][ T5627] SQUASHFS error: Unable to read metadata cache entry [99] [ 176.073422][ T5627] SQUASHFS error: Unable to read inode 0x127 [ 176.284013][ T5621] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 176.464855][ T1325] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 176.654076][ T5641] netlink: 32 bytes leftover after parsing attributes in process `syz.5.325'. [ 177.385016][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.423054][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.463754][ T1325] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 177.592442][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.621635][ T1325] usb 2-1: config 0 descriptor?? [ 179.013844][ T1325] hid-led 0003:1D34:0004.0002: item fetching failed at offset 3/5 [ 179.126056][ T1325] hid-led: probe of 0003:1D34:0004.0002 failed with error -22 [ 180.051409][ T1325] usb 2-1: USB disconnect, device number 3 [ 181.885734][ T4267] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 182.344956][ T4267] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 182.384819][ T4267] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 182.474186][ T4267] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.891506][ T4267] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.900778][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.909623][ T4267] usb 4-1: Product: syz [ 182.913817][ T4267] usb 4-1: Manufacturer: syz [ 182.918993][ T4267] usb 4-1: SerialNumber: syz [ 185.558179][ T5707] netlink: 32 bytes leftover after parsing attributes in process `syz.5.338'. [ 186.375376][ T4267] usb 4-1: 0:2 : does not exist [ 186.483284][ T4267] usb 4-1: USB disconnect, device number 3 [ 186.928220][ T5720] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 187.458353][ T5723] loop1: detected capacity change from 0 to 256 [ 188.195363][ T4320] Bluetooth: hci1: command 0x0406 tx timeout [ 188.259702][ T4320] Bluetooth: hci2: command 0x0406 tx timeout [ 188.623309][ T4320] Bluetooth: hci0: command 0x0406 tx timeout [ 190.493349][ T5761] netlink: 32 bytes leftover after parsing attributes in process `syz.2.353'. [ 191.052601][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.470294][ T5774] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 191.609175][ T5777] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 192.626892][ T5785] loop3: detected capacity change from 0 to 128 [ 192.748533][ T5785] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.865578][ T5781] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 193.942998][ T5781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.001481][ T5781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.259306][ T5802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.363141][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.370735][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.526011][ T5808] loop2: detected capacity change from 0 to 512 [ 194.727806][ T5808] EXT4-fs warning (device loop2): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 200.189051][ T5834] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 200.606534][ T5838] tmpfs: Bad value for 'huge' [ 201.660169][ T5846] loop4: detected capacity change from 0 to 2048 [ 202.219384][ T5856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.415353][ T5846] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 202.823117][ T5846] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 202.937487][ T5846] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 202.951861][ T5846] EXT4-fs (loop4): This should not happen!! Data will be lost [ 202.951861][ T5846] [ 203.152253][ T5846] EXT4-fs (loop4): Total free blocks count 0 [ 203.160065][ T5846] EXT4-fs (loop4): Free/Dirty block details [ 203.166781][ T5846] EXT4-fs (loop4): free_blocks=2415919504 [ 203.172745][ T5846] EXT4-fs (loop4): dirty_blocks=192 [ 203.194945][ T5846] EXT4-fs (loop4): Block reservation details [ 203.201639][ T5846] EXT4-fs (loop4): i_reserved_data_blocks=12 [ 203.278947][ T5871] overlayfs: failed to clone lowerpath [ 205.573194][ T5902] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 208.265829][ T5920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 208.560803][ T5926] overlayfs: overlapping lowerdir path [ 208.725227][ T5927] overlayfs: overlapping lowerdir path [ 209.528614][ T5925] device ip6gre1 entered promiscuous mode [ 209.732455][ T5938] tmpfs: Bad value for 'huge' [ 211.188186][ T5944] loop1: detected capacity change from 0 to 256 [ 211.229890][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 211.290288][ T5945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.400'. [ 211.408602][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.402'. [ 211.826853][ T5952] mmap: syz.4.403 (5952) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 212.310345][ T1325] Bluetooth: hci4: command 0x0406 tx timeout [ 213.172585][ T5944] FAT-fs (loop1): Directory bread(block 64) failed [ 213.443196][ T5944] FAT-fs (loop1): Directory bread(block 65) failed [ 213.663281][ T5944] FAT-fs (loop1): Directory bread(block 66) failed [ 213.724020][ T5944] FAT-fs (loop1): Directory bread(block 67) failed [ 213.760528][ T5944] FAT-fs (loop1): Directory bread(block 68) failed [ 213.834958][ T5944] FAT-fs (loop1): Directory bread(block 69) failed [ 213.845103][ T5944] FAT-fs (loop1): Directory bread(block 70) failed [ 213.855210][ T5944] FAT-fs (loop1): Directory bread(block 71) failed [ 213.861889][ T5944] FAT-fs (loop1): Directory bread(block 72) failed [ 213.884797][ T5944] FAT-fs (loop1): Directory bread(block 73) failed [ 214.313216][ T5971] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.745711][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'. [ 219.809210][ T6018] netlink: 32 bytes leftover after parsing attributes in process `syz.2.425'. [ 219.840381][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.425'. [ 220.306560][ T6019] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 220.403634][ T6019] loop1: detected capacity change from 0 to 1024 [ 220.983708][ T6019] EXT4-fs (loop1): Test dummy encryption mode enabled [ 221.020318][ T6019] EXT4-fs (loop1): inline encryption not supported [ 222.143488][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 222.175235][ T6019] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 224.061676][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 225.387117][ T6073] loop4: detected capacity change from 0 to 8 [ 225.595244][ T6073] SQUASHFS error: zlib decompression failed, data probably corrupt [ 225.603662][ T6073] SQUASHFS error: Failed to read block 0x9b: -5 [ 225.610095][ T6073] SQUASHFS error: Unable to read metadata cache entry [99] [ 225.617402][ T6073] SQUASHFS error: Unable to read inode 0x127 [ 226.219639][ T6082] loop2: detected capacity change from 0 to 512 [ 226.709551][ T6082] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 226.756719][ T6082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 226.767485][ T6082] System zones: 1-12 [ 226.780858][ T6082] EXT4-fs (loop2): orphan cleanup on readonly fs [ 226.793778][ T6082] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.440: invalid indirect mapped block 2 (level 2) [ 226.876378][ T6082] EXT4-fs (loop2): Remounting filesystem read-only [ 226.895618][ T6082] EXT4-fs (loop2): 1 truncate cleaned up [ 226.901426][ T6082] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback. [ 227.468647][ T6082] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #2: block 5: comm syz.2.440: lblock 0 mapped to illegal pblock 5 (length 1) [ 227.806065][ T6082] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.440: error -117 reading directory block [ 227.965055][ T6108] loop3: detected capacity change from 0 to 512 [ 228.044997][ T6108] EXT4-fs warning (device loop3): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 229.215865][ T6125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.451'. [ 229.271658][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.451'. [ 229.358807][ T6128] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 229.658764][ T6131] loop2: detected capacity change from 0 to 512 [ 229.761016][ T6131] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 229.839065][ T6131] EXT4-fs (loop2): 1 truncate cleaned up [ 229.859103][ T6131] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noload,data_err=abort,noload,data_err=ignore,auto_da_alloc,,errors=continue. Quota mode: none. [ 230.203480][ T6137] loop3: detected capacity change from 0 to 1024 [ 230.275574][ T6135] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.454: Allocating blocks 193-194 which overlap fs metadata [ 230.288204][ T6137] EXT4-fs (loop3): Ignoring removed nobh option [ 230.320555][ T6137] EXT4-fs (loop3): inline encryption not supported [ 230.342723][ T6135] EXT4-fs (loop2): pa ffff888074244000: logic 206, phys. 193, len 16 [ 230.351370][ T6135] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4904: group 0, free 15, pa_free 16 [ 230.373706][ T6137] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 230.373706][ T6137] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 230.373706][ T6137] [ 230.385546][ T6124] loop1: detected capacity change from 0 to 40427 [ 230.445571][ T6135] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #18: comm syz.2.454: invalid indirect mapped block 255 (level 0) [ 230.496875][ T6124] F2FS-fs (loop1): build fault injection attr: rate: 174, type: 0x1ffff [ 230.521614][ T6137] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,journal_ioprio=0x0000000000000006,resgid=0x000000000000ee00,inlinecrypt,abort,nodioread_nolock,noquota,noacl,nobarrier,,errors=continue. Quota mode: none. [ 230.550818][ T6131] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.454: corrupted xattr entries [ 230.731047][ T6137] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.820415][ T4193] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 48454 (inode size 256) [ 230.921777][ T4193] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 48454 (inode size 256) [ 234.080784][ T6166] loop4: detected capacity change from 0 to 512 [ 234.346426][ T6166] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 234.420601][ T6169] overlayfs: failed to clone lowerpath [ 234.873020][ T6161] chnl_net:caif_netlink_parms(): no params data found [ 235.222806][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.233815][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.248064][ T6161] device bridge_slave_0 entered promiscuous mode [ 235.262423][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.272595][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.298473][ T6161] device bridge_slave_1 entered promiscuous mode [ 235.331436][ T6186] loop4: detected capacity change from 0 to 1024 [ 235.502946][ T6161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.525199][ T6161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.582491][ T6191] netlink: 32 bytes leftover after parsing attributes in process `syz.1.472'. [ 235.803783][ T6186] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.404526][ T4251] Bluetooth: hci2: command 0x0409 tx timeout [ 236.538972][ T6186] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3887: comm syz.4.470: Allocating blocks 385-513 which overlap fs metadata [ 236.560633][ T6161] team0: Port device team_slave_0 added [ 236.615727][ T6201] EXT4-fs (loop4): pa ffff888062dac460: logic 16, phys. 129, len 24 [ 236.623928][ T6201] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 8 [ 236.663328][ T6161] team0: Port device team_slave_1 added [ 236.740748][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.760220][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.926750][ T6161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.992047][ T6212] overlayfs: failed to clone lowerpath [ 237.012145][ T6212] overlayfs: failed to clone lowerpath [ 237.127936][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.140149][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.168470][ T6161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.188288][ T6216] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 237.247183][ T6161] device hsr_slave_0 entered promiscuous mode [ 237.279650][ T6161] device hsr_slave_1 entered promiscuous mode [ 237.295425][ T6161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.311741][ T6161] Cannot create hsr debugfs directory [ 237.318822][ T6220] loop4: detected capacity change from 0 to 256 [ 237.382008][ T6220] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 237.415962][ T6220] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 237.686193][ T6161] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.787219][ T6225] loop4: detected capacity change from 0 to 512 [ 237.806789][ T6225] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.848688][ T6161] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.913734][ T6161] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 238.182083][ T6161] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 238.186375][ T6225] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 238.258988][ T6233] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 238.337620][ T6233] FAT-fs (loop4): Filesystem has been set read-only [ 238.383464][ T6225] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 238.599516][ T4251] Bluetooth: hci2: command 0x041b tx timeout [ 239.099292][ T6161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.157384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.336975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.627427][ T6161] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.864006][ T6252] loop1: detected capacity change from 0 to 256 [ 239.872029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.909198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.962235][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.969737][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.010251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.045243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.064286][ T6252] FAT-fs (loop1): Directory bread(block 64) failed [ 240.067662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.074807][ T6252] FAT-fs (loop1): Directory bread(block 65) failed [ 240.098340][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.105603][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.117372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.139457][ T6252] FAT-fs (loop1): Directory bread(block 66) failed [ 240.194725][ T6252] FAT-fs (loop1): Directory bread(block 67) failed [ 240.232395][ T6252] FAT-fs (loop1): Directory bread(block 68) failed [ 240.270253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.299011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.308428][ T6252] FAT-fs (loop1): Directory bread(block 69) failed [ 240.421885][ T6265] loop4: detected capacity change from 0 to 512 [ 240.465465][ T6252] FAT-fs (loop1): Directory bread(block 70) failed [ 240.473361][ T6252] FAT-fs (loop1): Directory bread(block 71) failed [ 240.480493][ T6252] FAT-fs (loop1): Directory bread(block 72) failed [ 240.487994][ T6252] FAT-fs (loop1): Directory bread(block 73) failed [ 240.711877][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 240.762247][ T6266] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 240.922869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.933083][ T6265] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 240.939794][ T6265] EXT4-fs (loop4): mount failed [ 240.978719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.003633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.030088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.056090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.075025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.105661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.232628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.249763][ T6161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.560287][ T6273] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 241.587932][ T4578] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.767834][ T4578] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.827647][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.838732][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.860703][ T6161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.940909][ T6284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.494'. [ 242.646844][ T4578] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.705818][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 242.806136][ T4251] Bluetooth: hci2: command 0x0419 tx timeout [ 242.841746][ T4578] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.972965][ T4251] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 243.018183][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.186629][ T6297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.334714][ T4251] usb 5-1: Using ep0 maxpacket: 16 [ 243.341956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.465116][ T4251] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.532515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.563099][ T4251] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.915918][ T4251] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.104749][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.124156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.154547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.171591][ T4251] usb 5-1: Product: syz [ 244.224791][ T4251] usb 5-1: Manufacturer: syz [ 244.228298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.240249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.255023][ T4251] usb 5-1: SerialNumber: syz [ 244.265344][ T6161] device veth0_vlan entered promiscuous mode [ 244.274941][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.316343][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'. [ 244.329983][ T6161] device veth1_vlan entered promiscuous mode [ 244.442158][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.466672][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.538641][ T6161] device veth0_macvtap entered promiscuous mode [ 244.571607][ T6161] device veth1_macvtap entered promiscuous mode [ 244.608032][ T4251] usb 5-1: 0:2 : does not exist [ 244.649479][ T4251] usb 5-1: USB disconnect, device number 6 [ 244.698310][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.759454][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.770408][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.781626][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.792743][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.165173][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.245282][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.453803][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.608782][ T6326] loop3: detected capacity change from 0 to 512 [ 245.631930][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.690366][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.714319][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.756303][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.781955][ T6326] EXT4-fs warning (device loop3): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 245.799725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.820569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.980816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.050044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.202867][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.469425][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.524795][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.584783][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.709188][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.719756][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.729893][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.740597][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.752067][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.763180][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.803450][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.946169][ T6161] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.973466][ T6161] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.003867][ T6161] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.044635][ T6161] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.230858][ T6348] loop3: detected capacity change from 0 to 2048 [ 247.365599][ T6348] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.406959][ T26] audit: type=1800 audit(2000000009.010:12): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.508" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 247.415106][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.783932][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.840442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.974793][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.983493][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.195844][ T6364] netlink: 32 bytes leftover after parsing attributes in process `syz.5.505'. [ 248.244956][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 248.263515][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 248.270441][ T6369] loop1: detected capacity change from 0 to 2048 [ 248.332373][ T6373] input: syz1 as /devices/virtual/input/input5 [ 248.421574][ T4178] loop1: p1 < > p4 [ 248.463764][ T4178] loop1: p4 size 8388608 extends beyond EOD, truncated [ 248.524539][ T6369] loop1: p1 < > p4 [ 248.584855][ T6369] loop1: p4 size 8388608 extends beyond EOD, truncated [ 248.803849][ T6390] netlink: 32 bytes leftover after parsing attributes in process `syz.3.514'. [ 248.901446][ T6393] loop4: detected capacity change from 0 to 512 [ 248.915096][ T4578] device hsr_slave_0 left promiscuous mode [ 248.933871][ T4578] device hsr_slave_1 left promiscuous mode [ 248.984969][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.017006][ T6393] EXT4-fs warning (device loop4): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 249.026104][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.106769][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.110434][ T4643] udevd[4643]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 249.114471][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.224257][ T4578] device bridge_slave_1 left promiscuous mode [ 249.241042][ T4578] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.296531][ T4578] device bridge_slave_0 left promiscuous mode [ 249.310120][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 249.574606][ T4578] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.649911][ T4643] udevd[4643]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 249.807369][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 249.966097][ T4578] device veth1_macvtap left promiscuous mode [ 249.973468][ T4578] device veth0_macvtap left promiscuous mode [ 249.998020][ T4578] device veth1_vlan left promiscuous mode [ 250.004759][ T4578] device veth0_vlan left promiscuous mode [ 250.872617][ T6408] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 251.625717][ T6412] overlayfs: './file0' not a directory [ 252.338818][ T4578] team0 (unregistering): Port device team_slave_1 removed [ 252.399024][ T4578] team0 (unregistering): Port device team_slave_0 removed [ 252.431194][ T4578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.978885][ T4578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.367381][ T6421] loop3: detected capacity change from 0 to 128 [ 253.414992][ T6421] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 254.766179][ T6421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.521'. [ 254.851259][ T4578] bond0 (unregistering): Released all slaves [ 255.147007][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.158342][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.212737][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 255.427815][ T6438] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 255.971895][ T6453] netlink: 32 bytes leftover after parsing attributes in process `syz.5.528'. [ 256.073598][ T6455] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 256.955113][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.961459][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.186250][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.4.531'. [ 257.222601][ T6461] binder: 6459:6461 ioctl 4018620d 0 returned -22 [ 258.292305][ T6468] netlink: 40 bytes leftover after parsing attributes in process `syz.5.533'. [ 259.266927][ T6478] loop1: detected capacity change from 0 to 512 [ 259.351644][ T6478] EXT4-fs warning (device loop1): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 259.789752][ T6485] loop4: detected capacity change from 0 to 1024 [ 260.150337][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.539'. [ 260.198843][ T6485] EXT4-fs (loop4): Ignoring removed bh option [ 260.215676][ T6485] EXT4-fs (loop4): Ignoring removed bh option [ 260.495752][ T6485] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,i_version,bh,bh,min_batch_time=0x0000000000000007,. Quota mode: none. [ 260.554772][ T6485] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.635122][ T4320] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 261.024683][ T6506] netlink: 32 bytes leftover after parsing attributes in process `syz.6.542'. [ 261.287565][ T6510] netlink: 32 bytes leftover after parsing attributes in process `syz.1.544'. [ 261.571360][ T4320] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 261.682668][ T6518] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 262.114929][ T4320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.142105][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.904995][ T6530] loop1: detected capacity change from 0 to 128 [ 262.974386][ T6532] loop4: detected capacity change from 0 to 1024 [ 263.052943][ T4320] usb 4-1: SerialNumber: syz [ 263.096012][ T6530] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 263.113519][ T6532] EXT4-fs (loop4): Ignoring removed nobh option [ 263.134966][ T6532] EXT4-fs (loop4): inline encryption not supported [ 263.160074][ T6532] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 263.160074][ T6532] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 263.160074][ T6532] [ 263.367849][ T6532] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,journal_ioprio=0x0000000000000006,resgid=0x000000000000ee00,inlinecrypt,abort,nodioread_nolock,noquota,noacl,nobarrier,,errors=continue. Quota mode: none. [ 263.394836][ T6532] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.503665][ T6540] netlink: 32 bytes leftover after parsing attributes in process `syz.1.547'. [ 263.788353][ T4320] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 263.931438][ T4320] usb 4-1: USB disconnect, device number 4 [ 264.902119][ T6562] loop4: detected capacity change from 0 to 128 [ 264.982373][ T6562] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 265.517437][ T6577] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 265.655717][ T6583] netlink: 32 bytes leftover after parsing attributes in process `syz.6.557'. [ 