last executing test programs: 3m1.586799373s ago: executing program 2 (id=37): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 3m0.549461974s ago: executing program 2 (id=41): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) io_setup(0x2007, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[0x0]) shutdown(0xffffffffffffffff, 0x0) 3m0.313970218s ago: executing program 2 (id=44): r0 = socket(0xa, 0x3, 0xff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000102, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 2m59.23842892s ago: executing program 2 (id=45): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4008800) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020) 2m58.272695306s ago: executing program 2 (id=48): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x141b82, 0xa9) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x737, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) pipe(0x0) 2m57.917694667s ago: executing program 2 (id=51): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[], 0x1, 0x2c7, &(0x7f0000000980)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 2m57.123287283s ago: executing program 32 (id=51): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[], 0x1, 0x2c7, &(0x7f0000000980)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 1m47.066943214s ago: executing program 3 (id=291): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 1m46.128145988s ago: executing program 3 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) setgroups(0x0, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000007000000040000000200000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000a38513cad841ad69da16f9f1c0f4677af23b31950129283c5afb1e66b89b20b242092c5a35413bff4ffa618bf40dca5a540e31c924638314fcf474b472dec1874a675dc26735af253b966026a1eddb3f47924f6b35771e2b4175e4d8947dfc4a7809069f0"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) ioctl$RTC_AIE_ON(r5, 0x7001) 1m44.941404098s ago: executing program 3 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x5498a8b52a905021) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) llistxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x8c) open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) 1m44.776784117s ago: executing program 3 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/78, 0x4e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001800010000000000000000001d010000150003000000000000000000dd5f392602cc30570500000008000500f8"], 0x154}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x40, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @local, @multicast1}}}}) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000780)={0x0, 0x3938700}, 0x0, 0x0) 1m43.577058067s ago: executing program 3 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 1m43.484404843s ago: executing program 3 (id=307): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) socket$packet(0x11, 0x3, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setuid(0xee01) 1m39.282335357s ago: executing program 5 (id=322): syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x80}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x1, 0x4}, @selector_unit={0x5, 0x24, 0x5, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x307, 0x0, 0x4, 0x7}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, '\x00'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@can_newroute={0x2c, 0x18, 0x400, 0x70bd26, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "6968bf825d5d39c0"}, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 1m38.077206788s ago: executing program 5 (id=326): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x9) 1m34.389554452s ago: executing program 5 (id=329): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 1m34.360642144s ago: executing program 5 (id=332): r0 = socket$inet(0x2, 0x3, 0x6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000440)) 1m34.272234399s ago: executing program 5 (id=333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) setgroups(0x0, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 1m33.335407333s ago: executing program 5 (id=334): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x7}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x8, 0x1, 0x0, 0x0, 0x7, 0x6}, 0x2, {0x905, 0x2000, 0x3, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}}}, 0x0) 1m26.997865803s ago: executing program 33 (id=307): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) socket$packet(0x11, 0x3, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setuid(0xee01) 1m17.60506433s ago: executing program 34 (id=334): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x7}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x8, 0x1, 0x0, 0x0, 0x7, 0x6}, 0x2, {0x905, 0x2000, 0x3, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}}}, 0x0) 10.864193717s ago: executing program 1 (id=594): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd, @fda={0x66646185, 0x2, 0x0, 0x15}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 10.656282329s ago: executing program 1 (id=600): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000014c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x503, 0x1, 0x6, 0x2, 0x4b0c5a7b, 0xc, "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"}}, 0x61b) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/78, 0x4e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001800010000000000000000001d010000150003000000000000000000dd5f392602cc30570500000008000500f8"], 0x154}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x40, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @local, @multicast1}}}}) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000780)={0x0, 0x3938700}, 0x0, 0x0) 5.296255772s ago: executing program 6 (id=633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x42800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x1000) 4.272348011s ago: executing program 1 (id=637): unshare(0x22020400) r0 = socket(0x2b, 0x80801, 0x1) bind$unix(r0, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) 3.95213292s ago: executing program 1 (id=640): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 3.796112239s ago: executing program 1 (id=644): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) io_setup(0x2007, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[0x0]) shutdown(0xffffffffffffffff, 0x0) 3.547868973s ago: executing program 1 (id=647): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000014c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x503, 0x1, 0x6, 0x2, 0x4b0c5a7b, 0xc, "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"}}, 0x61b) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/78, 0x4e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001800010000000000000000001d010000150003000000000000000000dd5f392602cc30570500000008000500f8"], 0x154}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x40, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @local, @multicast1}}}}) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000780)={0x0, 0x3938700}, 0x0, 0x0) 3.364345944s ago: executing program 7 (id=650): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E']) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)=ANY=[@ANYBLOB='nr_inodes=6\x00']) 3.136295027s ago: executing program 7 (id=653): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x60}}, 0x8004) 3.08544597s ago: executing program 0 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r4, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e686", 0xcd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.982485496s ago: executing program 7 (id=656): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x1, &(0x7f0000000180)) fcntl$notify(r0, 0x402, 0x8000001f) 2.823548796s ago: executing program 7 (id=658): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xd95, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x7, 0xc, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="0500", 0x2}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b", 0xb}], 0x2}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.706767682s ago: executing program 4 (id=659): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x2a000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x30) 2.504332894s ago: executing program 4 (id=660): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c805000000000000290000000300000043b6"], 0x5c8}, 0x0) 2.40454239s ago: executing program 4 (id=661): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x90) 2.316720705s ago: executing program 7 (id=662): syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, {[@generic={0x7, 0x3, 'M'}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x10000, 0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x3}}}}}}, 0x0) 2.204337631s ago: executing program 4 (id=663): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000d8000001118006b05c6a8ce2", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000080"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x802, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "cb7d302847bb1a28e8a4004b789607ed47df355645f2178a039ed508ff76df3536741848cc6cb65c6e77aad714472cb8856fcdd536f9d9655dcf800549436e96"}}, 0x80}}, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 2.162182304s ago: executing program 7 (id=664): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) listen(0xffffffffffffffff, 0x9) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54bd001cb1"], 0x0) 2.076505119s ago: executing program 0 (id=665): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f0000000040)="7780f8", 0x66, 0x4004870, 0x0, 0x0) 2.041701321s ago: executing program 6 (id=666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 1.912442138s ago: executing program 4 (id=667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x4040) 1.912260859s ago: executing program 0 (id=668): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a6f000210000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.815165914s ago: executing program 6 (id=669): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x862b01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.809512235s ago: executing program 4 (id=670): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b556e3129ca"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x80, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$SMC_PNETID_ADD(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074000000031080006400000000008000f4000000004140000001000010000000000000000000084000ae6a9853f4cf46ebb0e08ff96a0651250e99027bfcc273c7e21cffdc2f877681997309c7baf0c25617e8bf90cc5"], 0x84}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}], [{@subj_role={'subj_role', 0x3d, '^#{]#@&&'}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.732236329s ago: executing program 0 (id=671): syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) 1.631276425s ago: executing program 6 (id=672): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xd95, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x7, 0xc, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="0500", 0x2}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b", 0xb}], 0x2}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.384106449s ago: executing program 0 (id=673): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0xd0, 0x20000000000fff) 1.101861676s ago: executing program 0 (id=674): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, r1, 0xbff4, 0x100000002}) 1.101125185s ago: executing program 6 (id=675): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r1, &(0x7f0000002640)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000002600)='binder\x00', 0x2200892, 0x0) munlock(&(0x7f000038b000/0x1000)=nil, 0x1000) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 0s ago: executing program 6 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x42800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x1000) kernel console output (not intermixed with test programs): d=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 