last executing test programs: 3m8.455157179s ago: executing program 3 (id=474): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x810814, &(0x7f0000000340)={[{@noquota}, {@noquota}]}, 0xd, 0x626, &(0x7f00000023c0)="$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") 3m8.130330216s ago: executing program 3 (id=477): syz_io_uring_setup(0xec7, &(0x7f0000000d00)={0x0, 0x45de, 0x800, 0xffffe, 0x126}, &(0x7f0000000bc0), &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40), 0x0, 0x20040894) socket$kcm(0x10, 0x2, 0x10) ioprio_get$pid(0x2, 0x0) 3m6.417444821s ago: executing program 3 (id=487): syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x7, 0x367}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') syz_io_uring_complete(r0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x54) 3m6.366702633s ago: executing program 3 (id=488): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x10800, &(0x7f0000000480)={[{@nodelalloc}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {}, {@bh}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m4.085185156s ago: executing program 3 (id=492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x140000, 0x0, {[0xffffffff, 0x2, 0x4, 0x5, 0x2, 0x9a0, 0x10, 0xfffffffffffffffe]}}) 2m59.634766437s ago: executing program 3 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x4, 0x0, [{0x1, 0x8000, 0xb, 0x10, 0x0, 0x2, 0x2}, {0x1, 0x6, 0x6, 0x8000, 0xd5b3, 0x68, 0x3887}, {0x0, 0x8, 0x7, 0x9, 0x7, 0x4c01, 0x6}, {0xc0000000, 0xd, 0x6, 0x4, 0x80, 0x0, 0xdc95}]}) 2m59.15910118s ago: executing program 32 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x4, 0x0, [{0x1, 0x8000, 0xb, 0x10, 0x0, 0x2, 0x2}, {0x1, 0x6, 0x6, 0x8000, 0xd5b3, 0x68, 0x3887}, {0x0, 0x8, 0x7, 0x9, 0x7, 0x4c01, 0x6}, {0xc0000000, 0xd, 0x6, 0x4, 0x80, 0x0, 0xdc95}]}) 1m50.873776938s ago: executing program 4 (id=763): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) 1m49.468420368s ago: executing program 4 (id=766): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000001e80)={[{@noblock_validity}, {@nolazytime}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@resgid}, {@dioread_lock}]}, 0x6, 0x603, &(0x7f0000001840)="$eJzs3c9rHGUfAPDvzCZ5kzbvm/ZFxBbFgIcWpGlSi1UvtvVgDwUL9iDioaFJauj2B00KthZMwYOCgohXkV78B7xL795EUG+ehSpSUVDpyuzOtpvNbpo22Uy68/nAZud5Znaf57uTJ/M8M3l2Aiit8exHGrEr4s6pJGKsZd1oNFaO59vd/u3a6eyRRK32+q9JJHlec/skf96eJ4Yj4tujEf+vrCx34crVs9PVWsN7EfsXz13cv3Dl6r75c9NnZs/Mnp868MLBQ5MvTh2c2pA4t+fPx46/9uTH77/9/Nx31X1JHI6Tg+/ORFscG2U8xuNOHmJr/kBEHMoWOnwuj5o+CKHUKvnv42BEPB5jUamnGsZi/qNCKwf0VK0SUQNKKtH+oaSa/YDm2H5t4+CTPe6VbJ5bRxoDoJXxDzTOjcRwfWy07XbSMjJqnNvYsQHlZ2X8c23359kjlp2H+PPu3hnYgHK6WboeEU90ij+p121HPdIs/nRZPdKImIyIobx+r6yjDknLcqP8kXW824NZT/yH8+cs/+hDlj/elu7FeSgAaHfzSH4gX8pS945/Wd+j2f+JDv2f0Q7HrodR9PGve/+vebwfrp8jT9v6YVmf5UTntxxsz/jpw2Ofdiu/tf+XPbLym33BzXDresTutvg/yILN+z9Z/EmH/Z9tcurw2sp49ftfjnVbV3T8tRsRezqOf+71SrOlVa5P7p+br85ONn52LOPrb976slv5Rcef7f9tXeJv2f9p++uyz+TiGsv46sSNc93Wjd43/vTnoaQx3hzKc96ZXly8NBUxlBzPN2nJP7B6XZrbNN8ji3/vM53b/7Lf/+vL32ek+SdzDS6+cfZ2t3UPs/9bLibfqa2xDt1k8c/cf/+vaP9Z3idrLOOPNy8/1W3davFv3igQAAAAAAAA+kNavwabpBN3l9N0YqIxX/ax2JZWLywsPjt34fL5mYi99f+HHEybV7rHGukkS0/l/w/bTB9oSz8XETsj4rPKSD09cfpCdabo4AEAAAAAAAAAAAAAAAAAAGCL2J7P/2/ep/r3SmP+P1ASvbzBHLC1af9QXvX2v+IWT0AZOP5DeWn/UF7aP5SX9g/lpf1DeWn/UF7aP5SX9g8AAAAAfWnn0zd/TCJi6aWR+iMzlK8zIwj622DRFQAKUym6AkBh7l7619mH0llT//+v/MsBe18doABJp8x656C2euO/2fGVAAAAAAAAAAAAAEAP7NnVff6/ucHQ30z7g/Jax/x/Xx0Ajzhf/Q/lZYwP3G8W/3C3FSvn/w9tSIUAAAAAAAAAAAAAgBVG648kncjnAo9Gmk5MRPw3InbEYDI3X52djIj/RcQPlcH/ZOmpoisNAAAAAAAAAAAAAAAAAAAAfWbhytWz09Xq7KXWhb9X5PT3QvMuqJtQ1svxgK+KZPM/lpGIKHyn9GxhoCUniVjK9vyWqNilhdga1agvFPyHCQAAAAAAAAAAAAAAAAAASqhl7nFnu7/Y5BoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOa7d///3i0UHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj6NwAA//9hIEA8") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x181) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) io_uring_setup(0x7568, &(0x7f00000000c0)={0x0, 0xfca0, 0x0, 0x2000003, 0x22e}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x82100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f00000004c0)=""/81) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0x8, 0x11e, 0x0, 0x0, @fd=r3}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xdc}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000001800)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x20000, 0xffffff}]}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f0000000740)={@local, @local, @void, {@mpls_mc={0x8848, {[], @ipv6=@tipc_packet={0x8, 0x6, "8fd44d", 0x18, 0x6, 0x1, @empty, @empty, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x2, 0x9, 0x0, 0x3, 0x3, 0x0, 0x0, 0x6, 0x9, 0x4, 0x4e23, 0x4e21}}}}}}}}}, 0x0) 1m44.879057175s ago: executing program 4 (id=783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) dup3(r0, r2, 0x80000) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0x483, 0x0, 0x7fff}, {0x641, 0x0, 0x8}]}) 1m44.521383743s ago: executing program 4 (id=785): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@nodioread_nolock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4b}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48c, &(0x7f00000002c0)="$eJzs3MtrXNUfAPDvvXm0/fWR/Gp9tFaNFiH4SJq0ahduFAUXFQVd1GVMpiV02kgTxZZiU5G6EaSga3Ep+Be4EEQQdSW41Y0rKRTtptVV5N65N52ZzrSNnWRi5vOByZwz99yc873Pc8+ZJICeNZL9SCK2RcQvETFUyzYWGKm9XbtydvqvK2enk1haeu2PJC939crZ6bJoud7WIjOaRqQfJEUlmxvqnT995vhUtVo5VeTHF068NT5/+syT75yYOlY5Vjk5eejQwQMTzzw9+VRH4sziurrnvbm9u1964+LL00cuvvnDl1l7txXL6+PolJEs8D+Xcs3LHu10ZV22vS6d9HexIaxIX0Rku2sgP/+Hoi+u77yhePH9rjYOWFXZvWlT+8WLS8AGlkS3WwB0R3mjz55/81fS+efg9ezyc7UHoCz2a8WrtqQ/0qLMQNPzbSeNRMSRxb8/y16xSuMQAAD1Ppr+9HA8Udf/W+5/pHFP/v5b/nNHMYcyHBH/j4idEXFXROyKiLsj8rL3RsR9K6x/pCl/Y/8nvfSvg7sNWf/v2WJuq7H/V/b+YrivyG3P4x9Ijs5WK/uLbTIaA5uy/MRN6vjmhZ8/bresvv+XvbL6y75g0Y5L/U0DdDNTC1N5p7QDLp+P2NPfKv5keSYgiYjdEbGnxfpft//VO8rE7GNf7G1X6Nbx30QH5pmWPs/CW8ziX4ym+EtJ/fzk7A3zk+Obo1rZP14eFTf68acLr7ar/47i74DLldp73f5vLjKc1M/Xzq+8jgu/ftj2meZ6/FvaH/9J4zozUwvpYPJ6Ps88WHz27tTCwqmJiMHkcJ5v+Hzy+rplviyfHf+j+1qf/zuLdbLq74+I7CB+ICIejIiHirY/HBGPRMS+m8T//fPtl5XxR9ql/X8+Yqbl9W95ozft/5Un+o5/91W7+m/v+ncwT40Wn+TXv1to1ZzsctHcwDvZdgAAAPBfkebfgU/SseV0mo6N1b7Dvyv+l1bn5hcePzr39smZ2nflh2MgLUe6horx0OpstTKRLBa/sTY+OlmMFZfjpQeKceNP+rbk+bHpuepMl2OHXre1zfmf+b2v260DVtmWlp9ODq55Q4AuaJ5HTxuz514JFwPYqPy9NvSuW5z/6Vq1A1h77v/Qu1qd/+ea8uYCYGNy/4fe5fyHHpV+2+0WAF3k/g896U7+rn8VE5vXRzMa/lPA4lptsfW6U/JERJlI10V7JFYp0e0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8EwAA///cRegb") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m44.209250698s ago: executing program 4 (id=786): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m43.722001712s ago: executing program 4 (id=790): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1m43.508471733s ago: executing program 33 (id=790): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1m20.725505829s ago: executing program 2 (id=856): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r0, &(0x7f0000000940)=""/229, 0xe5) 1m20.583920366s ago: executing program 2 (id=857): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 1m20.369343037s ago: executing program 2 (id=859): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60004, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000d00)='syzkaller\x00', 0x4, 0x82, &(0x7f0000000200)=""/130, 0x0, 0x1}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x8000, 0xc95a, 0xf, 0x8, 0x7d, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x6, 0x2, 0xffff2d34, 0xffffff03, 0x6, 0x3, 0xfffffffc, 0x4ed, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x6, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x80400, 0x80, 0x1, 0x5, 0x6, 0x7, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff2, 0x1, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0xb, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8003, 0x9, 0x8, 0x9, 0x7, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x7, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x400005, 0x9, 0x4, 0x6, 0x3, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x3, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac9, 0x0, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x9, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2002, 0x80a2ed, 0x4, 0x25], [0x8000d, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0xa, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1m16.421505052s ago: executing program 2 (id=870): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 1m13.264361198s ago: executing program 2 (id=887): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x58}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 1m9.781295501s ago: executing program 2 (id=903): mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x3, 0x100000000, 0x3) 1m8.483014654s ago: executing program 34 (id=903): mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x3, 0x100000000, 0x3) 58.46333715s ago: executing program 0 (id=931): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000100001041000"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c001280080001"], 0x4c}}, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 58.24144828s ago: executing program 0 (id=933): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") open(0x0, 0x80242, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400000000000000000000000020000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\a\x00'/27], 0x50) creat(&(0x7f00000000c0)='./file1\x00', 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) fallocate(r0, 0x0, 0xeffb, 0xe396) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x2) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000180)='@', 0x1}], 0x1, 0x5412, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xb, 0xffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x81}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffefffd}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x0) 56.853577929s ago: executing program 0 (id=943): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0x2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) move_mount(r3, 0x0, r3, &(0x7f00000000c0)='./file0\x00', 0x22) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x40049366, 0x0) 56.361338114s ago: executing program 0 (id=947): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x30209000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x2, 0x1, 0xab4e, 0xfffffffffffffffd}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) 55.345428244s ago: executing program 0 (id=950): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffc, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000010000000000000000000000000000000000000000000000c7b2ab217728fd00"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x40091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x8, 0x3f8, 0xb, 0x32}, 0x9c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000400)=""/229, 0xe5) syz_io_uring_setup(0x7797, &(0x7f0000000380)={0x0, 0xf5a5, 0x0, 0x3, 0x2028a}, 0x0, &(0x7f0000000200)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000500)=ANY=[@ANYBLOB="29aabf20d09f4e4d373401000000000000000102030405060708090a0b0c0d0e0f1011121314151617"], 0x48, 0xffffffffffffffff) close_range(r6, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 46.343679029s ago: executing program 0 (id=977): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.198821067s ago: executing program 35 (id=977): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.276249974s ago: executing program 1 (id=1100): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xdafbe5d6891b6e0) inotify_init1(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000140)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x96, 0xf1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @alu={0x4, 0x0, 0xa, 0x9, 0x7, 0x18}]}, &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000000c0)=@buf) 10.432621504s ago: executing program 8 (id=1107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x1, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x1, 0x406, 0x4, 0x7fffffff, 0xe}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xe1f0, 0x9, 0xc1c5, 0xe44}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.778163707s ago: executing program 8 (id=1111): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) close(0xffffffffffffffff) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x800a, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmmsg$unix(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)='S', 0x1}], 0x1, 0x0, 0x0, 0x40408d0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) 7.342205527s ago: executing program 7 (id=1117): setfsgid(0xee01) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='wchan\x00') r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="50010000", @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000c8004000b800800020001000000200108801c00078008000501000000000800000000"], 0x150}}, 0x0) pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) 7.339823977s ago: executing program 8 (id=1118): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x7c, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x400}]}) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f100", @ANYRES8=r0], 0x0) 7.29162546s ago: executing program 6 (id=1119): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="410c7501df7d", 'veth1_to_bridge\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000200)={0x18, 0x0, {0x4008, @multicast, 'vcan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'veth1_to_hsr\x00'}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="380000001000010025bd7000fddbdf2540000000", @ANYRES32=0x0, @ANYBLOB="100804000100000008001b00000000000800290000000100"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 7.109385869s ago: executing program 5 (id=1120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000000c0)={{0x1, 0x2, 0x4, 0x2, 0x8000}, 0x1ff, 0x10, 'id0\x00', 'timer1\x00', 0x0, 0x1, 0x5, 0x8000, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) 7.07967192s ago: executing program 1 (id=1121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x1, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x1, 0x406, 0x4, 0x7fffffff, 0xe}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xe1f0, 0x9, 0xc1c5, 0xe44}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.032164972s ago: executing program 7 (id=1122): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x24000054) 6.989334805s ago: executing program 5 (id=1123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x11a}, 0x20) 6.945285257s ago: executing program 7 (id=1124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011000000040001000800"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 6.444693442s ago: executing program 8 (id=1125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) inotify_init() socket(0x80000000000000a, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) 5.996578904s ago: executing program 5 (id=1126): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xdafbe5d6891b6e0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000140)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x96, 0xf1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @alu={0x4, 0x0, 0xa, 0x9, 0x7, 0x18}]}, &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000000c0)=@buf) 3.43749643s