266.942181][ T6589] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 268.066291][ T6611] loop3: detected capacity change from 0 to 512 [ 268.228535][ T6611] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 268.247309][ T6611] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 268.342097][ T6608] netlink: 32 bytes leftover after parsing attributes in process `syz.5.564'. [ 268.375134][ T6611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 268.383369][ T6611] System zones: 1-12 [ 268.535799][ T6611] EXT4-fs (loop3): orphan cleanup on readonly fs [ 268.564893][ T6611] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33619980: comm syz.3.566: invalid block [ 268.654908][ T6611] EXT4-fs (loop3): Remounting filesystem read-only [ 268.681191][ T6611] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.566: invalid indirect mapped block 2 (level 2) [ 268.747817][ T6611] EXT4-fs (loop3): Remounting filesystem read-only [ 268.778607][ T6611] EXT4-fs (loop3): 1 truncate cleaned up [ 268.784402][ T6611] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback. [ 268.995826][ T6640] netlink: 32 bytes leftover after parsing attributes in process `syz.5.571'. [ 269.902496][ T6651] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 270.330112][ T6652] overlayfs: failed to clone lowerpath [ 270.915759][ T6664] netlink: 48 bytes leftover after parsing attributes in process `syz.3.574'. [ 272.951151][ T6678] loop1: detected capacity change from 0 to 128 [ 273.028548][ T6678] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 273.138225][ T6686] netlink: 32 bytes leftover after parsing attributes in process `syz.3.583'. [ 273.541093][ T6697] netlink: 32 bytes leftover after parsing attributes in process `syz.1.581'. [ 274.107094][ T6701] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 274.558046][ T6702] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 274.676300][ T6705] loop4: detected capacity change from 0 to 128 [ 274.840812][ T6705] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.924774][ T6705] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 275.068832][ T6725] loop6: detected capacity change from 0 to 256 [ 275.138785][ T6725] FAT-fs (loop6): bogus logical sector size 128 [ 275.230511][ T6725] FAT-fs (loop6): Can't find a valid FAT filesystem [ 275.952701][ T6725] loop6: detected capacity change from 0 to 16 [ 276.036487][ T6725] erofs: Unknown parameter '@' [ 276.254780][ T1325] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 276.753404][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.596'. [ 276.783316][ T6740] netlink: 32 bytes leftover after parsing attributes in process `syz.5.597'. [ 276.866155][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.596'. [ 276.925172][ T1325] usb 5-1: Using ep0 maxpacket: 8 [ 277.024125][ T6746] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 277.064909][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.250195][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.270408][ T1325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 277.293420][ T1325] usb 5-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 277.303703][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.323247][ T1325] usb 5-1: config 0 descriptor?? [ 277.341208][ T6751] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 277.885877][ T6763] loop6: detected capacity change from 0 to 128 [ 279.324767][ T1325] usbhid 5-1:0.0: can't add hid device: -71 [ 279.330898][ T1325] usbhid: probe of 5-1:0.0 failed with error -71 [ 279.346889][ T1325] usb 5-1: USB disconnect, device number 7 [ 279.582839][ T6763] EXT4-fs (loop6): error: could not find journal device path: error -2 [ 279.914623][ T6779] loop4: detected capacity change from 0 to 512 [ 280.153645][ T6775] netlink: 32 bytes leftover after parsing attributes in process `syz.6.602'. [ 280.950806][ T6779] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 281.115959][ T6779] EXT4-fs error (device loop4): __ext4_iget:4912: inode #4: block 193290: comm syz.4.603: invalid block [ 281.225742][ T6779] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.603: Bad quota inode: 4, type: 1 [ 281.271848][ T6798] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 281.279648][ T6779] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 281.341405][ T6802] netlink: 32 bytes leftover after parsing attributes in process `syz.1.611'. [ 281.358027][ T6779] EXT4-fs (loop4): mount failed [ 281.557068][ T6809] netlink: 'syz.3.612': attribute type 12 has an invalid length. [ 281.880953][ T6812] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 282.245663][ T6824] loop1: detected capacity change from 0 to 256 [ 282.331382][ T6824] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 282.703896][ T6840] loop1: detected capacity change from 0 to 128 [ 282.957508][ T6840] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 283.324997][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.142388][ T6846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.620'. [ 284.758705][ T6849] overlayfs: failed to clone lowerpath [ 285.027826][ T6856] netlink: 32 bytes leftover after parsing attributes in process `syz.5.623'. [ 286.408155][ T6863] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 287.175327][ T4251] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 287.764645][ T4251] usb 4-1: Using ep0 maxpacket: 8 [ 287.965301][ T4251] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 288.008757][ T4251] usb 4-1: config 179 has no interface number 0 [ 288.054358][ T4251] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 288.744411][ T4251] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 288.756072][ T4251] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 288.768598][ T4251] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 288.780685][ T4251] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 288.971411][ T6912] overlayfs: overlapping lowerdir path [ 289.005249][ T6910] overlayfs: overlapping lowerdir path [ 289.018107][ T4251] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 289.072880][ T4251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.196336][ T6879] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 289.338930][ T6920] netlink: 32 bytes leftover after parsing attributes in process `syz.4.640'. [ 289.461540][ T6876] netlink: 112 bytes leftover after parsing attributes in process `syz.3.629'. [ 289.526415][ T6928] loop1: detected capacity change from 0 to 1024 [ 289.587429][ T6928] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 289.612635][ T6928] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 289.739434][ T6935] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 290.644670][ T4346] usb 4-1: USB disconnect, device number 5 [ 290.644691][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 