72.468787][ T4366] EXT4-fs (loop1): 1 orphan inode deleted [ 72.474677][ T4366] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,nodiscard,debug_want_extra_isize=0x000000000000005a,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,,errors=continue. Quota mode: none. [ 72.708390][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.542810][ T4410] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 74.551246][ T4410] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 74.742677][ T4408] set_capacity_and_notify: 1 callbacks suppressed [ 74.742777][ T4408] loop4: detected capacity change from 0 to 1024 [ 75.224584][ T4408] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 75.432802][ T4408] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.593981][ T4408] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 75.627053][ T4408] System zones: 0-1, 3-36 [ 75.653500][ T4421] tipc: Started in network mode [ 75.673615][ T4408] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 75.706622][ T4421] tipc: Node identity 7f000001, cluster identity 4711 [ 75.733535][ T4421] tipc: Enabled bearer , priority 10 [ 76.481738][ T4426] loop2: detected capacity change from 0 to 1024 [ 76.574811][ T21] usb 3-1: unable to read config index 0 descriptor/all [ 76.582796][ T21] usb 3-1: can't read configurations, error -71 [ 76.599012][ T4426] EXT4-fs (loop2): Ignoring removed orlov option [ 76.621397][ T4404] loop3: detected capacity change from 0 to 40427 [ 76.698288][ T4404] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 76.723693][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 76.727659][ T4404] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 76.740441][ T4426] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nogrpid,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,grpjquota=,minixdf,norecovery,,errors=continue. Quota mode: none. [ 76.763726][ T13] tipc: Node number set to 2130706433 [ 76.769573][ T4404] F2FS-fs (loop3): Unrecognized mount option "memory=low" or missing value [ 77.979827][ T4453] tipc: Enabling of bearer rejected, already enabled [ 78.057499][ T4455] loop1: detected capacity change from 0 to 1024 [ 78.083536][ T4455] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 78.092640][ T4455] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.128015][ T4455] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 78.154516][ T4455] System zones: 0-1, 3-36 [ 78.235077][ T4455] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 79.006057][ T4236] Bluetooth: hci5: command 0x1003 tx timeout [ 79.013448][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 79.724396][ T4441] loop4: detected capacity change from 0 to 40427 [ 79.791589][ T4441] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 79.817184][ T4469] loop2: detected capacity change from 0 to 512 [ 79.838989][ T4441] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 79.948613][ T4441] F2FS-fs (loop4): invalid crc value [ 79.979723][ T4441] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 80.240610][ T4472] loop3: detected capacity change from 0 to 128 [ 80.265867][ T4474] loop1: detected capacity change from 0 to 512 [ 80.337288][ T4474] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.354178][ T4474] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.476477][ T4474] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz.1.46: Directory hole found for htree leaf block 0 [ 80.900559][ T4482] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 80.908549][ T4482] FAT-fs (loop3): Filesystem has been set read-only [ 81.166197][ T4244] Bluetooth: hci5: command 0x1001 tx timeout [ 81.178345][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 81.420568][ T1325] cfg80211: failed to load regulatory.db [ 81.566180][ T4287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.603401][ T4491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 81.772421][ T4287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.880575][ T4287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.046724][ T4287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.356671][ T4486] chnl_net:caif_netlink_parms(): no params data found [ 83.077154][ T4517] netlink: 288 bytes leftover after parsing attributes in process `syz.3.63'. [ 83.413313][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 83.481982][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 83.521129][ T4527] loop1: detected capacity change from 0 to 128 [ 83.639792][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.688079][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.764471][ T4486] device bridge_slave_0 entered promiscuous mode [ 83.772971][ T4287] tipc: Disabling bearer [ 83.780037][ T4287] tipc: Left network mode [ 83.786722][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.806688][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.822205][ T4486] device bridge_slave_1 entered promiscuous mode [ 83.908992][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.672039][ T4535] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 84.679934][ T4535] FAT-fs (loop1): Filesystem has been set read-only [ 84.871969][ T4486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.909518][ T4486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.059998][ T4486] team0: Port device team_slave_0 added [ 85.068505][ T4486] team0: Port device team_slave_1 added [ 85.093125][ T4486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.102494][ T4486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.128626][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.138325][ T4486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.168759][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.170597][ T4548] fuse: Bad value for 'rootmode' [ 85.227110][ T1108] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 85.273520][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.321961][ T1108] usb 5-1: config 0 descriptor?? [ 85.349742][ T4552] loop1: detected capacity change from 0 to 4096 [ 85.381255][ T4552] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 85.405953][ T4552] EXT4-fs (loop1): Test dummy encryption mode enabled [ 85.431718][ T4552] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 85.431718][ T4552] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 85.431718][ T4552] [ 85.453349][ T4486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.463987][ T4486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.509395][ T4486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.519987][ T4552] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,grpquota,test_dummy_encryption,nouser_xattr,discard,noblock_validity,discard,,errors=continue. Quota mode: writeback. [ 85.550636][ T4557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 85.578801][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 85.697695][ T4486] device hsr_slave_0 entered promiscuous mode [ 85.705658][ T4486] device hsr_slave_1 entered promiscuous mode [ 85.713937][ T4486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.736272][ T4486] Cannot create hsr debugfs directory [ 85.798893][ T1108] hid (null): unknown global tag 0xe [ 85.853931][ T1108] uclogic 0003:5543:0003.0001: unknown global tag 0xe [ 86.012107][ T4486] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.036875][ T1108] uclogic 0003:5543:0003.0001: item 0 0 1 14 parsing failed [ 86.045985][ T1108] uclogic 0003:5543:0003.0001: parse failed [ 86.051974][ T1108] uclogic: probe of 0003:5543:0003.0001 failed with error -22 [ 86.067684][ T1108] usb 5-1: USB disconnect, device number 2 [ 86.080771][ T4486] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.121562][ T4486] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.147133][ T4486] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.331323][ T4589] loop3: detected capacity change from 0 to 16 [ 86.367840][ T4486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.396087][ T4589] erofs: (device loop3): mounted with root inode @ nid 36. [ 86.445022][ T4589] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 86.482139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.504180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.536036][ T4589] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 86.544888][ T4486] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.584186][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.610443][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.628654][ T4415] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.635845][ T4415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.676717][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.788335][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.796997][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.822217][ T4415] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.829400][ T4415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.854486][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.125150][ T4598] netlink: 288 bytes leftover after parsing attributes in process `syz.1.76'. [ 87.830783][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 87.868759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.677911][ T4608] loop1: detected capacity change from 0 to 128 [ 88.967741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.500613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.516831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.526593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.549736][ T4287] device hsr_slave_0 left promiscuous mode [ 89.639851][ T4287] device hsr_slave_1 left promiscuous mode [ 89.702796][ T4616] loop4: detected capacity change from 0 to 128 [ 89.719017][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.734952][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.813850][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.853059][ T4616] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.870831][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.908397][ T4611] Bluetooth: hci3: command 0x0419 tx timeout [ 89.916300][ T4616] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.955774][ T4287] device bridge_slave_1 left promiscuous mode [ 90.013893][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.266507][ T4287] device bridge_slave_0 left promiscuous mode [ 90.334836][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.694409][ T4287] device veth1_macvtap left promiscuous mode [ 90.717834][ T4287] device veth0_macvtap left promiscuous mode [ 90.724804][ T4287] device veth1_vlan left promiscuous mode [ 90.777849][ T4629] loop0: detected capacity change from 0 to 1024 [ 90.811535][ T4287] device veth0_vlan left promiscuous mode [ 91.047240][ T4629] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,min_batch_time=0x0000000000000007,noquota,journal_ioprio=0x0000000000000003,errors=remount-ro,nodioread_nolock,. Quota mode: none. [ 91.180164][ T4629] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.309862][ T4629] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.83: lblock 0 mapped to illegal pblock 0 (length 1) [ 91.356655][ T4629] EXT4-fs (loop0): Remounting filesystem read-only [ 91.745804][ T4643] loop0: detected capacity change from 0 to 256 [ 91.855466][ T4287] team0 (unregistering): Port device team_slave_1 removed [ 91.892640][ T4287] team0 (unregistering): Port device team_slave_0 removed [ 92.178371][ T4643] FAT-fs (loop0): Directory bread(block 64) failed [ 92.208557][ T4287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.333219][ T4643] FAT-fs (loop0): Directory bread(block 65) failed [ 92.493645][ T4643] FAT-fs (loop0): Directory bread(block 66) failed [ 92.734728][ T4643] FAT-fs (loop0): Directory bread(block 67) failed [ 92.784546][ T4287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.793576][ T4643] FAT-fs (loop0): Directory bread(block 68) failed [ 92.823913][ T4643] FAT-fs (loop0): Directory bread(block 69) failed [ 92.844464][ T4643] FAT-fs (loop0): Directory bread(block 70) failed [ 92.868316][ T4643] FAT-fs (loop0): Directory bread(block 71) failed [ 92.904890][ T4643] FAT-fs (loop0): Directory bread(block 72) failed [ 92.915927][ T4651] loop4: detected capacity change from 0 to 128 [ 92.943282][ T4643] FAT-fs (loop0): Directory bread(block 73) failed [ 93.097782][ T4287] bond0 (unregistering): Released all slaves [ 93.473304][ T4649] loop3: detected capacity change from 0 to 131072 [ 93.513945][ T4649] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 93.522231][ T4649] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 93.535825][ T4649] F2FS-fs (loop3): invalid crc value [ 93.572841][ T4651] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.590049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.619620][ T4649] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.629091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.637498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.683033][ T4649] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 93.690331][ T4649] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 93.738295][ T4651] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.763526][ T4639] netlink: 288 bytes leftover after parsing attributes in process `syz.1.86'. [ 93.783646][ T4486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.825856][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.876050][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.928795][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.231666][ T4684] loop3: detected capacity change from 0 to 16 [ 95.318857][ T4684] erofs: (device loop3): mounted with root inode @ nid 36. [ 95.335894][ T4684] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 95.347069][ T4684] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 95.986005][ T4687] loop4: detected capacity change from 0 to 16 [ 96.017850][ T4486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.051480][ T4687] erofs: (device loop4): mounted with root inode @ nid 36. [ 96.087186][ T4694] loop3: detected capacity change from 0 to 256 [ 96.096477][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.118361][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.208227][ T4694] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 96.395591][ T26] audit: type=1800 audit(1769794972.519:3): pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.98" name="file1" dev="loop3" ino=1048610 res=0 errno=0 [ 96.558036][ T4660] loop0: detected capacity change from 0 to 40427 [ 96.644375][ T4660] F2FS-fs (loop0): invalid crc value [ 96.700437][ T4660] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 96.986827][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.029016][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.083621][ T4660] F2FS-fs (loop0): Start checkpoint disabled! [ 97.109284][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.133765][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.152118][ T4660] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 97.197964][ T4486] device veth0_vlan entered promiscuous mode [ 97.205398][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.232655][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.395017][ T4486] device veth1_vlan entered promiscuous mode [ 97.590118][ T4486] device veth0_macvtap entered promiscuous mode [ 97.672095][ T4486] device veth1_macvtap entered promiscuous mode [ 97.841708][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.943371][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.018174][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.088945][ T4714] loop4: detected capacity change from 0 to 131072 [ 98.097824][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.107745][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.118254][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.128075][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.190884][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.219880][ T4486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.256826][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.299214][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.327740][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.358830][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.381588][ T4714] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.453743][ T4714] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 98.488783][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.497537][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.611345][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.626418][ T26] audit: type=1804 audit(1769794974.749:4): pid=4714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.100" name="/newroot/25/file0/bus" dev="loop4" ino=10 res=1 errno=0 [ 98.652934][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.766462][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.788712][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.837519][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.903989][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.930376][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.070933][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.170974][ T4486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.216360][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.241719][ T4738] loop0: detected capacity change from 0 to 128 [ 99.259881][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.325306][ T4486] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.358214][ T4486] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.394136][ T4486] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.431414][ T4486] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.809052][ T4738] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.871722][ T4738] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.026116][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.088200][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.149309][ T4538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.162796][ T4538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.170594][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.239889][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.250416][ T4762] loop1: detected capacity change from 0 to 128 [ 100.417059][ T4762] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.513159][ T4762] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.715668][ T4762] syz.1.108 (pid 4762) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 100.978230][ T4786] loop0: detected capacity change from 0 to 128 [ 101.051430][ T4791] loop5: detected capacity change from 0 to 256 [ 101.446333][ T4799] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 101.454347][ T4799] FAT-fs (loop0): Filesystem has been set read-only [ 102.119029][ T26] audit: type=1800 audit(1769794978.249:5): pid=4791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.114" name="file1" dev="loop5" ino=1048613 res=0 errno=0 [ 102.164019][ T4804] loop0: detected capacity change from 0 to 128 [ 102.278759][ T4804] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.338308][ T4804] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.494198][ T4804] EXT4-fs (loop0): shut down requested (2) [ 102.517044][ T1325] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.554592][ T4819] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 102.589263][ T1325] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.605888][ T4820] netlink: 288 bytes leftover after parsing attributes in process `syz.4.103'. [ 102.610505][ T4804] fscrypt (loop0, inode 13): Error -5 getting encryption context [ 102.669906][ T4816] loop5: detected capacity change from 0 to 4096 [ 102.720001][ T4804] EXT4-fs warning (device loop0): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 102.780620][ T4816] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 102.796950][ T4827] loop1: detected capacity change from 0 to 2048 [ 102.808432][ T4816] EXT4-fs (loop5): Test dummy encryption mode enabled [ 102.835690][ T4816] EXT4-fs (loop5): Ignoring removed orlov option [ 102.910878][ T4816] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 103.030022][ T4827] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,min_batch_time=0x0000000000000005,resgid=0x0000000000000000,resgid=0x0000000000000000,bsdgroups,inode_readahead_blks=0x0000000008000000,errors=remount-ro,. Quota mode: none. [ 103.182601][ T4827] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.220723][ T4843] loop3: detected capacity change from 0 to 1024 [ 103.251080][ T4827] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.120: bg 0: block 345: padding at end of block bitmap is not set [ 103.305029][ T4827] EXT4-fs (loop1): Remounting filesystem read-only [ 103.328254][ T4843] EXT4-fs (loop3): Ignoring removed orlov option [ 103.359680][ T4827] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 103.381896][ T4843] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 103.419506][ T4827] EXT4-fs (loop1): Remounting filesystem read-only [ 103.476904][ T4843] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.560894][ T4844] fido_id[4844]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.648448][ T4843] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,nodiscard,dioread_nolock,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 107.374749][ T4884] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.403376][ T4251] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 107.623275][ T4891] binder: BINDER_SET_CONTEXT_MGR already set [ 107.642016][ T4893] Zero length message leads to an empty skb [ 107.666838][ T4891] binder: 4889:4891 ioctl 4018620d 200000004a80 returned -16 [ 107.780891][ T4897] loop4: detected capacity change from 0 to 256 [ 107.828328][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.828401][ T4251] usb 6-1: not running at top speed; connect to a high speed hub [ 107.907504][ T26] audit: type=1800 audit(1769794984.029:6): pid=4897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.139" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048618 res=0 errno=0 [ 107.968374][ T4251] usb 6-1: config 44 has an invalid interface number: 233 but max is 0 [ 107.992449][ T4251] usb 6-1: config 44 has an invalid interface number: 2 but max is 0 [ 108.038330][ T4251] usb 6-1: config 44 has an invalid descriptor of length 127, skipping remainder of the config [ 108.079482][ T4251] usb 6-1: config 44 has 2 interfaces, different from the descriptor's value: 1 [ 108.104664][ T4251] usb 6-1: config 44 has no interface number 0 [ 108.121595][ T4251] usb 6-1: config 44 has no interface number 1 [ 108.127976][ T4251] usb 6-1: config 44 interface 233 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.158197][ T4251] usb 6-1: config 44 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 108.181584][ T1325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.190137][ T4251] usb 6-1: config 44 interface 233 has no altsetting 0 [ 108.358496][ T4251] usb 6-1: New USB device found, idVendor=0403, idProduct=87d0, bcdDevice=3e.ea [ 108.377932][ T4251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.419113][ T4251] usb 6-1: Product: syz [ 108.431484][ T13] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 108.441025][ T13] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 108.450063][ T13] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 108.460857][ T4251] usb 6-1: Manufacturer: syz [ 108.460877][ T4251] usb 6-1: SerialNumber: syz [ 108.470144][ T13] usb 4-1: config 220 has no interface number 2 [ 108.476429][ T13] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 108.498256][ T13] usb 4-1: config 220 interface 0 has no altsetting 0 [ 108.578006][ T13] usb 4-1: config 220 interface 76 has no altsetting 0 [ 108.643319][ T13] usb 4-1: config 220 interface 1 has no altsetting 0 [ 108.859689][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.919070][ T13] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 108.972948][ T1325] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 109.000116][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.182286][ T13] usb 4-1: Product: syz [ 109.186543][ T13] usb 4-1: Manufacturer: syz [ 109.191548][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.256047][ T13] usb 4-1: SerialNumber: syz [ 109.279173][ T1325] usb 1-1: config 0 descriptor?? [ 109.406744][ T4918] loop1: detected capacity change from 0 to 1024 [ 109.458620][ T4918] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 109.484593][ T4918] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.892421][ T4251] ftdi_sio 6-1:44.233: FTDI USB Serial Device converter detected [ 109.999965][ T4918] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 110.079348][ T4251] usb 6-1: Detected FT2232C [ 110.180146][ T4918] System zones: 0-1, 3-36 [ 110.328820][ T4918] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 110.418576][ T1325] usbhid 1-1:0.0: can't add hid device: -71 [ 110.425104][ T1325] usbhid: probe of 1-1:0.0 failed with error -71 [ 110.449437][ T13] uvcvideo 4-1:220.1: Unknown video format 00000073-4500-0000-0000-000000008800 [ 110.485469][ T4929] tipc: Started in network mode [ 110.515675][ T13] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 110.528240][ T1325] usb 1-1: USB disconnect, device number 2 [ 110.538697][ T4251] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 110.551207][ T4929] tipc: Node identity 7f000001, cluster identity 4711 [ 110.558350][ T4251] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 110.569284][ T4929] tipc: Enabled bearer , priority 10 [ 110.576292][ T4251] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 110.591882][ T13] usb 4-1: No valid video chain found. [ 111.232404][ T4251] ftdi_sio 6-1:44.2: FTDI USB Serial Device converter detected [ 111.475904][ T4251] usb 6-1: Detected FT2232C [ 111.535665][ T4251] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 111.588300][ T4251] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 111.616388][ T4251] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 111.662510][ T13] usb 4-1: selecting invalid altsetting 0 [ 111.706133][ T4251] usb 6-1: USB disconnect, device number 2 [ 111.759590][ T4251] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 111.769773][ T4941] Illegal XDP return value 322372265, expect packet loss! [ 111.769935][ T13] usb 4-1: selecting invalid altsetting 0 [ 111.822890][ T13] usbtest: probe of 4-1:220.1 failed with error -22 [ 111.858846][ T4251] ftdi_sio 6-1:44.233: device disconnected [ 111.879013][ T13] usb 4-1: USB disconnect, device number 2 [ 111.890900][ T4611] tipc: Node number set to 2130706433 [ 111.936660][ T4251] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 112.142081][ T4251] ftdi_sio 6-1:44.2: device disconnected [ 112.528254][ T4251] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 112.918974][ T4251] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 112.958810][ T4251] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 113.074372][ T4251] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 113.121388][ T4251] usb 6-1: config 220 has no interface number 2 [ 113.171020][ T4251] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 113.656238][ T4251] usb 6-1: config 220 interface 0 has no altsetting 0 [ 113.824807][ T4251] usb 6-1: config 220 interface 76 has no altsetting 0 [ 114.018682][ T4251] usb 6-1: config 220 interface 1 has no altsetting 0 [ 114.208572][ T4251] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 114.227902][ T4251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.256317][ T4251] usb 6-1: Product: syz [ 114.268305][ T4251] usb 6-1: Manufacturer: syz [ 114.289922][ T4251] usb 6-1: SerialNumber: syz [ 114.608816][ T4251] uvcvideo 6-1:220.1: Unknown video format 00000073-4500-0000-0000-000000008800 [ 114.629770][ T4251] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 114.686557][ T4251] usb 6-1: No valid video chain found. [ 114.702611][ T4251] usb 6-1: selecting invalid altsetting 0 [ 114.799722][ T4251] usb 6-1: selecting invalid altsetting 0 [ 114.815770][ T4251] usbtest: probe of 6-1:220.1 failed with error -22 [ 114.884158][ T4251] usb 6-1: USB disconnect, device number 3 [ 114.983390][ T4958] loop0: detected capacity change from 0 to 40427 [ 117.267435][ T4992] loop5: detected capacity change from 0 to 40427 [ 117.364222][ T5026] fuse: Unknown parameter 'user_i00000000000000000000' [ 117.438274][ T4992] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 117.446053][ T4992] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 117.572938][ T4992] F2FS-fs (loop5): Found nat_bits in checkpoint [ 117.613271][ T5043] loop1: detected capacity change from 0 to 256 [ 118.893704][ T5061] loop0: detected capacity change from 0 to 128 [ 119.245054][ T5061] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.276115][ T5061] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.123298][ T5061] EXT4-fs (loop0): shut down requested (2) [ 120.162156][ T5084] loop1: detected capacity change from 0 to 512 [ 120.178426][ T5061] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 120.298579][ T5088] loop4: detected capacity change from 0 to 16 [ 121.032372][ T5088] erofs: (device loop4): mounted with root inode @ nid 36. [ 121.061665][ T5087] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 121.073004][ T5087] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 121.099712][ T5084] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.180: dx entry: limit 0 != root limit 125 [ 121.112442][ T5097] fuse: Unknown parameter 'user_id00000000000000000000' [ 121.219413][ T5084] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.180: Corrupt directory, running e2fsck is recommended [ 121.243509][ T5084] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 121.289502][ T5084] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.180: corrupted in-inode xattr [ 121.306278][ T5103] loop4: detected capacity change from 0 to 256 [ 121.329208][ T5084] EXT4-fs (loop1): Remounting filesystem read-only [ 121.349591][ T5084] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.180: couldn't read orphan inode 15 (err -117) [ 121.361544][ T5103] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.401504][ T5103] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 121.430363][ T5084] EXT4-fs (loop1): Remounting filesystem read-only [ 121.440472][ T5084] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc=0x000000000000000e,abort,user_xattr,user_xattr,grpjquota=.max_batch_time=0x0000000000000001,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 121.493780][ T5103] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 121.523060][ T5111] loop0: detected capacity change from 0 to 1024 [ 121.592030][ T5084] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.180: dx entry: limit 0 != root limit 125 [ 121.604202][ T5111] EXT4-fs (loop0): Ignoring removed bh option [ 121.635012][ T5084] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.180: Corrupt directory, running e2fsck is recommended [ 121.707507][ T5116] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.180: dx entry: limit 0 != root limit 125 [ 121.726593][ T5111] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 121.782966][ T26] audit: type=1800 audit(1769794997.909:7): pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.186" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 121.930383][ T5116] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.180: Corrupt directory, running e2fsck is recommended [ 121.983680][ T5121] kvm: pic: non byte read [ 121.984969][ T5116] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.180: dx entry: limit 0 != root limit 125 [ 122.002822][ T5121] kvm: pic: non byte read [ 122.007494][ T5121] kvm: pic: non byte write [ 122.036959][ T5116] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.180: Corrupt directory, running e2fsck is recommended [ 122.047372][ T5121] kvm: pic: non byte write [ 122.083639][ T5126] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.180: dx entry: limit 0 != root limit 125 [ 122.181640][ T5126] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.180: Corrupt directory, running e2fsck is recommended [ 122.320683][ T5084] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.180: dx entry: limit 0 != root limit 125 [ 122.676880][ T5143] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.910437][ T5084] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.180: Corrupt directory, running e2fsck is recommended [ 123.347968][ T5146] loop0: detected capacity change from 0 to 256 [ 123.402873][ T5146] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.487554][ T5146] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.639942][ T5155] loop1: detected capacity change from 0 to 16 [ 123.670566][ T5155] erofs: (device loop1): mounted with root inode @ nid 36. [ 124.442481][ T5158] fuse: Unknown parameter 'user_id00000000000000000000' [ 125.005697][ T5184] loop4: detected capacity change from 0 to 128 [ 125.087072][ T5179] loop3: detected capacity change from 0 to 4096 [ 125.396397][ T5184] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.486355][ T5179] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 125.548026][ T5184] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.643087][ T5179] EXT4-fs (loop3): Test dummy encryption mode enabled [ 126.018307][ T5184] EXT4-fs (loop4): shut down requested (2) [ 126.126562][ T5202] fuse: Unknown parameter 'user_id00000000000000000000' [ 126.260666][ T5179] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 126.323207][ T5206] loop0: detected capacity change from 0 to 4096 [ 126.357619][ T5208] loop1: detected capacity change from 0 to 16 [ 126.382447][ T5208] erofs: (device loop1): mounted with root inode @ nid 36. [ 126.382475][ T5206] EXT4-fs (loop0): inline encryption not supported [ 126.438682][ T5206] EXT4-fs (loop0): Test dummy encryption mode enabled [ 126.520040][ T5206] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 126.553870][ T5179] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.202: Logical block already allocated [ 126.585725][ T5206] System zones: 0-5 [ 126.628427][ T5206] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 127.457269][ T5236] loop3: detected capacity change from 0 to 512 [ 127.521054][ T5236] EXT4-fs (loop3): Ignoring removed nobh option [ 127.617860][ T5236] EXT4-fs (loop3): orphan cleanup on readonly fs [ 127.659659][ T5236] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #11: block 1: comm syz.3.216: lblock 0 mapped to illegal pblock 1 (length 1) [ 127.726720][ T5236] EXT4-fs (loop3): Remounting filesystem read-only [ 127.759356][ T5236] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 127.844454][ T5236] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:984: inode #11: comm syz.3.216: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 127.906894][ T5236] EXT4-fs (loop3): Remounting filesystem read-only [ 127.913692][ T5236] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.3.216: ea_inode dec ref err=-117 [ 127.926907][ T5236] EXT4-fs (loop3): 1 orphan inode deleted [ 127.934432][ T5236] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005c,nobh,resgid=0x0000000000000000,acl,init_itable=0x0000000000000e4d,. Quota mode: none. [ 129.122455][ T5262] loop3: detected capacity change from 0 to 128 [ 129.160811][ T5265] fuse: Bad value for 'fd' [ 129.208637][ T5264] loop4: detected capacity change from 0 to 1024 [ 129.269670][ T5262] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.335162][ T5262] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.370771][ T5264] EXT4-fs (loop4): Ignoring removed bh option [ 129.376925][ T5264] EXT4-fs (loop4): Ignoring removed nobh option [ 129.451796][ T5264] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.516010][ T5264] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none. [ 129.522779][ T5262] EXT4-fs (loop3): shut down requested (2) [ 130.334414][ T5280] loop1: detected capacity change from 0 to 16 [ 130.590963][ T5280] erofs: (device loop1): mounted