ago: executing program 6 (id=1127): capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000000), 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x107) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r1) 3.385788323s ago: executing program 8 (id=1128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) close(0xffffffffffffffff) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x800a, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x4, 0x1, 0x69b, 0x1fb, 0xffffffff, 0xfffffff7}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x5, 0x8}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x43}]}}}]}, 0x64}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 1.247410979s ago: executing program 6 (id=1133): r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) setreuid(0x0, r1) 1.112945795s ago: executing program 5 (id=1134): munlock(&(0x7f0000b2e000/0x2000)=nil, 0x2000) 961.493013ms ago: executing program 1 (id=1135): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 939.709414ms ago: executing program 6 (id=1136): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xfffe, r1, 0x0}]) 837.094119ms ago: executing program 5 (id=1137): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f00000003c0)=ANY=[]) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 713.487355ms ago: executing program 1 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) inotify_init() socket(0x80000000000000a, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) 605.42855ms ago: executing program 6 (id=1139): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) 0s ago: executing program 8 (id=1140): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) kernel console output (not intermixed with test programs): : batadv_slave_0 [ 196.562705][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.582188][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.603630][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.611592][ T4241] device bridge_slave_1 left promiscuous mode [ 196.625522][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.650169][ T4241] device bridge_slave_0 left promiscuous mode [ 196.659319][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.683840][ T4236] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 196.730980][ T4241] device veth1_macvtap left promiscuous mode [ 196.737665][ T4241] device veth0_macvtap left promiscuous mode [ 196.755250][ T4241] device veth1_vlan left promiscuous mode [ 196.761706][ T4241] device veth0_vlan left promiscuous mode [ 196.819730][ T5915] loop1: detected capacity change from 0 to 131072 [ 196.851200][ T5915] F2FS-fs (loop1): invalid crc value [ 196.891745][ T5915] F2FS-fs (loop1): Found nat_bits in checkpoint [ 196.939807][ T4236] usb 5-1: Using ep0 maxpacket: 8 [ 197.000264][ T5915] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 197.013927][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 197.134522][ T4236] usb 5-1: unable to get BOS descriptor or descriptor too short [ 197.188993][ T4241] team0 (unregistering): Port device team_slave_1 removed [ 197.216896][ T4241] team0 (unregistering): Port device team_slave_0 removed [ 197.243740][ T4236] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.274291][ T4236] usb 5-1: config 1 interface 0 has no altsetting 0 [ 197.282431][ T4241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.334729][ T4241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.440419][ T4241] bond0 (unregistering): Released all slaves [ 197.483952][ T4236] usb 5-1: New USB device found, idVendor=0eef, idProduct=73f7, bcdDevice= 0.40 [ 197.501035][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.509933][ T4236] usb 5-1: Product: syz [ 197.521777][ T4236] usb 5-1: Manufacturer: syz [ 197.526722][ T4236] usb 5-1: SerialNumber: syz [ 197.589436][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.614652][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.695948][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.728485][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.744758][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.799991][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.813847][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 197.819967][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 198.035424][ T5935] device hsr_slave_0 entered promiscuous mode [ 198.050382][ T5935] device hsr_slave_1 entered promiscuous mode [ 198.063828][ T4236] usbhid 5-1:1.0: can't add hid device: -71 [ 198.079689][ T4236] usbhid: probe of 5-1:1.0 failed with error -71 [ 198.111196][ T4236] usb 5-1: USB disconnect, device number 6 [ 198.560920][ T6005] loop0: detected capacity change from 0 to 128 [ 198.891925][ T6005] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.903309][ T6005] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.983050][ T6005] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes [ 199.083904][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 199.259641][ T6006] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.530'. [ 199.342452][ T6009] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.530'. [ 200.010927][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 200.017194][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 200.989550][ T5935] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 201.077974][ T6023] loop1: detected capacity change from 0 to 256 [ 201.109705][ T6021] loop4: detected capacity change from 0 to 256 [ 201.117429][ T6023] exfat: Deprecated parameter 'utf8' [ 201.122768][ T6023] exfat: Deprecated parameter 'utf8' [ 201.128656][ T6023] exfat: Deprecated parameter 'utf8' [ 201.144121][ T5935] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.167618][ T5935] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.187529][ T6023] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 201.229345][ T5935] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.322606][ T6026] loop0: detected capacity change from 0 to 4096 [ 201.340035][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 201.439659][ T6026] EXT4-fs (loop0): inline encryption not supported [ 201.593180][ T6032] loop1: detected capacity change from 0 to 1024 [ 201.603888][ T6026] EXT4-fs (loop0): Test dummy encryption mode enabled [ 201.690999][ T6026] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 201.761184][ T6026] System zones: 0-5 [ 201.786894][ T6032] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 201.822346][ T6026] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,bsdgroups,nombcache,barrier,,errors=continue. Quota mode: writeback. [ 201.945551][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.018590][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.037995][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.044585][ T4233] Bluetooth: hci5: command 0x1009 tx timeout [ 202.076446][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.242986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.265793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.411314][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.418531][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.505052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.525362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.545907][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.553195][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.601497][ T6051] bond0 (unregistering): Released all slaves [ 202.665839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.696656][ T4267] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 202.723184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.735768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.756266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.791541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.814569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.833984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.866013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.877597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.917843][ T5935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.970717][ T4267] usb 5-1: Using ep0 maxpacket: 32 [ 203.038121][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.113903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.123884][ T4267] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.227923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.238136][ T4267] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.252517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.403698][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 204.136761][ T4267] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 204.229480][ T6071] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 204.953834][ T4267] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 204.962404][ T4267] usb 5-1: Product: syz [ 204.973596][ T4267] usb 5-1: Manufacturer: syz [ 205.064958][ T4267] hub 5-1:4.0: USB hub found [ 205.228971][ T6084] loop1: detected capacity change from 0 to 256 [ 205.943884][ T4267] hub 5-1:4.0: 2 ports detected [ 205.965095][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.975398][ T6084] exfat: Deprecated parameter 'namecase' [ 205.981301][ T6084] exfat: Deprecated parameter 'namecase' [ 206.003201][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.020424][ T6084] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 206.069521][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.113727][ T4267] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 206.125289][ T4267] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 206.244473][ T4267] usb 5-1: USB disconnect, device number 7 [ 206.728975][ T6091] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 206.737725][ T6091] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 206.921786][ T6111] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.552'. [ 206.954134][ T6111] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.552'. [ 207.152947][ T6118] loop4: detected capacity change from 0 to 1024 [ 207.211837][ T6118] EXT4-fs (loop4): inline encryption not supported [ 207.237900][ T6118] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.449855][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.474561][ T6118] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,noquota,grpquota,init_itable,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 207.549022][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.598169][ T6129] loop2: detected capacity change from 0 to 512 [ 207.613888][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.622199][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.707611][ T5935] device veth0_vlan entered promiscuous mode [ 207.738389][ T6118] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3885: comm syz.4.554: Allocating blocks 497-513 which overlap fs metadata [ 207.763993][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.774285][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.804323][ T6129] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 207.847447][ T5935] device veth1_vlan entered promiscuous mode [ 207.860689][ T6129] ext4 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.930237][ T6116] EXT4-fs (loop4): pa ffff8880740e8460: logic 256, phys. 369, len 9 [ 207.938829][ T6116] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 208.385151][ T5935] device veth0_macvtap entered promiscuous mode [ 208.407550][ T6139] loop4: detected capacity change from 0 to 512 [ 208.420523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.429621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.460052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.480747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.496695][ T5935] device veth1_macvtap entered promiscuous mode [ 208.531508][ T6139] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue. Quota mode: none. [ 208.593701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.674184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.686068][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.727753][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.765987][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.777997][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.816216][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.857340][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.867636][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.902465][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.935310][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.957905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.990149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.052607][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.077755][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.111901][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.134671][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.173616][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.193583][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.223570][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.265459][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.341382][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.407537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.428962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.296768][ T5935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.363592][ T5935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.429694][ T5935] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.471958][ T5935] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.612637][ T6173] loop0: detected capacity change from 0 to 1024 [ 210.819716][ T6173] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 210.829765][ T6173] EXT4-fs (loop0): Ignoring removed nobh option [ 210.857768][ T6173] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 210.899314][ T6173] EXT4-fs error (device loop0): ext4_get_journal_inode:5185: inode #8: comm syz.0.564: inode has both inline data and extents flags [ 210.920542][ T6173] EXT4-fs (loop0): no journal found [ 211.623381][ T5040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.715394][ T5040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.044345][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.087169][ T5040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.096383][ T5040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.110558][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.183984][ T6190] loop2: detected capacity change from 0 to 128 [ 212.274036][ T6190] EXT4-fs (loop2): Test dummy encryption mode enabled [ 212.332748][ T6190] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none. [ 212.349326][ T4267] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 212.368370][ T6190] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 212.421441][ T6199] loop1: detected capacity change from 0 to 2048 [ 212.448482][ T26] audit: type=1800 audit(1774050620.387:78): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.569" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=12 res=0 errno=0 [ 212.555608][ T6199] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,jqfmt=vfsold,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 