290.674624][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 291.560248][ T6953] loop3: detected capacity change from 0 to 256 [ 291.698304][ T6953] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 291.732618][ T6953] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 291.748456][ T6958] overlayfs: failed to clone lowerpath [ 291.761599][ T6955] loop4: detected capacity change from 0 to 256 [ 291.777696][ T6958] overlayfs: failed to clone lowerpath [ 291.788706][ T6953] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 291.846367][ T6955] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 291.915329][ T26] audit: type=1804 audit(2000000014.360:13): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.647" name="/newroot/126/file0/file0/file1" dev="loop3" ino=1048616 res=1 errno=0 [ 291.924642][ T6955] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 292.043130][ T6955] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 292.218009][ T26] audit: type=1804 audit(2000000000.100:14): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.648" name="/newroot/124/file0/file0/file1" dev="loop4" ino=1048619 res=1 errno=0 [ 292.266424][ T6963] netlink: 32 bytes leftover after parsing attributes in process `syz.5.652'. [ 293.696246][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 293.980922][ T7001] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 294.733180][ T7003] loop1: detected capacity change from 0 to 256 [ 294.867813][ T7003] exfat: Deprecated parameter 'utf8' [ 294.957620][ T7003] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 298.687649][ T7030] netlink: 32 bytes leftover after parsing attributes in process `syz.4.670'. [ 298.981917][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 299.237288][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.675'. [ 299.564034][ T7066] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 300.516819][ T7071] loop3: detected capacity change from 0 to 256 [ 300.560910][ T7075] loop6: detected capacity change from 0 to 512 [ 300.647793][ T7079] loop4: detected capacity change from 0 to 512 [ 301.581630][ T7079] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 301.588611][ T7079] EXT4-fs (loop4): mount failed [ 301.627556][ T7089] loop1: detected capacity change from 0 to 256 [ 301.735613][ T7075] EXT4-fs warning (device loop6): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 301.873666][ T7089] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 302.615217][ T7093] overlayfs: filesystem on './file0' not supported [ 302.636336][ T7089] overlayfs: filesystem on './file0' not supported [ 302.700814][ T7097] netlink: 32 bytes leftover after parsing attributes in process `syz.5.682'. [ 303.321920][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 303.463432][ T7115] loop4: detected capacity change from 0 to 128 [ 303.724966][ T7115] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 303.841299][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.689'. [ 303.853627][ T7115] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.931553][ T7132] overlayfs: failed to clone lowerpath [ 303.949408][ T7115] ext2 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.262535][ T7163] loop4: detected capacity change from 0 to 512 [ 306.474983][ T7163] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 306.481780][ T7163] EXT4-fs (loop4): mount failed [ 307.500702][ T7175] netlink: 32 bytes leftover after parsing attributes in process `syz.4.697'. [ 307.510150][ T7177] loop1: detected capacity change from 0 to 512 [ 307.587927][ T7177] EXT4-fs warning (device loop1): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 307.987305][ T4251] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 308.195327][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.6.702'. [ 308.293982][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 308.454859][ T4251] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.481579][ T4251] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.734906][ T4251] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.757268][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.815080][ T4251] usb 5-1: Product: syz [ 308.834832][ T4251] usb 5-1: Manufacturer: syz [ 308.866319][ T4251] usb 5-1: SerialNumber: syz [ 308.931942][ T4251] cdc_ether 5-1:1.0: skipping garbage [ 308.995204][ T7220] loop6: detected capacity change from 0 to 512 [ 309.041967][ T4251] cdc_ether 5-1:1.0: invalid descriptor buffer length [ 309.188389][ T7220] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 309.195568][ T7220] EXT4-fs (loop6): mount failed [ 309.318490][ T4251] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 309.953258][ T4251] usb 5-1: USB disconnect, device number 8 [ 310.063058][ T7232] netlink: 32 bytes leftover after parsing attributes in process `syz.3.710'. [ 310.595855][ T7244] loop6: detected capacity change from 0 to 256 [ 311.612575][ T7244] loop6: detected capacity change from 0 to 4096 [ 311.711245][ T7244] EXT4-fs (loop6): Test dummy encryption mode enabled [ 311.743767][ T7244] EXT4-fs (loop6): Unrecognized mount option "seclabel" or missing value [ 311.901809][ T7257] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 312.086012][ T7252] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 312.588566][ T7270] loop4: detected capacity change from 0 to 512 [ 312.702162][ T7270] EXT4-fs warning (device loop4): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 313.013158][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.717'. [ 313.151974][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.718'. [ 313.505757][ T7295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.721'. [ 313.866372][ T7302] netlink: 32 bytes leftover after parsing attributes in process `syz.4.722'. [ 315.321772][ T7325] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 315.849680][ T7340] loop3: detected capacity change from 0 to 128 [ 315.881689][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.730'. [ 316.004033][ T7340] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 316.071745][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 317.236890][ T7353] netlink: 32 bytes leftover after parsing attributes in process `syz.3.729'. [ 317.238376][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.253784][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.429870][ T7356] netlink: 32 bytes leftover after parsing attributes in process `syz.4.733'. [ 317.525778][ T7358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.732'. [ 318.141421][ T7374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.736'. [ 319.356633][ T7390] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 319.790088][ T7394] loop3: detected capacity change from 0 to 1024 [ 319.914843][ T7394] EXT4-fs (loop3): Ignoring removed bh option [ 