with root inode @ nid 36. [ 130.605694][ T5280] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 130.616825][ T5280] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 130.706463][ T5282] loop0: detected capacity change from 0 to 128 [ 130.947973][ T5264] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3887: comm syz.4.221: Allocating blocks 497-513 which overlap fs metadata [ 131.001996][ T5264] EXT4-fs (loop4): pa ffff888074578a80: logic 128, phys. 385, len 8 [ 131.010540][ T5264] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 131.166738][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 131.393560][ T4415] Bluetooth: hci5: Frame reassembly failed (-84) [ 132.631040][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.639170][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.050360][ T5326] loop1: detected capacity change from 0 to 128 [ 133.066408][ T5328] fuse: Bad value for 'fd' [ 133.119079][ T5330] loop3: detected capacity change from 0 to 1024 [ 133.120361][ T5326] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.167153][ T5326] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.318129][ T5337] loop4: detected capacity change from 0 to 16 [ 133.370120][ T5337] erofs: (device loop4): mounted with root inode @ nid 36. [ 133.385681][ T5337] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 133.396964][ T5337] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 133.419114][ T4236] Bluetooth: hci5: command 0x1003 tx timeout [ 133.463586][ T146] Bluetooth: hci5: sending frame failed (-49) [ 133.627308][ T5330] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 135.285091][ T5357] loop1: detected capacity change from 0 to 1024 [ 135.326414][ T5357] EXT4-fs (loop1): Ignoring removed bh option [ 135.391699][ T5357] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 135.436332][ T5357] EXT4-fs error (device loop1): ext4_check_all_de:667: inode #12: block 7: comm syz.1.239: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 135.489732][ T5363] binder: BINDER_SET_CONTEXT_MGR already set [ 135.495764][ T5363] binder: 5361:5363 ioctl 4018620d 200000004a80 returned -16 [ 135.591397][ T4251] Bluetooth: hci5: command 0x1001 tx timeout [ 135.598663][ T146] Bluetooth: hci5: sending frame failed (-49) [ 135.640167][ T5357] EXT4-fs (loop1): Remounting filesystem read-only [ 136.252758][ T5357] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2806: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 136.647789][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 136.776541][ T5390] fuse: Bad value for 'fd' [ 136.871745][ T5393] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 137.388283][ T1108] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 137.658632][ T4236] Bluetooth: hci5: command 0x1009 tx timeout [ 137.779086][ T1108] usb 5-1: config 2 has an invalid interface number: 23 but max is 0 [ 137.831408][ T1108] usb 5-1: config 2 has no interface number 0 [ 137.966805][ T1108] usb 5-1: config 2 interface 23 has no altsetting 0 [ 137.978797][ T5375] loop3: detected capacity change from 0 to 40427 [ 138.025915][ T5375] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 138.048332][ T5375] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 138.075258][ T5375] F2FS-fs (loop3): invalid crc value [ 138.279351][ T1108] usb 5-1: string descriptor 0 read error: -22 [ 138.293211][ T1108] usb 5-1: New USB device found, idVendor=1b3d, idProduct=011c, bcdDevice= 2.35 [ 138.405637][ T5375] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.490597][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.886068][ T1108] ftdi_sio 5-1:2.23: FTDI USB Serial Device converter detected [ 138.896984][ T1108] usb 5-1: Detected FT8U232AM [ 138.939205][ T1108] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 139.266469][ T5424] binder_alloc: 5423: binder_alloc_buf, no vma [ 140.397783][ T1108] usb 5-1: USB disconnect, device number 3 [ 140.666168][ T1108] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 140.850892][ T1108] ftdi_sio 5-1:2.23: device disconnected [ 140.945132][ T5449] fuse: Unknown parameter '0x0000000000000003' [ 141.242849][ T5456] loop5: detected capacity change from 0 to 16 [ 141.924587][ T5456] erofs: (device loop5): mounted with root inode @ nid 36. [ 141.939263][ T5455] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 141.950501][ T5455] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 142.032993][ T5463] loop4: detected capacity change from 0 to 128 [ 142.192229][ T5467] loop5: detected capacity change from 0 to 256 [ 142.232319][ T5471] loop0: detected capacity change from 0 to 512 [ 142.255160][ T5467] exfat: Deprecated parameter 'utf8' [ 142.311085][ T5467] exfat: Deprecated parameter 'utf8' [ 142.328493][ T5471] EXT4-fs (loop0): Invalid default hash set in the superblock [ 142.399276][ T5467] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 142.563044][ T5476] binder_alloc: 5475: binder_alloc_buf, no vma [ 142.818923][ T5482] binder: 5481:5482 unknown command 1074553619 [ 142.838881][ T5482] binder: 5481:5482 ioctl c0306201 200000000540 returned -22 [ 143.100474][ T5493] fuse: Unknown parameter '0x0000000000000003' [ 143.435330][ T5501] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 143.893743][ T5501] FAT-fs (loop4): Filesystem has been set read-only [ 145.576926][ T5519] loop1: detected capacity change from 0 to 512 [ 145.693464][ T5519] EXT4-fs (loop1): Ignoring removed bh option [ 145.738641][ T5519] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 145.760600][ T5521] loop3: detected capacity change from 0 to 1024 [ 145.818060][ T5519] EXT4-fs (loop1): 1 truncate cleaned up [ 145.827128][ T5521] EXT4-fs (loop3): Ignoring removed bh option [ 145.836856][ T5519] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 145.908295][ T5521] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.008600][ T5521] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 146.215020][ T5521] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3887: comm syz.3.276: Allocating blocks 385-513 which overlap fs metadata [ 146.300729][ T5521] EXT4-fs (loop3): pa ffff888074571540: logic 16, phys. 129, len 24 [ 146.310194][ T5521] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 8 [ 146.482206][ T5534] loop1: detected capacity change from 0 to 128 [ 146.857592][ T5534] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.114627][ T5534] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.307247][ T5539] fuse: Unknown parameter '0x0000000000000003' [ 147.505173][ T5543] device syz_tun entered promiscuous mode [ 147.516593][ T5543] device vlan2 entered promiscuous mode [ 148.353868][ T5550] loop4: detected capacity change from 0 to 256 [ 148.430488][ T5550] FAT-fs (loop4): Directory bread(block 64) failed [ 148.974373][ T5550] FAT-fs (loop4): Directory bread(block 65) failed [ 149.034901][ T5550] FAT-fs (loop4): Directory bread(block 66) failed [ 149.419008][ T5550] FAT-fs (loop4): Directory bread(block 67) failed [ 149.606660][ T5550] FAT-fs (loop4): Directory bread(block 68) failed [ 149.730707][ T5550] FAT-fs (loop4): Directory bread(block 69) failed [ 149.834124][ T5550] FAT-fs (loop4): Directory bread(block 70) failed [ 149.871282][ T5550] FAT-fs (loop4): Directory bread(block 71) failed [ 149.918822][ T5550] FAT-fs (loop4): Directory bread(block 72) failed [ 149.925401][ T5550] FAT-fs (loop4): Directory bread(block 73) failed [ 151.456683][ T5570] netlink: 288 bytes leftover after parsing attributes in process `syz.1.288'. [ 152.301874][ T5580] loop4: detected capacity change from 0 to 128 [ 153.286226][ T5590] fuse: Bad value for 'group_id' [ 153.948455][ T5608] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 153.956329][ T5608] FAT-fs (loop4): Filesystem has been set read-only [ 154.174282][ T5610] netlink: 288 bytes leftover after parsing attributes in process `syz.3.304'. [ 154.184834][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 154.478524][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 154.738489][ T1108] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 154.785051][ T1108] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.841003][ T1108] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.905762][ T1108] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.083213][ T5621] fuse: Bad value for 'group_id' [ 155.118595][ T1108] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.133588][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.173042][ T1108] usb 2-1: Product: syz [ 155.177269][ T1108] usb 2-1: Manufacturer: syz [ 155.215814][ T1108] usb 2-1: SerialNumber: syz [ 155.236959][ T5601] loop0: detected capacity change from 0 to 40427 [ 157.078457][ T1108] usb 2-1: USB disconnect, device number 2 [ 157.303969][ T5638] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 157.394693][ T5638] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 157.530131][ T5656] netlink: 288 bytes leftover after parsing attributes in process `syz.5.316'. [ 157.683477][ T4342] udevd[4342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.309120][ T5655] loop4: detected capacity change from 0 to 1024 [ 158.323675][ T5662] 9pnet: Insufficient options for proto=fd [ 158.335539][ T5655] EXT4-fs (loop4): Ignoring removed orlov option [ 158.508877][ T5655] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 158.614418][ T5655] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.012297][ T5655] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 159.193006][ T5655] System zones: 0-1, 3-36 [ 159.239496][ T5655] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,resgid=0x0000000000000000,resuid=0x0000000000000000,debug,dioread_nolock,orlov,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 159.288754][ T5668] fuse: Bad value for 'group_id' [ 163.895090][ T5694] loop0: detected capacity change from 0 to 1024 [ 164.017027][ T5694] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 164.079236][ T5694] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.108779][ T5694] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 164.116978][ T5694] System zones: 0-1, 3-36 [ 164.170107][ T5702] loop4: detected capacity change from 0 to 1024 [ 164.193319][ T5702] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 164.200828][ T5702] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.216829][ T5702] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 164.258348][ T5702] System zones: 0-1, 3-36 [ 164.298812][ T5702] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 164.480686][ T5694] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 166.897421][ T5727] fuse: Unknown parameter 'fd0x0000000000000003' [ 166.954264][ T5717] ipt_CLUSTERIP: Please specify destination IP [ 169.419016][ T5734] loop4: detected capacity change from 0 to 16 [ 169.513393][ T5734] erofs: (device loop4): mounted with root inode @ nid 36. [ 169.522232][ T5734] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 169.533448][ T5734] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 170.022245][ T5746] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.708428][ T5757] loop0: detected capacity change from 0 to 128 [ 174.499008][ T5757] attempt to access beyond end of device [ 174.499008][ T5757] loop0: rw=2049, want=250, limit=128 [ 174.706133][ T1325] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 175.693343][ T5773] fuse: Unknown parameter 'fd0x0000000000000003' [ 175.739186][ T1325] usb 5-1: Using ep0 maxpacket: 16 [ 175.770820][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.847993][ T5777] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 175.868474][ T1325] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 175.896946][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.897054][ T1325] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.968117][ T1325] usb 5-1: config 1 has no interface number 0 [ 175.974344][ T1325] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 176.003250][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.009016][ T1325] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 