212.579930][ T6199] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.761836][ T6215] loop0: detected capacity change from 0 to 256 [ 212.884977][ T6215] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 212.904088][ T4267] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.932680][ T6215] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.014042][ T4267] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 24 [ 213.068348][ T6223] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 213.075691][ T4267] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.110293][ T6223] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 213.304187][ T4267] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 213.313343][ T4267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.345177][ T4267] usb 5-1: Product: syz [ 213.609483][ T6234] loop1: detected capacity change from 0 to 512 [ 213.975185][ T6234] EXT4-fs (loop1): Ignoring removed nobh option [ 214.149730][ T4267] usb 5-1: Manufacturer: syz [ 214.154466][ T4267] usb 5-1: SerialNumber: syz [ 214.163697][ T6234] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 214.185352][ T6234] EXT4-fs (loop1): orphan cleanup on readonly fs [ 214.193980][ T6181] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 214.201488][ T6234] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #13: comm syz.1.579: iget: bogus i_mode (0) [ 214.234890][ T6234] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.579: couldn't read orphan inode 13 (err -117) [ 214.314140][ T6234] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,nobh,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 214.402132][ T6245] loop0: detected capacity change from 0 to 512 [ 214.463192][ T6247] loop2: detected capacity change from 0 to 2048 [ 214.512903][ T6245] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.539948][ T6245] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.609857][ T26] audit: type=1800 audit(1774050622.547:79): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.580" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 214.653944][ T4267] usb 5-1: MIDIStreaming interface descriptor not found [ 214.683108][ T6247] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000005,,errors=continue. Quota mode: none. [ 214.996716][ T4267] usb 5-1: USB disconnect, device number 8 [ 215.077765][ T6267] netlink: 128 bytes leftover after parsing attributes in process `syz.4.585'. [ 215.294382][ T6267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.585'. [ 215.304052][ T6267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.585'. [ 215.317873][ T26] audit: type=1800 audit(1774050623.257:80): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.581" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 215.347602][ T4277] udevd[4277]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.529070][ T26] audit: type=1800 audit(1774050623.397:81): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.581" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 217.412958][ T6298] loop2: detected capacity change from 0 to 512 [ 217.453308][ T6300] loop1: detected capacity change from 0 to 512 [ 217.473432][ T6298] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 217.480814][ T6298] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 217.504136][ T6298] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 217.640537][ T6298] loop2: detected capacity change from 0 to 512 [ 217.684833][ T6300] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,. Quota mode: writeback. [ 217.775037][ T6300] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.825396][ T6298] FAT-fs (loop2): error, invalid access to FAT (entry 0x000000c8) [ 217.909421][ T6300] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.595: directory missing '..' [ 219.093887][ T6327] loop1: detected capacity change from 0 to 1024 [ 219.346880][ T6293] loop5: detected capacity change from 0 to 40427 [ 219.377069][ T6327] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,acl,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 219.409095][ T6327] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.428061][ T6327] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm syz.1.601: lblock 0 mapped to illegal pblock 0 (length 1) [ 219.447955][ T6327] EXT4-fs (loop1): Remounting filesystem read-only [ 219.459210][ T6327] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #15: comm syz.1.601: lblock 0 mapped to illegal pblock 0 (length 1) [ 219.810679][ T6327] EXT4-fs (loop1): Remounting filesystem read-only [ 219.820412][ T6293] F2FS-fs (loop5): invalid crc value [ 220.337199][ T6293] F2FS-fs (loop5): Found nat_bits in checkpoint [ 220.546551][ T6347] loop0: detected capacity change from 0 to 512 [ 220.703128][ T6345] loop4: detected capacity change from 0 to 4096 [ 220.766535][ T6293] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 220.876165][ T6345] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.916488][ T6347] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 220.973476][ T6354] loop1: detected capacity change from 0 to 512 [ 221.013903][ T6347] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.033948][ T6345] EXT4-fs (loop4): shut down requested (1) [ 221.132922][ T6354] EXT4-fs (loop1): Unrecognized mount option "=" or missing value [ 222.057866][ T6367] loop1: detected capacity change from 0 to 1024 [ 222.195863][ T6367] EXT4-fs error (device loop1): ext4_free_blocks:6232: comm syz.1.610: Freeing blocks not in datazone - block = 0, count = 4096 [ 222.255953][ T6367] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.610: Invalid inode bitmap blk 0 in block_group 0 [ 222.275245][ T6367] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 222.399350][ T6367] EXT4-fs (loop1): 1 orphan inode deleted [ 222.409214][ T6367] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; noblock_validity,nolazytime,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,resgid=0x0000000000000000,dioread_lock,,errors=continue. Quota mode: writeback. [ 222.543699][ T6367] EXT4-fs (loop1): shut down requested (0) [ 222.553179][ T6378] loop0: detected capacity change from 0 to 1024 [ 222.594037][ T6383] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.610: Invalid inode table block 0 in block_group 0 [ 222.735536][ T6378] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,grpquota,barrier=0x0000000000000006,nolazytime,grpjquota=,i_version,errors=remount-ro,stripe=0x0000000000000002,nodiscard,inode_readahead_blks=0x0000000000000002,. Quota mode: writeback. [ 222.802619][ T6367] kvm [6365]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffff [ 224.044405][ T6401] loop5: detected capacity change from 0 to 1024 [ 224.081018][ T6401] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 224.198392][ T6401] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 224.450559][ T6409] netlink: 104 bytes leftover after parsing attributes in process `syz.0.619'. [ 224.571868][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 225.037983][ T6425] loop2: detected capacity change from 0 to 128 [ 225.107777][ T6427] loop4: detected capacity change from 0 to 512 [ 225.122366][ T6339] tipc: Subscription rejected, illegal request [ 225.178904][ T6427] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 225.213790][ T4236] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 225.223624][ T6427] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 225.516757][ T4236] usb 1-1: Using ep0 maxpacket: 16 [ 225.530850][ T6427] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3885: comm syz.4.625: Allocating blocks 41-42 which overlap fs metadata [ 225.598362][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 226.010567][ T6427] Quota error (device loop4): write_blk: dquota write failed [ 226.483711][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 226.495840][ T4236] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.504035][ T6427] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 226.509061][ T4236] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 226.543583][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.563765][ T4236] usb 1-1: config 0 descriptor?? [ 226.573686][ T6427] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3885: comm syz.4.625: Allocating blocks 41-42 which overlap fs metadata [ 226.594428][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 226.610775][ T6427] Quota error (device loop4): write_blk: dquota write failed [ 226.627412][ T6427] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 226.642799][ T6427] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.625: Failed to acquire dquot type 1 [ 226.662861][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 226.671570][ T6427] EXT4-fs error (device loop4): mb_free_blocks:1874: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 226.698002][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 226.726687][ T6427] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #12: comm syz.4.625: corrupted inode contents [ 226.763201][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 226.815997][ T6427] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #12: comm syz.4.625: mark_inode_dirty error [ 226.842325][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 226.849999][ T6427] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #12: comm syz.4.625: corrupted inode contents [ 226.862295][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 226.868886][ T6427] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.625: mark_inode_dirty error [ 226.880645][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 226.887427][ T6427] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #12: comm syz.4.625: corrupted inode contents [ 226.909525][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 226.921231][ T6427] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 226.933878][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 226.940626][ T6427] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #12: comm syz.4.625: corrupted inode contents [ 227.250053][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.273000][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.294027][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 227.315937][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.329862][ T6427] EXT4-fs error (device loop4): ext4_truncate:4279: inode #12: comm syz.4.625: mark_inode_dirty error [ 227.425686][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.459514][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 227.470842][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.489566][ T6427] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 227.499565][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.513009][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.521633][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 227.536494][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.549708][ T6427] EXT4-fs (loop4): 1 truncate cleaned up [ 227.559215][ T6427] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,journal_dev=0x0000000000000005,nomblk_io_submit,noauto_da_alloc,inode_readahead_blks=0x0000000000800000,usrquota,errors=remount-ro,resgid=0x00000000000000002. Quota mode: writeback. [ 227.598381][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.609692][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.619514][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.631291][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.673821][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.713388][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.725832][ T6427] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3885: comm syz.4.625: Allocating blocks 41-42 which overlap fs metadata [ 227.764227][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.783021][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.799235][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 227.816483][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.836194][ T6427] Quota error (device loop4): write_blk: dquota write failed [ 227.853830][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.870284][ T6427] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 227.885188][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.906274][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.914776][ T6427] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.625: Failed to acquire dquot type 1 [ 227.940770][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 227.959109][ T6427] EXT4-fs (loop4): Remounting filesystem read-only [ 227.974295][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 228.001853][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 228.028920][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 228.069449][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 228.113591][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 228.161513][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 228.189219][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 228.219676][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 228.257805][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 228.288208][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 228.338821][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 228.372223][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 228.655420][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 228.705429][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 229.253610][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 229.261128][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 229.272952][ T4236] uclogic 0003:28BD:0055.0003: unknown main item tag 0x0 [ 229.281080][ T4236] uclogic 0003:28BD:0055.0003: No inputs registered, leaving [ 229.290462][ T4236] uclogic 0003:28BD:0055.0003: hidraw0: USB HID v0.0a Device [HID 28bd:0055] on usb-dummy_hcd.0-1/input0 [ 229.314496][ T4236] usb 1-1: USB disconnect, device number 7 [ 229.692568][ T6479] fido_id[6479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 229.900116][ T6490] loop4: detected capacity change from 0 to 8192 [ 229.973450][ T26] audit: type=1800 audit(1774050637.907:82): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.637" name=")" dev="loop4" ino=1048608 res=0 errno=0 [ 230.163972][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 230.423667][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 230.474596][ T6512] loop4: detected capacity change from 0 to 256 [ 230.504026][ T6512] exfat: Deprecated parameter 'utf8' [ 230.526567][ T6512] exfat: Deprecated parameter 'utf8' [ 230.553389][ T6512] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 230.566573][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.593576][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.636010][ T7] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 230.650778][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.674477][ T7] usb 1-1: config 0 descriptor?? [ 231.977431][ T6523] loop2: detected capacity change from 0 to 1024 [ 232.133464][ T6523] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 232.165566][ T7] belkin 0003:1020:0006.0004: unknown main item tag 0x0 [ 232.172595][ T7] belkin 