319.921347][ T7394] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 320.053860][ T7394] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,stripe=0x0000000000000009,dioread_nolock,,errors=continue. Quota mode: writeback. [ 320.332869][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.742'. [ 320.455773][ T7394] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3887: comm syz.3.735: Allocating blocks 497-513 which overlap fs metadata [ 320.499070][ T7409] netlink: 32 bytes leftover after parsing attributes in process `syz.6.744'. [ 320.507621][ T7394] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3887: comm syz.3.735: Allocating blocks 497-513 which overlap fs metadata [ 320.577042][ T7412] loop4: detected capacity change from 0 to 128 [ 320.652795][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.743'. [ 320.682190][ T7412] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 320.695117][ T7415] netlink: 16 bytes leftover after parsing attributes in process `syz.6.746'. [ 320.968235][ T7393] EXT4-fs (loop3): pa ffff888062dac9a0: logic 256, phys. 401, len 7 [ 320.977394][ T7393] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 321.350305][ T7419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.745'. [ 321.865739][ T7425] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 322.555641][ T7434] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 323.328622][ T7436] netlink: 32 bytes leftover after parsing attributes in process `syz.4.750'. [ 323.590768][ T7437] loop6: detected capacity change from 0 to 512 [ 323.787720][ T7437] EXT4-fs warning (device loop6): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 323.853846][ T7444] loop1: detected capacity change from 0 to 1024 [ 323.903713][ T7444] EXT4-fs (loop1): Ignoring removed nobh option [ 323.911713][ T7444] EXT4-fs (loop1): inline encryption not supported [ 323.931564][ T7444] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 323.931564][ T7444] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 323.931564][ T7444] [ 324.190985][ T7444] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,journal_ioprio=0x0000000000000006,resgid=0x000000000000ee00,inlinecrypt,abort,nodioread_nolock,noquota,noacl,nobarrier,,errors=continue. Quota mode: none. [ 324.285031][ T7444] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.414253][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.755'. [ 325.680857][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.6.756'. [ 325.727940][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.757'. [ 325.948767][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.758'. [ 326.118992][ T7469] loop3: detected capacity change from 0 to 512 [ 326.378003][ T7471] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 326.619341][ T7469] EXT4-fs (loop3): Ignoring removed oldalloc option [ 326.723054][ T7469] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.906567][ T7476] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 328.335761][ T7485] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 328.922681][ T7469] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 328.923791][ T7469] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.760: bg 0: block 248: padding at end of block bitmap is not set [ 328.924387][ T7469] Quota error (device loop3): write_blk: dquota write failed [ 328.924494][ T7469] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 328.925082][ T7469] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.760: Failed to acquire dquot type 1 [ 328.926345][ T7469] EXT4-fs (loop3): 1 truncate cleaned up [ 328.926369][ T7469] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,oldalloc,,errors=continue. Quota mode: writeback. [ 329.671571][ T7491] loop1: detected capacity change from 0 to 512 [ 330.009963][ T7491] EXT4-fs warning (device loop1): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 331.824465][ T7500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.770'. [ 333.109026][ T7522] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 333.113855][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 334.755795][ T7534] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 337.384380][ T7566] loop1: detected capacity change from 0 to 512 [ 337.481650][ T7566] EXT4-fs warning (device loop1): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 338.266403][ T7573] netlink: 32 bytes leftover after parsing attributes in process `syz.5.785'. [ 338.499346][ T7584] loop1: detected capacity change from 0 to 512 [ 338.570842][ T7586] loop3: detected capacity change from 0 to 1024 [ 338.706803][ T7584] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 338.799197][ T7586] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 338.858803][ T7594] overlayfs: failed to clone lowerpath [ 338.880656][ T7594] overlayfs: failed to clone lowerpath [ 339.298316][ T7584] EXT4-fs (loop1): 1 truncate cleaned up [ 339.494443][ T7584] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noload,data_err=abort,noload,data_err=ignore,auto_da_alloc,,errors=continue. Quota mode: none. [ 339.993137][ T154] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 340.840776][ T154] EXT4-fs (loop3): Remounting filesystem read-only [ 341.103241][ T7608] overlayfs: failed to clone lowerpath [ 343.889291][ T7636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.799'. [ 344.253126][ T7646] loop1: detected capacity change from 0 to 256 [ 344.379243][ T7647] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 344.427617][ T7646] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 344.444610][ T7646] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 344.486995][ T7646] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 347.899918][ T7682] netlink: 32 bytes leftover after parsing attributes in process `syz.5.811'. [ 347.937134][ T7682] netlink: 48 bytes leftover after parsing attributes in process `syz.5.811'. [ 348.612548][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 453.994521][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 454.001639][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1274/1:b..l [ 454.010117][ C0] (detected by 0, t=10502 jiffies, g=23349, q=337) [ 454.016821][ C0] task:kworker/u4:4 state:R running task stack:23408 pid: 1274 ppid: 2 flags:0x00004000 [ 454.028811][ C0] Workqueue: netns cleanup_net [ 454.033621][ C0] Call Trace: [ 454.037101][ C0] [ 454.040064][ C0] __schedule+0x11ef/0x43c0 [ 454.044805][ C0] ? release_firmware_map_entry+0x190/0x190 [ 454.051006][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 454.056432][ C0] preempt_schedule_irq+0xbb/0x160 [ 454.061682][ C0] ? __cond_resched+0xd0/0xd0 [ 454.066520][ C0] ? rcu_is_watching+0x11/0xa0 [ 454.072312][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 454.078276][ C0] irqentry_exit+0x63/0x70 [ 