176.048719][ T1325] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.082417][ T1325] usb 5-1: config 1 interface 105 has no altsetting 0 [ 176.173918][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.278426][ T1325] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 176.287512][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.301709][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 176.318152][ T1325] usb 5-1: Product: syz [ 176.326913][ T1325] usb 5-1: Manufacturer: syz [ 176.353199][ T1325] usb 5-1: SerialNumber: syz [ 176.597703][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.618575][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.650446][ T1325] aqc111: probe of 5-1:1.105 failed with error -22 [ 176.698270][ T5764] device bridge_slave_0 entered promiscuous mode [ 176.763020][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.780935][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.801293][ T5764] device bridge_slave_1 entered promiscuous mode [ 176.856182][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.872724][ T7] usb 5-1: USB disconnect, device number 4 [ 176.911366][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.995960][ T5764] team0: Port device team_slave_0 added [ 177.039615][ T5764] team0: Port device team_slave_1 added [ 177.177677][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.184932][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 177.194765][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.303490][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.877681][ T5811] loop0: detected capacity change from 0 to 128 [ 178.792319][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.807596][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.258370][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 179.778242][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.514771][ T5822] loop0: detected capacity change from 0 to 16 [ 180.795784][ T5822] erofs: (device loop0): mounted with root inode @ nid 36. [ 180.812725][ T5822] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 180.823865][ T5822] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 181.295164][ T5764] device hsr_slave_0 entered promiscuous mode [ 181.307861][ T5764] device hsr_slave_1 entered promiscuous mode [ 181.338886][ T4244] Bluetooth: hci1: command 0x040f tx timeout [ 181.524067][ T5831] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 181.675786][ T155] device hsr_slave_0 left promiscuous mode [ 181.699771][ T155] device hsr_slave_1 left promiscuous mode [ 181.715820][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.750652][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.775316][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.794047][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.856293][ T155] device bridge_slave_1 left promiscuous mode [ 181.875199][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.908298][ T155] device bridge_slave_0 left promiscuous mode [ 181.926927][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.965518][ T155] device veth1_macvtap left promiscuous mode [ 181.985829][ T155] device veth0_macvtap left promiscuous mode [ 181.999803][ T155] device veth1_vlan left promiscuous mode [ 182.005750][ T155] device veth0_vlan left promiscuous mode [ 182.414992][ T155] team0 (unregistering): Port device team_slave_1 removed [ 182.442707][ T155] team0 (unregistering): Port device team_slave_0 removed [ 182.492041][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.535579][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.657726][ T155] bond0 (unregistering): Released all slaves [ 183.148281][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 183.418280][ T4244] Bluetooth: hci1: command 0x0419 tx timeout [ 183.435750][ T5764] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 183.448680][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 183.477082][ T5764] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 183.506848][ T5764] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 183.541987][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 183.569309][ T5764] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 183.588354][ T13] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 183.618164][ T13] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.638278][ T13] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.665490][ T13] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.738221][ T4244] Bluetooth: hci5: command 0x0409 tx timeout [ 183.858519][ T13] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.867625][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.885450][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.908931][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.916974][ T5840] device bridge_slave_0 entered promiscuous mode [ 183.938300][ T13] usb 1-1: Product: syz [ 183.942537][ T13] usb 1-1: Manufacturer: syz [ 183.947149][ T13] usb 1-1: SerialNumber: syz [ 184.005420][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.038728][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.077441][ T5840] device bridge_slave_1 entered promiscuous mode [ 184.170066][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.212160][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.257582][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.306266][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.318871][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.350972][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.383982][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.415138][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.428643][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.435727][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.487295][ T13] usb 1-1: USB disconnect, device number 3 [ 184.494954][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.537564][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.556507][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.563698][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.611646][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.625408][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.634901][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.676251][ T5840] team0: Port device team_slave_0 added [ 184.686653][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.704773][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.715421][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.726130][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.735602][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.745089][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.761194][ T5764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.774269][ T5764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.776940][ T5695] udevd[5695]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.823741][ T5840] team0: Port device team_slave_1 added [ 184.848581][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.889206][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.914199][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.927950][ T5902] loop4: detected capacity change from 0 to 256 [ 184.985024][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.017184][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.153892][ T5910] loop0: detected capacity change from 0 to 16 [ 185.818181][ T5818] Bluetooth: hci5: command 0x041b tx timeout [ 185.884990][ T5910] erofs: (device loop0): mounted with root inode @ nid 36. [ 185.900203][ T5908] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 185.911348][ T5908] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 185.928256][ T4611] Bluetooth: hci2: command 0x0406 tx timeout [ 185.934464][ T4611] Bluetooth: hci4: command 0x0406 tx timeout [ 185.942659][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.975955][ T4611] Bluetooth: hci0: command 0x0406 tx timeout [ 186.013205][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.048148][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.198129][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.288365][ T5919] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.390763][ T5840] device hsr_slave_0 entered promiscuous mode [ 186.447826][ T5840] device hsr_slave_1 entered promiscuous mode [ 186.488303][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.538143][ T5840] Cannot create hsr debugfs directory [ 186.569736][ T5937] loop0: detected capacity change from 0 to 128 [ 186.699403][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.722267][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.776383][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.006326][ T5952] loop4: detected capacity change from 0 to 2048 [ 187.280171][ T5840] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 187.318481][ T5840] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 187.391584][ T5840] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 187.429908][ T5840] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 187.438215][ T4244] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 187.604219][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.625156][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.712220][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.749225][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.777624][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.798480][ T4244] usb 5-1: config 1 has an invalid descriptor of length 73, skipping remainder of the config [ 187.828249][ T4244] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.843112][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.870226][ T5764] device veth0_vlan entered promiscuous mode [ 187.898438][ T5818] Bluetooth: hci5: command 0x040f tx timeout [ 187.905862][ T5982] loop1: detected capacity change from 0 to 2048 [ 187.916590][ T5764] device veth1_vlan entered promiscuous mode [ 187.938350][ T4244] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.962820][ T4244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.991626][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.998811][ T4244] usb 5-1: SerialNumber: syz [ 188.012833][ T5982] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 188.035330][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.049287][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.084487][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.099520][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.172952][ T5764] device veth0_macvtap entered promiscuous mode [ 188.193886][ T5764] device veth1_macvtap entered promiscuous mode [ 188.215462][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.232862][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.244423][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.263608][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.286331][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.303255][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.336275][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.348402][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.365038][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.373639][ T4244] usb 5-1: 0:2 : does not exist [ 188.389234][ T4244] usb 5-1: unit 89 not found! [ 188.473555][ T4244] usb 5-1: unit 31 not found! [ 188.478842][ T5818] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 188.507642][ T4244] usb 5-1: unit 37 not found! [ 188.522199][ T4244] usb 5-1: unit 235 not found! [ 188.527312][ T4244] usb 5-1: unit 229 not found! [ 188.535830][ T4244] usb 5-1: unit 165 not found! [ 188.541855][ T4244] usb 5-1: unit 71 not found! [ 188.546732][ T4244] usb 5-1: unit 219 not found! [ 188.607349][ T4244] usb 5-1: unit 51 not found! [ 188.645354][ T4244] usb 5-1: unit 231 not found! [ 188.728296][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 188.859533][ T5818] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 188.914052][ T5818] usb 2-1: config 179 has no interface number 0 [ 189.061721][ T5818] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 189.079213][ T5818] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 189.090897][ T5818] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 22, changing to 8 [ 189.121839][ T5818] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 9216, setting to 1024 [ 189.139182][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.162615][ T4244] usb 5-1: USB disconnect, device number 5 [ 189.182493][ T5695] udevd[5695]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.203824][ T5818] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 189.249158][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.284856][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.328814][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.337619][ T5818] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 189.370571][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.381630][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.386457][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.508578][ T5999] loop4: detected capacity change from 0 to 16 [ 189.556741][ T5982] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 189.628857][ T5999] erofs: (device loop4): mounted with root inode @ nid 36. [ 189.651849][ T5999] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 189.663164][ T5999] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 189.797654][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.978953][ T4236] Bluetooth: hci5: command 0x0419 tx timeout [ 190.046145][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.167023][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.174159][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.254983][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.268954][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.283970][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.307539][ T4236] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 190.318279][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.348523][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.368098][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.401930][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.421712][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.442508][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.455386][ T5982] udc-core: couldn't find an available UDC or it's busy [ 190.468738][ T5982] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 190.490815][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.528995][ T6002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.383'. [ 190.569720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.612287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.653351][ T5764] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.665021][ T5764] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.676645][ T5764] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.686281][ T5764] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.708805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.725348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.737916][ T4611] usb 2-1: USB disconnect, device number 3 [ 190.738190][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 190.738336][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 190.963772][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.971123][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.667874][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.684551][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.714329][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.740910][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.759067][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.778765][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.797559][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.816603][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.833264][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.849767][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.859294][ T6018] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 191.867222][ T6018] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 191.896200][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.942396][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.017415][ T155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.130949][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.160426][ T155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.167932][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.233874][ T6006] loop0: detected capacity change from 0 to 40427 [ 192.255027][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.295969][ T155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.335057][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.346175][ T6006] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 192.378230][ T6006] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 192.387222][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.420342][ T155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.455606][ T6006] F2FS-fs (loop0): invalid crc value [ 192.507063][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.512431][ T6006] F2FS-fs (loop0): Found nat_bits in checkpoint [ 192.554185][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.850327][ T6045] loop1: detected capacity change from 0 to 16 [ 193.095955][ T6045] erofs: (device loop1): mounted with root inode @ nid 36. [ 193.108228][ T6045] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 193.119441][ T6045] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 193.147874][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.336777][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.373755][ T6006] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 193.380985][ T6006] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 194.070460][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.076950][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.609908][ T6075] fuse: Unknown parameter 'grou00000000000000000000' [ 194.777508][ T6083] loop4: detected capacity change from 0 to 512 [ 194.905267][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.925617][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.926617][ T6083] EXT4-fs (loop4): orphan cleanup on readonly fs [ 194.972858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.980700][ T6083] EXT4-fs error (device loop4): ext4_quota_enable:6438: comm syz.4.402: Bad quota inum: 2, type: 1 [ 195.013593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.024778][ T5840] device veth0_vlan entered promiscuous mode [ 195.032904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.041226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.056168][ T5840] device veth1_vlan entered promiscuous mode [ 195.074477][ T6083] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 195.096864][ T6083] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 195.104005][ T6083] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 195.130989][ T6083] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.402: deleted inode referenced: 12 [ 195.185889][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.229250][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.248793][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.258630][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.300539][ T5840] device veth0_macvtap entered promiscuous mode [ 195.330649][ T5840] device veth1_macvtap entered promiscuous mode [ 195.373203][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.390657][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.510272][ T6095] loop4: detected capacity change from 0 to 16 [ 195.650883][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.874839][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.064857][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.220417][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.230873][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.253241][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.278287][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.297513][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.324389][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.347787][ T6095] erofs: (device loop4): mounted with root inode @ nid 36. [ 196.363084][ T6094] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 196.374225][ T6094] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 196.388613][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.397106][ T6055] loop6: detected capacity change from 0 to 40427 [ 196.407239][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.447633][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.484223][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.600915][ T6101] loop0: detected capacity change from 0 to 1024 [ 197.262813][ T6101] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 197.385922][ T6101] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 197.977309][ T6101] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.073202][ T6109] loop4: detected capacity change from 0 to 1024 [ 198.112830][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.168343][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.200982][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.218908][ T6101] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 198.246561][ T6101] System zones: 0-1, 3-36 [ 198.257521][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.285962][ T6101] Quota error (device loop0): v2_read_file_info: Free block number too big (0 >= 0). [ 198.302552][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.324020][ T6101] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 198.357883][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.395626][ T6101] EXT4-fs (loop0): mount failed [ 198.400692][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.461002][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.491670][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.523667][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.600407][ T6109] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 198.615397][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.638980][ T6109] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.739989][ T5840] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.805989][ T6109] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 198.831600][ T5840] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.855375][ T6109] System zones: 0-1, 3-36 [ 198.879065][ T5840] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.887804][ T5840] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.914198][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.934214][ T6109] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 199.062178][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.259170][ T6137] fuse: Unknown parameter 'grou00000000000000000000' [ 200.408514][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.416713][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.511370][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.542525][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.565640][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.605035][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.729821][ T6148] loop0: detected capacity change from 0 to 16 [ 200.828898][ T6148] erofs: (device loop0): mounted with root inode @ nid 36. [ 200.844859][ T6148] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 200.856010][ T6148] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 201.444616][ T155] device hsr_slave_0 left promiscuous mode [ 201.469120][ T155] device hsr_slave_1 left promiscuous mode [ 201.495035][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.523976][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.545220][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.560892][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.577129][ T155] device bridge_slave_1 left promiscuous mode [ 201.593833][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.646634][ T155] device bridge_slave_0 left promiscuous mode [ 201.655306][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.702898][ T155] device veth1_macvtap left promiscuous mode [ 201.718491][ T155] device veth0_macvtap left promiscuous mode [ 201.728745][ T155] device veth1_vlan left promiscuous mode [ 201.735045][ T155] device veth0_vlan left promiscuous mode [ 202.177609][ T6162] loop6: detected capacity change from 0 to 128 [ 203.400629][ T155] team0 (unregistering): Port device team_slave_1 removed [ 203.468800][ T155] team0 (unregistering): Port device team_slave_0 removed [ 203.536669][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.587028][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.760250][ T155] bond0 (unregistering): Released all slaves [ 203.870477][ T6177] fuse: Unknown parameter 'grou00000000000000000000' [ 206.114248][ T6212] loop0: detected capacity change from 0 to 1024 [ 206.225404][ T6212] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 206.281434][ T6212] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.378101][ T6212] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 206.417841][ T6212] System zones: 0-1, 3-36 [ 206.464248][ T6212] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 206.505528][ T6224] syz.4.434[6224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.505641][ T6224] syz.4.434[6224] is installing a program with bpf_probe_write_user helper that may corrupt user memory!