0003:1020:0006.0004: unknown main item tag 0x0 [ 232.200923][ T7] belkin 0003:1020:0006.0004: unknown main item tag 0x0 [ 232.221137][ T7] belkin 0003:1020:0006.0004: unknown main item tag 0x0 [ 232.238712][ T7] belkin 0003:1020:0006.0004: unknown main item tag 0x0 [ 232.244876][ T6523] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.246488][ T7] belkin 0003:1020:0006.0004: unknown main item tag 0x0 [ 232.273647][ T7] belkin 0003:1020:0006.0004: unknown main item tag 0x2 [ 232.280676][ T7] belkin 0003:1020:0006.0004: item fetching failed at offset 26/41 [ 232.309696][ T7] belkin 0003:1020:0006.0004: parse failed [ 232.321018][ T6523] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: comm syz.2.651: lblock 0 mapped to illegal pblock 0 (length 1) [ 232.343863][ T7] belkin: probe of 0003:1020:0006.0004 failed with error -22 [ 232.383864][ T7] usb 1-1: USB disconnect, device number 8 [ 232.412709][ T6523] EXT4-fs (loop2): Remounting filesystem read-only [ 232.440678][ T6523] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: comm syz.2.651: lblock 0 mapped to illegal pblock 0 (length 1) [ 232.482860][ T6523] EXT4-fs (loop2): Remounting filesystem read-only [ 232.500652][ T6523] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.651: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 232.599485][ T6523] EXT4-fs (loop2): Remounting filesystem read-only [ 232.627759][ T6538] EXT4-fs error (device loop2): ext4_free_blocks:6232: comm syz.2.651: Freeing blocks not in datazone - block = 0, count = 1 [ 232.705263][ T6538] EXT4-fs (loop2): Remounting filesystem read-only [ 232.958778][ T6551] loop2: detected capacity change from 0 to 16 [ 233.002610][ T6550] loop0: detected capacity change from 0 to 128 [ 233.064281][ T6551] erofs: (device loop2): mounted with root inode @ nid 36. [ 233.111481][ T6550] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.194181][ T6550] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 233.350247][ T6560] tipc: Enabling of bearer rejected, failed to enable media [ 233.416934][ T6550] syz.0.654 (pid 6550) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 238.810653][ T6639] tipc: Enabling of bearer rejected, failed to enable media [ 238.870137][ T6606] No such timeout policy "syz0" [ 238.993641][ T4201] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 239.253781][ T4201] usb 1-1: Using ep0 maxpacket: 16 [ 239.375090][ T4201] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.411315][ T4201] usb 1-1: config 0 has no interfaces? [ 239.440865][ T4201] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 239.466754][ T4201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.475310][ T6664] device syzkaller0 entered promiscuous mode [ 239.528564][ T4201] usb 1-1: config 0 descriptor?? [ 239.719150][ T6671] loop4: detected capacity change from 0 to 16 [ 239.783954][ T26] audit: type=1326 audit(1774050647.727:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.1.674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce605e8799 code=0x0 [ 239.811939][ T4267] usb 1-1: USB disconnect, device number 9 [ 239.852190][ T6671] erofs: (device loop4): mounted with root inode @ nid 36. [ 240.478916][ T6689] loop0: detected capacity change from 0 to 1024 [ 240.532751][ T6689] EXT4-fs (loop0): inline encryption not supported [ 240.569492][ T6689] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.784677][ T6689] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,barrier=0x0000000000000006,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,discard,data_err=ignore,errors=remount-ro,. Quota mode: writeback. [ 240.906382][ T6689] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.964978][ T6689] EXT4-fs (loop0): can't enable nombcache during remount [ 241.183784][ T6675] loop1: detected capacity change from 0 to 40427 [ 241.273029][ T6675] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 241.377698][ T6675] F2FS-fs (loop1): invalid crc value [ 241.706001][ T6675] F2FS-fs (loop1): Found nat_bits in checkpoint [ 242.583687][ T6675] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 243.438828][ T6731] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 243.463795][ T6731] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 243.843129][ T6762] tipc: Enabling of bearer rejected, failed to enable media [ 243.911763][ T6766] loop0: detected capacity change from 0 to 256 [ 244.014292][ T6766] exfat: Unknown parameter 'sys_tz' [ 244.794638][ T6797] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 244.911870][ T6800] loop2: detected capacity change from 0 to 1024 [ 244.930427][ T6804] loop1: detected capacity change from 0 to 512 [ 245.064220][ T6800] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 245.073416][ T6800] EXT4-fs (loop2): Ignoring removed nobh option [ 245.080151][ T6800] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 245.083720][ T6804] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.102947][ T6800] EXT4-fs error (device loop2): ext4_get_journal_inode:5185: inode #8: comm syz.2.701: inode has both inline data and extents flags [ 245.117860][ T6800] EXT4-fs (loop2): no journal found [ 246.056682][ T6833] tipc: Enabling of bearer rejected, failed to enable media [ 246.065791][ T4267] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 246.353642][ T4267] usb 6-1: Using ep0 maxpacket: 16 [ 246.513913][ T4267] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.542030][ T4267] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.810065][ T4267] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.829573][ T4267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.992584][ T4267] usb 6-1: Product: syz [ 247.118003][ T4267] usb 6-1: Manufacturer: syz [ 247.235605][ T4267] usb 6-1: SerialNumber: syz [ 247.543451][ T6863] xt_hashlimit: size too large, truncated to 1048576 [ 247.853788][ T4267] usb 6-1: 0:2 : does not exist [ 247.939887][ T4267] usb 6-1: USB disconnect, device number 2 [ 248.004849][ T4400] udevd[4400]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.177153][ T6845] loop1: detected capacity change from 0 to 40427 [ 248.231408][ T6876] loop2: detected capacity change from 0 to 128 [ 248.249489][ T6845] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 248.291605][ T6845] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 248.527624][ T6880] fuse: Bad value for 'fd' [ 248.703334][ T6884] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.711705][ T6884] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 249.845286][ T6895] tipc: Enabling of bearer rejected, failed to enable media [ 251.063715][ T4201] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 251.383874][ T4233] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 251.433302][ T6920] No such timeout policy "syz0" [ 251.465040][ T4201] usb 3-1: Using ep0 maxpacket: 32 [ 251.604794][ T4201] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 251.738766][ T4201] usb 3-1: config 0 interface 0 has no altsetting 0 [ 251.845895][ T4201] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 251.874244][ T4233] usb 6-1: unable to get BOS descriptor or descriptor too short [ 252.113415][ T4201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.123936][ T4233] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 252.154549][ T4233] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x82 is Bulk; changing to Interrupt [ 252.185142][ T4201] usb 3-1: config 0 descriptor?? [ 252.199633][ T4233] usb 6-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 252.288227][ T4233] usb 6-1: config 1 interface 0 has no altsetting 0 [ 252.545829][ T4233] usb 6-1: string descriptor 0 read error: -22 [ 252.558205][ T4233] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.585493][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.644536][ T6915] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 252.661902][ T6915] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 252.682170][ T6915] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 252.704878][ T4233] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 252.928319][ T4236] usb 6-1: USB disconnect, device number 3 [ 253.034978][ T6926] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'. [ 253.053976][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 253.073188][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.729'. [ 253.097963][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.729'. [ 253.453779][ T4233] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 253.703792][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 253.973959][ T4201] usbhid 3-1:0.0: can't add hid device: -71 [ 253.979999][ T4201] usbhid: probe of 3-1:0.0 failed with error -71 [ 254.235809][ T2239] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 254.252627][ T4201] usb 3-1: USB disconnect, device number 4 [ 254.414460][ T4233] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 254.491217][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.503746][ T2239] usb 6-1: Using ep0 maxpacket: 32 [ 254.654602][ T4233] usb 1-1: Product: syz [ 254.704145][ T2239] usb 6-1: unable to get BOS descriptor or descriptor too short [ 254.740554][ T4233] usb 1-1: Manufacturer: syz [ 254.932164][ T2239] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 254.974320][ T4233] usb 1-1: SerialNumber: syz [ 255.263950][ T2239] usb 6-1: New USB device found, idVendor=0e41, idProduct=3000, bcdDevice= 0.40 [ 255.289317][ T6948] tipc: Enabling of bearer rejected, failed to enable media [ 255.294120][ T2239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.313900][ T2239] usb 6-1: Product: syz [ 255.333646][ T2239] usb 6-1: Manufacturer: syz [ 255.338295][ T2239] usb 6-1: SerialNumber: syz [ 255.544997][ T4233] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 255.564389][ T4233] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 255.647052][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.653463][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.663726][ T4233] usb 1-1: USB disconnect, device number 10 [ 255.703841][ T2239] debugfs: Directory 'card3' with parent 'sound' already present! [ 255.729353][ T4268] udevd[4268]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.789789][ T6960] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.737'. [ 255.821724][ T2239] usb 6-1: USB disconnect, device number 4 [ 255.840680][ T6960] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.737'. [ 256.155189][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.173159][ T6968] loop2: detected capacity change from 0 to 512 [ 256.399041][ T6968] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 256.473818][ T6968] ext4 filesystem being mounted at /142/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.492856][ T6977] loop5: detected capacity change from 0 to 1024 [ 256.651836][ T6987] tipc: Enabling of bearer rejected, failed to enable media [ 256.709009][ T6977] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.807168][ T6977] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.776307][ T7001] loop4: detected capacity change from 0 to 256 [ 257.800116][ T7001] FAT-fs (loop4): Unrecognized mount option "./file1" or missing value [ 257.963069][ T7006] loop0: detected capacity change from 0 to 256 [ 258.074249][ T7011] loop2: detected capacity change from 0 to 256 [ 258.181489][ T7015] loop1: detected capacity change from 0 to 128 [ 258.238278][ T7015] EXT4-fs (loop1): Test dummy encryption mode enabled [ 258.291443][ T7015] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 258.314824][ T7015] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 258.543684][ T2239] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 258.832103][ T7032] loop4: detected capacity change from 0 to 256 [ 258.903971][ T2239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.916556][ T7032] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 258.939842][ T2239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.974798][ T7032] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.000706][ T2239] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 259.043078][ T2239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.100065][ T2239] usb 6-1: config 0 descriptor?? [ 259.252740][ T7034] loop1: detected capacity change from 0 to 512 [ 259.487145][ T7034] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 259.514902][ T7034] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.619966][ T7040] loop4: detected capacity change from 0 to 256 [ 259.686998][ T7040] exfat: Deprecated parameter 'utf8' [ 259.692879][ T7040] exfat: Deprecated parameter 'namecase' [ 259.698945][ T7040] exfat: Deprecated parameter 'namecase' [ 259.794837][ T7040] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 259.955351][ T26] audit: type=1326 audit(1774050667.877:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fac21799 code=0x7ffc0000 [ 260.055043][ T2239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 260.674748][ T2239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 260.682153][ T2239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 260.689525][ T2239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 260.697846][ T2239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 260.705183][ T2239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 260.712339][ T2239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 260.733426][ T2239] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 261.426811][ T26] audit: type=1326 audit(1774050667.877:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fac21799 code=0x7ffc0000 [ 261.494839][ T2239] cp2112 0003:10C4:EA90.0005: error requesting version [ 261.533306][ T2239] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71 [ 261.641676][ T2239] usb 6-1: USB disconnect, device number 5 [ 262.211456][ T7048] fuse: Bad value for 'fd' [ 262.897464][ T7045] fido_id[7045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 262.972319][ T7051] loop5: detected capacity change from 0 to 512 [ 263.005905][ T7055] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 263.079348][ T7055] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 263.206173][ T7051] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 263.253742][ T7051] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.134147][ T7064] loop4: detected capacity change from 0 to 1024 [ 264.301828][ T7064] EXT4-fs error (device loop4): ext4_free_blocks:6232: comm syz.4.766: Freeing blocks not in datazone - block = 0, count = 4096 [ 264.343244][ T7064] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.766: Invalid inode bitmap blk 0 in block_group 0 [ 264.438145][ T7064] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 264.470311][ T7064] EXT4-fs (loop4): 1 orphan inode deleted [ 264.519597][ T7064] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; noblock_validity,nolazytime,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,resgid=0x0000000000000000,dioread_lock,,errors=continue. Quota mode: writeback. [ 264.642853][ T7064] EXT4-fs (loop4): shut down requested (0) [ 264.698624][ T7077] loop2: detected capacity change from 0 to 512 [ 264.908034][ T7084] kvm [7063]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffff [ 265.977872][ T7089] loop0: detected capacity change from 0 to 512 [ 266.222282][ T7077] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 266.253809][ T7077] ext4 filesystem being mounted at /146/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.267975][ T7089] EXT4-fs (loop0): Ignoring removed orlov option [ 266.283633][ T7089] EXT4-fs (loop0): Test dummy encryption mode enabled [ 266.300726][ T7089] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 266.457978][ T7089] EXT4-fs (loop0): 1 truncate cleaned up [ 266.500158][ T7089] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 266.553609][ T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 266.573012][ T26] audit: type=1800 audit(1774050674.507:86): pid=7089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.774" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 266.596885][ T7089] EXT4-fs (loop0): Online defrag not supported for encrypted files [ 266.913930][ T23] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 266.935325][ T23] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.967344][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.103613][ T23] snd-usb-audio: probe of 6-1:27.0 failed with error -2 [ 267.120079][ T7101] fuse: Bad value for 'fd' [ 267.158299][ T4400] udevd[4400]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.290545][ T2239] usb 6-1: USB disconnect, device number 6 [ 267.515740][ T7107] blk_update_request: I/O error, dev loop2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.526750][ T7107] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 268.742896][ T7115] loop5: detected capacity change from 0 to 1024 [ 268.840590][ T7115] EXT4-fs (loop5): Ignoring removed bh option [ 268.918864][ T7115] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 269.066925][ T7127] loop4: detected capacity change from 0 to 512 [ 269.067678][ T7115] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,minixdf,data_err=ignore,nouid32,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 269.127669][ T7127] EXT4-fs (loop4): Invalid want_extra_isize 75 [ 269.492642][ T7130] loop0: detected capacity change from 0 to 256 [ 269.613165][ T7132] loop5: detected capacity change from 0 to 512 [ 269.742438][ T7132] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 269.905390][ T7132] ext4 filesystem being mounted at /36/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.794810][ T7147] chnl_net:caif_netlink_parms(): no params data found [ 271.976682][ T7141] blk_update_request: I/O error, dev loop0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.987791][ T7141] ADFS-fs (loop0): error: unable to read block 3, try 0 [ 272.121783][ T7154] loop5: detected capacity change from 0 to 1024 [ 272.202417][ T7147] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.236055][ T7154] EXT4-fs error (device loop5): ext4_free_blocks:6232: comm syz.5.794: Freeing blocks not in datazone - block = 0, count = 4096 [ 272.263635][ T7147] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.335331][ T7147] device bridge_slave_0 entered promiscuous mode [ 272.403072][ T7154] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.794: Invalid inode bitmap blk 0 in block_group 0 [ 272.434493][ T7147] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.441615][ T7147] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.456919][ T7154] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 272.470901][ T7154] EXT4-fs (loop5): 1 orphan inode deleted [ 272.482396][ T7147] device bridge_slave_1 entered promiscuous mode [ 272.492511][ T7154] EXT4-fs (loop5): mounted filesystem without journal. Opts: ; noblock_validity,nolazytime,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,resgid=0x0000000000000000,dioread_lock,,errors=continue. Quota mode: writeback. [ 272.561109][ T7147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.614052][ T7154] EXT4-fs (loop5): shut down requested (0) [ 272.631567][ T7147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.680749][ T7158] loop0: detected capacity change from 0 to 8192 [ 272.732203][ T7147] team0: Port device team_slave_0 added [ 272.742394][ T7154] kvm [7152]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffff [ 272.808795][ T7147] team0: Port device team_slave_1 added [ 272.893179][ T7147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.926866][ T7147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.053631][ T7147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.131784][ T7147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.160429][ T7147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.259093][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 273.289576][ T7147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.436281][ T7171] loop0: detected capacity change from 0 to 4096 [ 273.539882][ T7171] EXT4-fs (loop0): inline encryption not supported [ 273.567372][ T7171] EXT4-fs (loop0): Test dummy encryption mode enabled [ 273.825506][ T7171] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c09d, mo2=0003] [ 273.943860][ T7147] device hsr_slave_0 entered promiscuous mode [ 274.026734][ T7171] System zones: 0-5 [ 274.199982][ T7171] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,bsdgroups,nombcache,minixdf,,errors=continue. Quota mode: writeback. [ 274.245438][ T7147] device hsr_slave_1 entered promiscuous mode [ 274.282319][ T7147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.317900][ T7147] Cannot create hsr debugfs directory [ 274.594393][ T7180] loop1: detected capacity change from 0 to 512 [ 274.782547][ T7180] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 274.806406][ T7147] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 274.818501][ T7147] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 274.862016][ T7180] ext4 filesystem being mounted at /161/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.887148][ T7147] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 274.933885][ T7147] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.002010][ T7182] loop0: detected capacity change from 0 to 8192 [ 275.324160][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 275.477122][ T7192] usb usb9: usbfs: process 7192 (syz.0.802) did not claim interface 0 before use [ 275.634209][ T7147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.700434][ T6237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.715112][ T6237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.764292][ T7147] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.846802][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.884332][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.922651][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.929808][ T6579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.994173][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.033952][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.066356][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.085262][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.092389][ T6579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.131234][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.171237][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.189832][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.210908][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.226252][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.240920][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.275905][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.286049][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.301250][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.312638][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.326520][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.341543][ T7147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.547592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.563308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.577694][ T7147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.844997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.862190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.896193][ T6237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.913099][ T6237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.922569][ T7147] device veth0_vlan entered promiscuous mode [ 276.940873][ T6237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.957258][ T6237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.010009][ T7147] device veth1_vlan entered promiscuous mode [ 277.213859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.214595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.215224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.215839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.218444][ T7191] blk_update_request: I/O error, dev loop2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.218526][ T7191] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 277.224876][ T7147] device veth0_macvtap entered promiscuous mode [ 277.245655][ T7147] device veth1_macvtap entered promiscuous mode [ 277.364016][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.364040][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.364052][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.364067][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.364078][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.364093][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.364104][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.364118][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.364134][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.364148][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.365556][ T7147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.365687][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.366411][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.367049][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.367675][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.384928][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.384951][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.384964][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.384980][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.384991][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.385006][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.385018][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.385033][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.385049][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.385064][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.401771][ T7147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.410619][ T7147] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.410709][ T7147] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.410741][ T7147] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.410772][ T7147] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.419911][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 277.508682][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.509433][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.546453][ T7210] loop2: detected capacity change from 0 to 1024 [ 277.714514][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.714535][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.714797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.722747][ T7210] EXT4-fs error (device loop2): ext4_free_blocks:6232: comm syz.2.808: Freeing blocks not in datazone - block = 0, count = 4096 [ 277.727810][ T7210] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.808: Invalid inode bitmap blk 0 in block_group 0 [ 277.728087][ T7210] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 277.728302][ T7210] EXT4-fs (loop2): 1 orphan inode deleted [ 277.728324][ T7210] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; noblock_validity,nolazytime,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,resgid=0x0000000000000000,dioread_lock,,errors=continue. Quota mode: writeback. [ 277.777861][ T7210] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.808: Invalid inode table block 0 in block_group 0 [ 277.828809][ T6237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.828833][ T6237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.830283][ T6237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.979311][ T7215] loop5: detected capacity change from 0 to 16 [ 278.342706][ T6339] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.365368][ T7215] erofs: (device loop5): mounted with root inode @ nid 36. [ 278.476827][ T6339] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.602050][ T7217] device syz_tun entered promiscuous mode [ 278.637987][ T7217] device syz_tun left promiscuous mode [ 278.791958][ T7226] No such timeout policy "syz0" [ 279.547467][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 279.669947][ T7230] loop6: detected capacity change from 0 to 1024 [ 279.686279][ T6339] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.740909][ T7235] loop5: detected capacity change from 0 to 512 [ 279.769063][ T7230] EXT4-fs error (device loop6): ext4_free_blocks:6232: comm syz.6.813: Freeing blocks not in datazone - block = 0, count = 4096 [ 279.792391][ T7236] loop2: detected capacity change from 0 to 512 [ 279.819375][ T6339] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.892548][ T7230] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.813: Invalid inode bitmap blk 0 in block_group 0 [ 279.927181][ T7236] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 279.953266][ T7230] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 279.972293][ T7235] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 280.033806][ T7230] EXT4-fs (loop6): 1 orphan inode deleted [ 280.039606][ T7230] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; noblock_validity,nolazytime,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,resgid=0x0000000000000000,dioread_lock,,errors=continue. Quota mode: writeback. [ 280.114344][ T7235] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.242746][ T7230] EXT4-fs (loop6): shut down requested (0) [ 280.396663][ T7245] kvm [7229]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffff [ 280.497379][ T6339] tipc: Left network mode [ 281.082757][ T7251] loop5: detected capacity change from 0 to 8192 [ 281.955765][ T7248] loop2: detected capacity change from 0 to 40427 [ 282.267392][ T7248] F2FS-fs (loop2): Found nat_bits in checkpoint [ 282.478649][ T7288] No such timeout policy "syz0" [ 283.687070][ T7293] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.826'. [ 283.732426][ T7293] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.826'. [ 283.812978][ T7297] loop5: detected capacity change from 0 to 256 [ 283.827922][ T6339] device hsr_slave_0 left promiscuous mode [ 283.906121][ T7297] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 283.906438][ T6339] device hsr_slave_1 left promiscuous mode [ 284.010798][ T7301] loop6: detected capacity change from 0 to 512 [ 284.058059][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.076549][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.211745][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.234034][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.262379][ T6339] device bridge_slave_1 left promiscuous mode [ 284.329813][ T7271] loop0: detected capacity change from 0 to 40427 [ 284.336801][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.202958][ T6339] device bridge_slave_0 left promiscuous mode [ 285.209411][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.226201][ T6339] device veth1_macvtap left promiscuous mode [ 285.254937][ T6339] device veth0_macvtap left promiscuous mode [ 285.261144][ T6339] device veth1_vlan left promiscuous mode [ 285.292564][ T6339] device veth0_vlan left promiscuous mode [ 285.304438][ T7271] F2FS-fs (loop0): invalid crc value [ 285.319051][ T7271] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 285.344259][ T7301] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 285.378204][ T7301] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.679394][ T7318] syz.0.833 uses obsolete (PF_INET,SOCK_PACKET) [ 285.824349][ T7322] xt_hashlimit: size too large, truncated to 1048576 [ 286.535648][ T6339] bond0 (unregistering): Released all slaves [ 286.598116][ T6339] bond1 (unregistering): Released all slaves [ 286.960108][ T7335] hub 9-0:1.0: USB hub found [ 286.968998][ T7335] hub 9-0:1.0: 1 port detected [ 287.804796][ T7337] loop6: detected capacity change from 0 to 256 [ 287.964501][ T7337] exfat: Deprecated parameter 'utf8' [ 287.994155][ T7337] exfat: Deprecated parameter 'namecase' [ 287.999895][ T7337] exfat: Deprecated parameter 'namecase' [ 288.085103][ T6339] team0 (unregistering): Port device team_slave_1 removed [ 288.316281][ T7337] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 288.795426][ T6339] team0 (unregistering): Port device team_slave_0 removed [ 289.083124][ T7347] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.840'. [ 289.111022][ T7347] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.840'. [ 289.695366][ T7360] loop1: detected capacity change from 0 to 1024 [ 289.742147][ T7360] EXT4-fs (loop1): inline encryption not supported [ 289.759277][ T7360] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.860752][ T7360] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,noquota,grpquota,init_itable,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 290.266733][ T7377] tipc: Enabled bearer , priority 0 [ 290.285744][ T7377] device syzkaller0 entered promiscuous mode [ 290.338541][ T7377] tipc: Resetting bearer [ 290.396588][ T7376] tipc: Resetting bearer [ 290.467224][ T7376] tipc: Disabling bearer [ 291.220630][ T7384] loop1: detected capacity change from 0 to 512 [ 291.548868][ T7384] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 291.578286][ T7384] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 291.705241][ T7384] System zones: 0-1, 15-15, 18-18, 34-34 [ 291.779390][ T7384] EXT4-fs (loop1): orphan cleanup on readonly fs [ 292.076995][ T7384] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 292.407822][ T7384] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 292.498792][ T7410] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.853'. [ 292.533663][ T7384] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 292.549939][ T7406] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.853'. [ 292.565209][ T7384] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.849: bad orphan inode 16 [ 292.624911][ T7384] ext4_test_bit(bit=15, block=18) = 1 [ 292.630345][ T7384] is_bad_inode(inode)=0 [ 292.724471][ T7384] NEXT_ORPHAN(inode)=0 [ 292.728603][ T7384] max_ino=32 [ 292.773283][ T7413] blk_update_request: I/O error, dev loop0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.785589][ T7413] ADFS-fs (loop0): error: unable to read block 3, try 0 [ 292.806611][ T7384] i_nlink=2 [ 292.809898][ T7384] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 292.907276][ T7384] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 293.219731][ T7424] loop1: detected capacity change from 0 to 2048 [ 293.281120][ T7429] loop2: detected capacity change from 0 to 128 [ 293.456509][ T7424] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 293.903757][ T7442] loop0: detected capacity change from 0 to 256 [ 294.053720][ T26] audit: type=1800 audit(1774050701.937:87): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.858" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 294.096549][ T7442] exfat: Deprecated parameter 'utf8' [ 294.102364][ T7442] exfat: Deprecated parameter 'namecase' [ 294.108388][ T7442] exfat: Deprecated parameter 'namecase' [ 294.169148][ T7442] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 295.551610][ T7453] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 296.088965][ T7463] loop1: detected capacity change from 0 to 512 [ 296.565836][ T7466] netlink: 48 bytes leftover after parsing attributes in process `syz.0.864'. [ 296.834013][ T7463] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 296.865032][ T7472] loop0: detected capacity change from 0 to 8192 [ 296.886952][ T7463] ext4 filesystem being mounted at /173/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.289582][ T7487] loop2: detected capacity change from 0 to 256 [ 297.342071][ T7486] device batadv0 entered promiscuous mode [ 297.436723][ T7486] device vlan2 entered promiscuous mode [ 297.491351][ T7487] FAT-fs (loop2): Directory bread(block 64) failed [ 297.504122][ T7487] FAT-fs (loop2): Directory bread(block 65) failed [ 297.524529][ T7490] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.871'. [ 297.530460][ T7487] FAT-fs (loop2): Directory bread(block 66) failed [ 297.562289][ T7487] FAT-fs (loop2): Directory bread(block 67) failed [ 297.587637][ T7487] FAT-fs (loop2): Directory bread(block 68) failed [ 297.608130][ T7487] FAT-fs (loop2): Directory bread(block 69) failed [ 297.622240][ T7492] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.871'. [ 297.644531][ T7487] FAT-fs (loop2): Directory bread(block 70) failed [ 297.694753][ T7487] FAT-fs (loop2): Directory bread(block 71) failed [ 297.701507][ T7487] FAT-fs (loop2): Directory bread(block 72) failed [ 297.782597][ T7487] FAT-fs (loop2): Directory bread(block 73) failed [ 298.935413][ T7487] attempt to access beyond end of device [ 298.935413][ T7487] loop2: rw=524288, want=1772, limit=256 [ 299.055196][ T7487] attempt to access beyond end of device [ 299.055196][ T7487] loop2: rw=0, want=1772, limit=256 [ 299.170654][ T26] audit: type=1800 audit(1774050707.107:88): pid=7487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.870" name="file1" dev="loop2" ino=1048626 res=0 errno=0 [ 299.993955][ T7487] loop2: detected capacity change from 256 to 0 [ 300.026864][ C0] blk_update_request: I/O error, dev loop2, sector 1768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.050675][ T26] audit: type=1800 audit(1774050707.987:89): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.870" name="file1" dev="loop2" ino=1048626 res=0 errno=0 [ 300.080180][ C0] blk_update_request: I/O error, dev loop2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.194665][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.884'. [ 300.299592][ C0] blk_update_request: I/O error, dev loop2, sector 20 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.311784][ T7546] loop5: detected capacity change from 0 to 1024 [ 301.322208][ C1] blk_update_request: I/O error, dev loop2, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.361945][ C1] blk_update_request: I/O error, dev loop2, sector 28 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.372401][ T7547] loop1: detected capacity change from 0 to 1024 [ 301.378781][ C1] blk_update_request: I/O error, dev loop2, sector 32 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.422361][ C1] blk_update_request: I/O error, dev loop2, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.427600][ T7549] loop0: detected capacity change from 0 to 1024 [ 301.440059][ T7546] EXT4-fs (loop5): Ignoring removed nobh option [ 301.463993][ C1] blk_update_request: I/O error, dev loop2, sector 40 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.501768][ C1] blk_update_request: I/O error, dev loop2, sector 44 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.543834][ C1] blk_update_request: I/O error, dev loop2, sector 48 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.594183][ T7549] EXT4-fs (loop0): Ignoring removed orlov option [ 301.662151][ T7546] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,resgid=0x0000000000000000,nobh,,errors=continue. Quota mode: none. [ 301.688598][ T7565] capability: warning: `syz.6.891' uses 32-bit capabilities (legacy support in use) [ 301.698439][ T7546] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.730043][ T7565] program syz.6.891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.741434][ T7547] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 301.787718][ T7549] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 301.849254][ T7546] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.886: bg 0: block 112: padding at end of block bitmap is not set [ 301.869791][ T7547] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 32: comm syz.1.888: bad entry in directory: directory entry overrun - offset=0, inode=11, rec_len=63756, size=1024 fake=0 [ 301.960270][ T7546] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 117 [ 301.990956][ T7547] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz.1.888: directory missing '.' [ 302.029314][ T7546] EXT4-fs (loop5): This should not happen!! Data will be lost [ 302.029314][ T7546] [ 302.180575][ T26] audit: type=1326 audit(1774050710.117:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.6.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46da1ce799 code=0x7ffc0000 [ 302.253597][ T4848] FAT-fs (loop2): unable to read inode block for updating (i_pos 324) [ 302.328848][ T4197] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 302.353122][ T26] audit: type=1326 audit(1774050710.147:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.6.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46da1ce799 code=0x7ffc0000 [ 302.497838][ T26] audit: type=1326 audit(1774050710.147:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.6.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f46da1ce799 code=0x7ffc0000 [ 302.675497][ T26] audit: type=1326 audit(1774050710.147:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.6.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46da1ce799 code=0x7ffc0000 [ 302.803253][ T26] audit: type=1326 audit(1774050710.147:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.6.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46da1ce799 code=0x7ffc0000 [ 303.575927][ T26] audit: type=1326 audit(1774050710.147:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.6.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f46da1ce799 code=0x7ffc0000 [ 303.598580][ T26] audit: type=1326 audit(1774050710.147:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.6.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46da1ce799 code=0x7ffc0000 [ 303.621359][ T26] audit: type=1326 audit(1774050710.147:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.6.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46da1ce799 code=0x7ffc0000 [ 303.802111][ T7602] loop5: detected capacity change from 0 to 512 [ 303.831234][ T6339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.920099][ T7602] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 304.021097][ T6339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.090872][ T7607] No such timeout policy "syz0" [ 305.170779][ T7602] EXT4-fs (loop5): 1 truncate cleaned up [ 305.178673][ T7602] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 305.301345][ T6339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.591522][ T6339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.732236][ T7646] netlink: 'syz.5.914': attribute type 10 has an invalid length. [ 306.774771][ T7646] team0: Port device netdevsim0 added [ 307.713273][ T6339] tipc: Left network mode [ 307.858260][ T7640] chnl_net:caif_netlink_parms(): no params data found [ 308.180084][ T7665] loop0: detected capacity change from 0 to 256 [ 308.227158][ T7665] exfat: Deprecated parameter 'utf8' [ 308.233121][ T7665] exfat: Deprecated parameter 'namecase' [ 308.239257][ T7665] exfat: Deprecated parameter 'namecase' [ 308.302498][ T7665] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 308.771045][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 309.049646][ T7669] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.229675][ T7669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.237550][ T7669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.448368][ T7640] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.463872][ T7640] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.503098][ T7640] device bridge_slave_0 entered promiscuous mode [ 309.568480][ T7640] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.620395][ T7640] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.672195][ T7640] device bridge_slave_1 entered promiscuous mode [ 309.867452][ T7640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.031624][ T7640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.220572][ T7640] team0: Port device team_slave_0 added [ 310.308914][ T7640] team0: Port device team_slave_1 added [ 310.436480][ T7640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.462729][ T7640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.530816][ T7640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.555984][ T7640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.573213][ T7640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.640224][ T7640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.842590][ T7640] device hsr_slave_0 entered promiscuous mode [ 310.849504][ T2239] Bluetooth: hci4: command 0x041b tx timeout [ 310.879751][ T7640] device hsr_slave_1 entered promiscuous mode [ 310.900294][ T7640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.930259][ T7640] Cannot create hsr debugfs directory [ 310.956881][ T7694] loop0: detected capacity change from 0 to 8192 [ 311.029675][ T4400] loop0: p1 p2 p3 p4 [ 311.035127][ T4400] loop0: partition table partially beyond EOD, truncated [ 311.049051][ T6339] device hsr_slave_0 left promiscuous mode [ 311.079193][ T6339] device hsr_slave_1 left promiscuous mode [ 311.090956][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.110902][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.123087][ T4400] loop0: p3 start 117772289 is beyond EOD, truncated [ 311.136526][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.155712][ T4400] loop0: p4 size 720896 extends beyond EOD, truncated [ 311.165494][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.214134][ T6339] device bridge_slave_1 left promiscuous mode [ 311.249896][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.267084][ T7694] loop0: p1 p2 p3 p4 [ 311.271310][ T7694] loop0: partition table partially beyond EOD, truncated [ 311.294945][ T6339] device bridge_slave_0 left promiscuous mode [ 311.301318][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.344660][ T7694] loop0: p3 start 117772289 is beyond EOD, truncated [ 311.351510][ T7694] loop0: p4 size 720896 extends beyond EOD, truncated [ 311.397667][ T6339] device veth1_macvtap left promiscuous mode [ 311.423749][ T6339] device veth0_macvtap left promiscuous