454.082912][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 454.089088][ C0] RIP: 0010:inet_twsk_purge+0x509/0x840 [ 454.094660][ C0] Code: 5a f9 e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 68 fe ff ff 4c 89 f7 e8 41 b9 5a f9 e9 5b fe ff ff e8 87 ad 15 f9 a0 00 00 00 43 0f b6 44 35 00 84 c0 4d 89 f5 48 8b 5c 24 78 0f [ 454.114504][ C0] RSP: 0018:ffffc90004a27a40 EFLAGS: 00000293 [ 454.120699][ C0] RAX: ffffffff88637349 RBX: 0000000000000001 RCX: ffff888022d60000 [ 454.128713][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 454.136805][ C0] RBP: ffffc90004a27b50 R08: dffffc0000000000 R09: 1ffffffff203a418 [ 454.144812][ C0] R10: dffffc0000000000 R11: fffffbfff203a419 R12: 0000000000090cab [ 454.153192][ C0] R13: dffffc0000000000 R14: ffff88802ca432a8 R15: ffffffff8d617340 [ 454.162080][ C0] ? inet_twsk_purge+0x509/0x840 [ 454.167470][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 454.173655][ C0] ? iput+0x706/0x8a0 [ 454.177781][ C0] ? dccp_v4_exit_net+0x80/0x80 [ 454.182895][ C0] cleanup_net+0x791/0xba0 [ 454.187388][ C0] ? ops_free_list+0x330/0x330 [ 454.192293][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 454.198534][ C0] ? _raw_spin_unlock+0x40/0x40 [ 454.203503][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 454.208811][ C0] process_one_work+0x85f/0x1010 [ 454.213789][ C0] ? worker_detach_from_pool+0x240/0x240 [ 454.219730][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 454.225130][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 454.230172][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 454.235781][ C0] ? wq_worker_running+0x97/0x170 [ 454.240821][ C0] worker_thread+0xaa6/0x1290 [ 454.245599][ C0] kthread+0x436/0x520 [ 454.249820][ C0] ? rcu_lock_release+0x20/0x20 [ 454.254797][ C0] ? kthread_blkcg+0xd0/0xd0 [ 454.259606][ C0] ret_from_fork+0x1f/0x30 [ 454.264054][ C0] [ 454.267085][ C0] rcu: rcu_preempt kthread starved for 9781 jiffies! g23349 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 454.278384][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 454.288607][ C0] rcu: RCU grace-period kthread stack dump: [ 454.294504][ C0] task:rcu_preempt state:R running task stack:26896 pid: 15 ppid: 2 flags:0x00004000 [ 454.305394][ C0] Call Trace: [ 454.308690][ C0] [ 454.311641][ C0] __schedule+0x11ef/0x43c0 [ 454.316360][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 454.322319][ C0] ? rcu_is_watching+0x11/0xa0 [ 454.327102][ C0] ? release_firmware_map_entry+0x190/0x190 [ 454.333094][ C0] schedule+0x11b/0x1e0 [ 454.337394][ C0] schedule_timeout+0x184/0x2d0 [ 454.342265][ C0] ? console_conditional_schedule+0x40/0x40 [ 454.348188][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 454.354280][ C0] ? update_process_times+0x200/0x200 [ 454.359883][ C0] ? prepare_to_swait_event+0x331/0x350 [ 454.365477][ C0] rcu_gp_fqs_loop+0x2be/0x11d0 [ 454.371250][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 454.376680][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 454.382870][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 454.388023][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 454.393414][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 454.398721][ C0] rcu_gp_kthread+0x9b/0x370 [ 454.403335][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 454.409250][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 454.414896][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 454.420805][ C0] ? __kthread_parkme+0x157/0x1b0 [ 454.425853][ C0] kthread+0x436/0x520 [ 454.430219][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 454.435788][ C0] ? kthread_blkcg+0xd0/0xd0 [ 454.440397][ C0] ret_from_fork+0x1f/0x30 [ 454.444931][ C0] [ 454.448054][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 454.454482][ C0] NMI backtrace for cpu 0 [ 454.458909][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 454.466037][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 454.476195][ C0] Call Trace: [ 454.479488][ C0] [ 454.482347][ C0] dump_stack_lvl+0x188/0x250 [ 454.487047][ C0] ? show_regs_print_info+0x20/0x20 [ 454.492266][ C0] ? load_image+0x400/0x400 [ 454.496926][ C0] ? irq_work_queue+0xbf/0x140 [ 454.501735][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 454.506910][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 454.513175][ C0] ? _printk+0xda/0x130 [ 454.517355][ C0] ? cpu_online+0x1d/0x30 [ 454.521701][ C0] ? load_image+0x400/0x400 [ 454.526227][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 454.532311][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 454.538313][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 454.544486][ C0] print_other_cpu_stall+0x1110/0x1270 [ 454.549970][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 454.554922][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 454.560409][ C0] rcu_sched_clock_irq+0x843/0x1120 [ 454.565895][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 454.570958][ C0] ? account_process_tick+0x22a/0x3a0 [ 454.576457][ C0] update_process_times+0x193/0x200 [ 454.581678][ C0] tick_sched_timer+0x37d/0x560 [ 454.586551][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 454.592113][ C0] __hrtimer_run_queues+0x4ad/0xb70 [ 454.597354][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 454.602481][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 454.608597][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 454.613576][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 454.619571][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 454.625221][ C0] [ 454.628164][ C0] [ 454.631111][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 454.637179][ C0] RIP: 0010:default_idle+0xb/0x10 [ 454.642434][ C0] Code: b7 48 89 df e8 86 c3 f8 f7 eb ad e8 4f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 77 66 60 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 454.662316][ C0] RSP: 0018:ffffffff8c007dc8 EFLAGS: 000002c6 [ 454.668754][ C0] RAX: 5aa20ef63f73ce00 RBX: ffffffff8c0bc480 RCX: 5aa20ef63f73ce00 [ 454.677088][ C0] RDX: 0000000000000001 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f740 [ 454.685325][ C0] RBP: ffffffff8c007ef8 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 454.693479][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 1ffffffff1817890 [ 454.701553][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffffffff1800fc4 [ 454.709657][ C0] default_idle_call+0x81/0xc0 [ 454.714442][ C0] do_idle+0x21f/0x580 [ 454.718531][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 454.723747][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 454.729414][ C0] ? schedule_idle+0x57/0x90 [ 454.734196][ C0] cpu_startup_entry+0x14/0x20 [ 454.739106][ C0] ? time_init+0x40/0x40 [ 454.743383][ C0] start_kernel+0x489/0x540 [ 454.748006][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 454.753941][ C0]