mode [ 311.429994][ T6339] device veth1_vlan left promiscuous mode [ 311.462012][ T6339] device veth0_vlan left promiscuous mode [ 311.830778][ T6835] udevd[6835]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 311.831173][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 311.870032][ T4400] udevd[4400]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 311.958075][ T6835] udevd[6835]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 311.976867][ T4400] udevd[4400]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 311.996390][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 312.391742][ T6339] team0 (unregistering): Port device team_slave_1 removed [ 312.443380][ T6339] team0 (unregistering): Port device team_slave_0 removed [ 312.646417][ T7719] loop0: detected capacity change from 0 to 1024 [ 312.760069][ T7719] EXT4-fs (loop0): Ignoring removed orlov option [ 312.770491][ T7719] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 312.859102][ T7719] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,orlov,noauto_da_alloc,noauto_da_alloc,stripe=0x0000000000000008,norecovery,dioread_nolock,grpquota,discard,user_xattr,mb_optimize_scan=0x0000000000000001,barrier=0x0000000000000990,nobarrier,,errors=continue. Quota mode: writeback. [ 312.923695][ T2239] Bluetooth: hci4: command 0x040f tx timeout [ 313.194824][ T7719] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3885: comm syz.0.926: Allocating blocks 497-513 which overlap fs metadata [ 313.267139][ T7719] EXT4-fs (loop0): pa ffff8880740e8e00: logic 131328, phys. 449, len 4 [ 313.275893][ T7719] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 313.436466][ T7640] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 313.464891][ T7640] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 313.503385][ T7640] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 313.565551][ T7640] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 313.853891][ T7640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.915427][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.954556][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.019329][ T7640] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.081877][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.135357][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.173818][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.180938][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.218901][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.262688][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.292133][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.312709][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.319856][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.370300][ T7746] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 314.396195][ T7746] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 314.467466][ T7746] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 314.509066][ T7746] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 314.539597][ T7746] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 314.571046][ T7746] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 314.606881][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.672163][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.722470][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.756562][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.816431][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.877681][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.898469][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.928820][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.956864][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.003636][ T2239] Bluetooth: hci4: command 0x0419 tx timeout [ 315.011958][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.055581][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.096409][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.476190][ T7762] loop0: detected capacity change from 0 to 4096 [ 315.615910][ T7762] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 315.741142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.759474][ T7762] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.933: corrupted inode contents [ 315.773894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.786545][ T7773] loop5: detected capacity change from 0 to 128 [ 315.798322][ T7640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.839275][ T7773] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 315.906983][ T7762] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #15: comm syz.0.933: mark_inode_dirty error [ 315.957370][ T7773] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 315.984354][ T7762] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.933: corrupted inode contents [ 316.092389][ T7786] netlink: 'syz.6.938': attribute type 1 has an invalid length. [ 316.103874][ T7762] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.933: mark_inode_dirty error [ 316.192838][ T4243] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 316.201631][ T7762] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.933: corrupted inode contents [ 316.225664][ T7786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.275464][ T7762] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.933: mark_inode_dirty error [ 316.323819][ T7790] bond1: (slave veth3): Enslaving as an active interface with a down link [ 316.349783][ T7762] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.933: corrupted inode contents [ 316.465500][ T7762] EXT4-fs error (device loop0): ext4_truncate:4279: inode #15: comm syz.0.933: mark_inode_dirty error [ 316.523463][ T7786] device veth0_to_bond entered promiscuous mode [ 316.547391][ T7762] EXT4-fs error (device loop0) in ext4_setattr:5626: Corrupt filesystem [ 316.560969][ T7786] device veth0_to_bond left promiscuous mode [ 316.636141][ T7786] bond1: (slave vlan2): making interface the new active one [ 316.675220][ T7786] device veth0_to_bond entered promiscuous mode [ 316.704745][ T7786] device vlan2 entered promiscuous mode [ 316.763393][ T7786] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 316.778546][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 316.965297][ T7813] autofs4:pid:7813:autofs_fill_super: called with bogus options [ 317.088037][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.097641][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.214715][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 317.249535][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 317.629516][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.792157][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.142445][ T7640] device veth0_vlan entered promiscuous mode [ 318.173744][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.194929][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.213799][ T7640] device veth1_vlan entered promiscuous mode [ 318.361348][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.400551][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.437808][ T7640] device veth0_macvtap entered promiscuous mode [ 318.478960][ T7640] device veth1_macvtap entered promiscuous mode [ 318.674161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.522595][ T4236] Bluetooth: hci0: command 0x0406 tx timeout [ 319.544339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 319.606811][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.822893][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.843873][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.908364][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.965339][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.012265][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.059469][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.096724][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.148736][ T7640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.245464][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.271518][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.346992][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.413525][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.448908][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.509824][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.550344][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.594632][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.633679][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.702279][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.754056][ T7640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.774413][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.841427][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.890356][ T7640] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.953580][ T7640] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.962683][ T7640] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.023617][ T7640] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.288354][ T7898] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.335168][ T7897] device syzkaller0 entered promiscuous mode [ 323.368499][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.380711][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.537329][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 323.604292][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.612265][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.724864][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.108844][ T7924] print_req_error: 407 callbacks suppressed [ 324.108883][ T7924] blk_update_request: I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.126900][ T7924] ADFS-fs (loop6): error: unable to read block 3, try 0 [ 327.197409][ T7930] loop6: detected capacity change from 0 to 1024 [ 327.217836][ T7929] loop1: detected capacity change from 0 to 512 [ 327.384031][ T7930] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 327.395495][ T7929] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 327.464595][ T7929] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.643522][ T26] audit: type=1326 audit(1774050735.567:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce605e8799 code=0x7ffc0000 [ 327.725230][ T26] audit: type=1326 audit(1774050735.597:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce605e8799 code=0x7ffc0000 [ 327.843537][ T26] audit: type=1326 audit(1774050735.597:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce605e8799 code=0x7ffc0000 [ 327.927972][ T26] audit: type=1326 audit(1774050735.597:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fce605e8799 code=0x7ffc0000 [ 328.083394][ T26] audit: type=1326 audit(1774050735.597:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce605e8799 code=0x7ffc0000 [ 328.112276][ T26] audit: type=1326 audit(1774050735.597:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce605e8799 code=0x7ffc0000 [ 328.763686][ T26] audit: type=1326 audit(1774050735.607:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fce605e8799 code=0x7ffc0000 [ 328.919662][ T26] audit: type=1326 audit(1774050735.607:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fce605e8799 code=0x7ffc0000 [ 328.941994][ T26] audit: type=1326 audit(1774050735.867:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.7.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2a7a799 code=0x7ffc0000 [ 329.007253][ T26] audit: type=1326 audit(1774050735.867:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.7.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2a7a799 code=0x7ffc0000 [ 330.354550][ T7984] loop1: detected capacity change from 0 to 1024 [ 330.574573][ T7984] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,errors=remount-ro,resgid=0x0000000000000000,barrier,auto_da_alloc,nodelalloc,. Quota mode: none. [ 330.591462][ T7987] loop7: detected capacity change from 0 to 136 [ 330.673802][ T7984] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.039306][ T7999] loop7: detected capacity change from 0 to 128 [ 331.455162][ T8005] loop1: detected capacity change from 0 to 4096 [ 334.144916][ T8005] EXT4-fs: failed to create workqueue [ 334.150359][ T8005] EXT4-fs (loop1): mount failed [ 335.434415][ T8013] futex_wake_op: syz.1.995 tries to shift op by 32; fix this program [ 335.571369][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.995'. [ 335.580487][ T8026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.995'. [ 336.713628][ T4848] device vlan2 left promiscuous mode [ 337.819849][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1008'. [ 338.128208][ T8072] loop6: detected capacity change from 0 to 164 [ 338.229978][ T8072] rock: directory entry would overflow storage [ 338.262690][ T8072] rock: sig=0x5252, size=5, remaining=3 [ 338.375586][ T8081] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 339.333415][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1019'. [ 340.358303][ T8129] loop5: detected capacity change from 0 to 512 [ 340.711031][ T8129] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 340.804529][ T8129] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.604921][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1030'. [ 341.763279][ T8152] sch_tbf: burst 12 is lower than device bridge1 mtu (1514) ! [ 342.438513][ T8167] xt_hashlimit: size too large, truncated to 1048576 [ 342.490967][ T8168] device syzkaller1 entered promiscuous mode [ 343.634778][ T8191] tipc: Enabling of bearer rejected, failed to enable media [ 343.685987][ T8196] device syzkaller0 entered promiscuous mode [ 344.097723][ T8178] chnl_net:caif_netlink_parms(): no params data found [ 344.205751][ T8216] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 344.449582][ T4354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.486953][ T8178] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.507451][ T8178] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.533895][ T8178] device bridge_slave_0 entered promiscuous mode [ 344.564714][ T8178] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.590979][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.608966][ T8178] device bridge_slave_1 entered promiscuous mode [ 344.673400][ T4354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.762312][ T8178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.809402][ T8178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.899840][ T4354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.041879][ T8178] team0: Port device team_slave_0 added [ 345.110886][ T4354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.163991][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 345.189902][ T8178] team0: Port device team_slave_1 added [ 345.303230][ T8178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.340935][ T8178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.502145][ T8178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.548707][ T8178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.572271][ T8178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.633604][ T8178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.916485][ T8178] device hsr_slave_0 entered promiscuous mode [ 345.950337][ T8178] device hsr_slave_1 entered promiscuous mode [ 346.001306][ T8178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.043599][ T8178] Cannot create hsr debugfs directory [ 346.049386][ T4354] tipc: Left network mode [ 346.684373][ T8178] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 346.762591][ T8178] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 346.856254][ T8178] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 346.966608][ T8178] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 347.244509][ T4201] Bluetooth: hci5: command 0x041b tx timeout [ 347.275971][ T8178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.356032][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.553935][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.667476][ T8178] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.896824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.914791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.953417][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.960578][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.004301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.035966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.069239][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.076410][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.104584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.124410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.148260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.175797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.194533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.214819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.234416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.250259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.269125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.289415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.314568][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.343885][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.436097][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.480072][ T4354] device hsr_slave_0 left promiscuous mode [ 348.511473][ T4354] device hsr_slave_1 left promiscuous mode [ 348.528912][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.553328][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.591299][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.603633][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.621680][ T4354] device bridge_slave_1 left promiscuous mode [ 348.659258][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.688511][ T4354] device bridge_slave_0 left promiscuous mode [ 348.713787][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.762646][ T4354] device veth1_macvtap left promiscuous mode [ 348.780456][ T4354] device veth0_macvtap left promiscuous mode [ 348.790654][ T4354] device veth1_vlan left promiscuous mode [ 348.803088][ T4354] device veth0_vlan left promiscuous mode [ 349.189325][ T8317] loop6: detected capacity change from 0 to 2048 [ 349.404611][ T4229] Bluetooth: hci5: command 0x040f tx timeout [ 349.516889][ T8317] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 349.672613][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 349.672888][ T26] audit: type=1800 audit(1774051013.507:138): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1066" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 349.979555][ T4354] bond0 (unregistering): Released all slaves [ 349.990542][ T8323] xt_hashlimit: size too large, truncated to 1048576 [ 350.018355][ T4354] bond2 (unregistering): Released all slaves [ 350.072818][ T4354] bond1 (unregistering): Released all slaves [ 350.162677][ T8324] xt_hashlimit: size too large, truncated to 1048576 [ 350.195784][ T8324] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 350.236246][ T8329] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 350.442220][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 350.493778][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 350.838341][ T8307] tipc: Enabling of bearer rejected, failed to enable media [ 350.855009][ T8308] device syzkaller0 entered promiscuous mode [ 351.420826][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 351.429438][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.446939][ T8178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.966346][ T4201] Bluetooth: hci5: command 0x0419 tx timeout [ 354.176862][ T6339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 354.191690][ T6339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.307089][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.335658][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.384705][ T8393] tipc: Enabling of bearer rejected, failed to enable media [ 354.431056][ T8178] device veth0_vlan entered promiscuous mode [ 354.462017][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.491975][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.615803][ T8389] device syzkaller0 entered promiscuous mode [ 354.737908][ T8178] device veth1_vlan entered promiscuous mode [ 355.457761][ T8400] loop5: detected capacity change from 0 to 128 [ 355.498375][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 355.703675][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.725130][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.777405][ T8178] device veth0_macvtap entered promiscuous mode [ 355.817195][ T8178] device veth1_macvtap entered promiscuous mode [ 355.945926][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.989590][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.989619][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.989638][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.989659][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.989674][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.989695][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.989709][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.995005][ T8178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.997900][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.997922][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.997935][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.997955][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.997968][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.997983][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.997997][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.998011][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.020009][ T8178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.113146][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 356.114175][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 356.114819][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 356.115452][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.116093][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 356.116765][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 356.119772][ T8178] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.119809][ T8178] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.119840][ T8178] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.119871][ T8178] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.405819][ T6237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.405842][ T6237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.406095][ T6237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 356.506984][ T6579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.507007][ T6579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.507246][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 356.879492][ T8007] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 356.897053][ T8007] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 358.856890][ T8482] tipc: Enabling of bearer rejected, failed to enable media [ 358.904479][ T8482] device syzkaller0 entered promiscuous mode [ 359.453143][ T8490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.505519][ T8490] device batadv_slave_0 entered promiscuous mode [ 360.841053][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1103'. [ 361.048203][ T8520] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1104'. [ 361.069151][ T8513] device bond1 entered promiscuous mode [ 361.386820][ T8513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.871440][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1103'. [ 361.966723][ T8517] device macsec1 entered promiscuous mode [ 363.188738][ T8538] tipc: Enabling of bearer rejected, failed to enable media [ 363.218922][ T8538] device syzkaller0 entered promiscuous mode [ 363.810755][ T8549] loop6: detected capacity change from 0 to 4096 [ 363.957349][ T8549] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 364.189436][ T8558] blk_update_request: I/O error, dev loop8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.200939][ T8558] ADFS-fs (loop8): error: unable to read block 3, try 0 [ 364.933928][ T8549] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #15: comm syz.6.1110: corrupted inode contents [ 365.067368][ T8549] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #15: comm syz.6.1110: mark_inode_dirty error [ 365.142106][ T8549] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #15: comm syz.6.1110: corrupted inode contents [ 365.301421][ T8549] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #15: comm syz.6.1110: mark_inode_dirty error [ 365.407102][ T8549] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #15: comm syz.6.1110: corrupted inode contents [ 365.458118][ T8549] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #15: comm syz.6.1110: mark_inode_dirty error [ 365.511694][ T8549] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #15: comm syz.6.1110: corrupted inode contents [ 365.578748][ T8549] EXT4-fs error (device loop6): ext4_truncate:4279: inode #15: comm syz.6.1110: mark_inode_dirty error [ 365.621434][ T8549] EXT4-fs error (device loop6) in ext4_setattr:5626: Corrupt filesystem [ 365.690372][ T8549] syz.6.1110 (8549) used greatest stack depth: 20504 bytes left [ 366.261395][ T26] audit: type=1326 audit(1774051030.197:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.8.1118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe64bf44799 code=0x0 [ 366.353797][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1119'. [ 367.103910][ T8588] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.113357][ T8588] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.366861][ T8588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.418734][ T8588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.894990][ T8588] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.904042][ T8588] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.912916][ T8588] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.922486][ T8588] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.076444][ T8607] tipc: Enabling of bearer rejected, failed to enable media [ 370.368444][ T8588] syz.6.1119 (8588) used greatest stack depth: 19792 bytes left [ 371.669776][ T8638] blk_update_request: I/O error, dev loop8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 371.681011][ T8638] ADFS-fs (loop8): error: unable to read block 3, try 0 [ 373.609247][ T6237] [ 373.612300][ T6237] ============================= [ 373.617236][ T6237] WARNING: suspicious RCU usage [ 373.622100][ T6237] syzkaller #0 Not tainted [ 373.626576][ T6237] ----------------------------- [ 373.631460][ T6237] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 373.639927][ T6237] [ 373.639927][ T6237] other info that might help us debug this: [ 373.639927][ T6237] [ 373.650223][ T6237] [ 373.650223][ T6237] rcu_scheduler_active = 2, debug_locks = 1 [ 373.658344][ T6237] 8 locks held by kworker/u4:15/6237: [ 373.663765][ T6237] #0: ffff888079401138 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 373.674754][ T6237] #1: ffffc9000325fd00 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 373.687628][ T6237] #2: ffff88801c17b9b8 (&peer->endpoint_lock){++-.}-{2:2}, at: wg_socket_send_skb_to_peer+0x50/0x1c0 [ 373.698783][ T6237] #3: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 373.708458][ T6237] #4: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 373.718119][ T6237] #5: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 373.727794][ T6237] #6: ffff88805be14908 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2a/0x2f80 [ 373.737456][ T6237] #7: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 373.746851][ T6237] [ 373.746851][ T6237] stack backtrace: [ 373.752786][ T6237] CPU: 1 PID: 6237 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 373.760446][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.770613][ T6237] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 373.777605][ T6237] Call Trace: [ 373.780911][ T6237] [ 373.783869][ T6237] dump_stack_lvl+0x188/0x250 [ 373.788574][ T6237] ? load_image+0x400/0x400 [ 373.793098][ T6237] ? show_regs_print_info+0x20/0x20 [ 373.798338][ T6237] ? lockdep_rcu_suspicious+0x110/0x180 [ 373.803941][ T6237] qdisc_lookup+0xa6/0x650 [ 373.808397][ T6237] qdisc_tree_reduce_backlog+0x190/0x430 [ 373.814086][ T6237] pfifo_tail_enqueue+0x372/0x4d0 [ 373.819186][ T6237] tbf_enqueue+0x224/0x6e0 [ 373.823642][ T6237] ? __rwlock_init+0x140/0x140 [ 373.828448][ T6237] dev_qdisc_enqueue+0x48/0x210 [ 373.833337][ T6237] __dev_queue_xmit+0xc25/0x2f80 [ 373.838332][ T6237] ? udp_tunnel6_xmit_skb+0x4dd/0x8f0 [ 373.843746][ T6237] ? dev_queue_xmit+0x20/0x20 [ 373.848448][ T6237] ? mark_lock+0x94/0x320 [ 373.852812][ T6237] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 373.858830][ T6237] ? lock_chain_count+0x20/0x20 [ 373.863727][ T6237] ? __ipv6_neigh_lookup_noref+0x61d/0x7d0 [ 373.869573][ T6237] ? ip6_finish_output2+0xcb6/0x1510 [ 373.874897][ T6237] ? ip6_finish_output2+0xe80/0x1510 [ 373.880265][ T6237] ip6_finish_output2+0x1051/0x1510 [ 373.885632][ T6237] ? nf_hook+0x360/0x360 [ 373.889916][ T6237] ? ip6_finish_output+0x64c/0x7d0 [ 373.895078][ T6237] udp_tunnel6_xmit_skb+0x4dd/0x8f0 [ 373.900420][ T6237] send6+0x5ab/0x8d0 [ 373.904369][ T6237] ? send4+0xdc0/0xdc0 [ 373.908476][ T6237] ? __local_bh_disable_ip+0x111/0x1a0 [ 373.913991][ T6237] wg_socket_send_skb_to_peer+0x10d/0x1c0 [ 373.919750][ T6237] wg_packet_handshake_send_worker+0x203/0x340 [ 373.925949][ T6237] ? wg_prev_queue_dequeue+0x220/0x220 [ 373.931469][ T6237] ? preempt_schedule_thunk+0x16/0x18 [ 373.936885][ T6237] process_one_work+0x85f/0x1010 [ 373.941880][ T6237] ? worker_detach_from_pool+0x240/0x240 [ 373.947543][ T6237] ? lockdep_hardirqs_off+0x70/0x100 [ 373.952869][ T6237] ? _raw_spin_lock_irq+0xb7/0xf0 [ 373.957927][ T6237] ? _raw_spin_lock_irqsave+0x100/0x100 [ 373.963509][ T6237] ? wq_worker_running+0x97/0x170 [ 373.968566][ T6237] worker_thread+0xaa6/0x1290 [ 373.973295][ T6237] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 373.979235][ T6237] kthread+0x436/0x520 [ 373.983335][ T6237] ? rcu_lock_release+0x20/0x20 [ 373.988219][ T6237] ? kthread_blkcg+0xd0/0xd0 [ 373.992840][ T6237] ret_from_fork+0x1f/0x30 [ 373.997307][ T6237] [ 378.526506][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.532852][ T1419] ieee802154 phy1 wpan1: encryption failed: -22