Â: renamed from pim6reg1 [ 207.330464][ T6243] 9pnet: Insufficient options for proto=fd [ 209.408883][ T6260] loop1: detected capacity change from 0 to 16 [ 209.972502][ T6260] erofs: (device loop1): mounted with root inode @ nid 36. [ 209.989887][ T6258] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 210.001346][ T6258] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 213.038194][ T6296] 9pnet: Insufficient options for proto=fd [ 213.125884][ T6299] loop0: detected capacity change from 0 to 1024 [ 213.182379][ T6290] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 213.251977][ T6299] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 213.336507][ T6299] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.786005][ T6311] loop6: detected capacity change from 0 to 16 [ 214.890531][ T6299] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 214.991996][ T6299] System zones: 0-1, 3-36 [ 215.152565][ T6299] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 215.202212][ T6311] erofs: (device loop6): mounted with root inode @ nid 36. [ 215.217165][ T6310] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 215.228827][ T6310] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 215.473281][ T6331] loop4: detected capacity change from 0 to 256 [ 217.547511][ T6331] FAT-fs (loop4): Directory bread(block 64) failed [ 217.561155][ T6331] FAT-fs (loop4): Directory bread(block 65) failed [ 217.561257][ T6331] FAT-fs (loop4): Directory bread(block 66) failed [ 217.561287][ T6331] FAT-fs (loop4): Directory bread(block 67) failed [ 217.561395][ T6331] FAT-fs (loop4): Directory bread(block 68) failed [ 217.561427][ T6331] FAT-fs (loop4): Directory bread(block 69) failed [ 217.561513][ T6331] FAT-fs (loop4): Directory bread(block 70) failed [ 217.561543][ T6331] FAT-fs (loop4): Directory bread(block 71) failed [ 217.561607][ T6331] FAT-fs (loop4): Directory bread(block 72) failed [ 217.561647][ T6331] FAT-fs (loop4): Directory bread(block 73) failed [ 219.710505][ T6358] binder: 6357:6358 ioctl 4018620d 0 returned -22 [ 219.910939][ T6365] 9pnet: Insufficient options for proto=fd [ 220.362726][ T6070] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 220.608398][ T6387] loop1: detected capacity change from 0 to 16 [ 220.622295][ T4236] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 220.630247][ T6387] erofs: (device loop1): mounted with root inode @ nid 36. [ 220.648022][ T6387] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 220.659531][ T6387] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 221.138866][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 221.385281][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.450005][ T4236] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 221.507030][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.573947][ T6394] loop1: detected capacity change from 0 to 1024 [ 221.580969][ T4236] usb 1-1: config 0 descriptor?? [ 221.598826][ T6070] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.631689][ T6070] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 221.659029][ T6070] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 221.669898][ T6394] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 221.678005][ T6394] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 221.746243][ T6394] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 221.794100][ T6394] System zones: 0-1, 3-36 [ 221.846399][ T6394] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 221.928551][ T6070] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.944660][ T6070] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 221.973437][ T6070] usb 7-1: Product: syz [ 221.977668][ T6070] usb 7-1: Manufacturer: syz [ 222.014688][ T6070] usb 7-1: SerialNumber: syz [ 222.019584][ T4302] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 222.089335][ T6070] cdc_mbim 7-1:1.0: skipping garbage [ 222.116698][ T4236] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 222.296708][ T6360] udc-core: couldn't find an available UDC or it's busy [ 222.312997][ T6360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 222.329223][ T4302] usb 5-1: Using ep0 maxpacket: 16 [ 222.343330][ T6360] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 222.473909][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.498462][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.513162][ T4236] usb 1-1: USB disconnect, device number 4 [ 222.543223][ T4302] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 223.597299][ T4302] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 223.607395][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.617680][ T4302] usb 5-1: config 0 descriptor?? [ 223.768980][ T6421] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 223.849233][ T6070] cdc_mbim 7-1:1.0: bind() failure [ 223.865591][ T6070] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 223.899934][ T6070] cdc_ncm 7-1:1.1: bind() failure [ 224.050394][ T4301] usb 7-1: USB disconnect, device number 2 [ 224.188570][ T6440] loop7: detected capacity change from 0 to 16 [ 224.900490][ T4302] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 224.907767][ T4302] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 224.989014][ T6445] binder: 6444:6445 ioctl 4018620d 0 returned -22 [ 224.997846][ T6440] erofs: (device loop7): mounted with root inode @ nid 36. [ 225.013019][ T6439] erofs: (device loop7): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 225.024209][ T6439] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 225.042789][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 225.128978][ T4302] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 225.156680][ T4302] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 225.174746][ T4302] microsoft 0003:045E:07DA.0004: no inputs found [ 225.183756][ T4302] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 225.228784][ T4302] usb 5-1: USB disconnect, device number 6 [ 225.400281][ T6453] fido_id[6453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 225.478286][ T4244] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 225.508263][ T4301] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 225.621272][ T6461] tipc: Enabling of bearer rejected, failed to enable media [ 225.738738][ T4244] usb 2-1: Using ep0 maxpacket: 32 [ 225.908519][ T4301] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.924267][ T4244] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 225.928261][ T4301] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 225.957898][ T4244] usb 2-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 225.967143][ T4301] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.992144][ T4244] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.992998][ T4301] usb 7-1: config 0 descriptor?? [ 226.008207][ T4236] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 226.026290][ T4244] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 226.046573][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.077889][ T4244] usb 2-1: config 0 descriptor?? [ 226.258297][ T4236] usb 5-1: Using ep0 maxpacket: 32 [ 226.276759][ T6486] netlink: 288 bytes leftover after parsing attributes in process `syz.0.488'. [ 226.321864][ T6452] udc-core: couldn't find an available UDC or it's busy [ 226.338701][ T6452] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 226.358340][ T4259] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 226.378690][ T4236] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 226.391769][ T4236] usb 5-1: config 0 has no interface number 0 [ 226.438235][ T4244] usbhid 2-1:0.0: can't add hid device: -71 [ 226.444660][ T4244] usbhid: probe of 2-1:0.0 failed with error -71 [ 226.470514][ T4244] usb 2-1: USB disconnect, device number 4 [ 226.499993][ T4301] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 226.507572][ T4301] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 226.536982][ T4301] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 226.561364][ T4236] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 226.567970][ T4301] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 226.577903][ T4301] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 226.585559][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.598408][ T4236] usb 5-1: Product: syz [ 226.602694][ T4236] usb 5-1: Manufacturer: syz [ 226.613504][ T4236] usb 5-1: SerialNumber: syz [ 226.618701][ T4259] usb 8-1: Using ep0 maxpacket: 32 [ 226.638340][ T4236] usb 5-1: config 0 descriptor?? [ 226.638683][ T4301] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v0.00 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 226.689077][ T4236] smsc95xx v2.0.0 [ 226.743432][ T4259] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 226.762891][ T4259] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.793722][ T4259] usb 8-1: config 0 descriptor?? [ 226.855858][ T4259] as10x_usb: device has been detected [ 226.872960][ T4259] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 226.924655][ T4259] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 226.948303][ T4244] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 226.990065][ T4259] as10x_usb: error during firmware upload part1 [ 227.006989][ T4259] Registered device nBox DVB-T Dongle [ 227.054174][ T4259] usb 8-1: USB disconnect, device number 2 [ 227.093337][ T4259] Unregistered device nBox DVB-T Dongle [ 227.109295][ T4259] as10x_usb: device has been disconnected [ 227.128304][ T4236] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 227.150130][ T4236] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 227.208254][ T4244] usb 2-1: Using ep0 maxpacket: 32 [ 227.335571][ T4244] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 227.356019][ T4244] usb 2-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 227.376119][ T4244] usb 2-1: config 0 interface 0 has no altsetting 0 [ 227.383781][ T4244] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 227.399529][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.424481][ T4244] usb 2-1: config 0 descriptor?? [ 227.618364][ T1325] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 227.671480][ T4259] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 227.838247][ T4236] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 227.854835][ T4236] smsc95xx: probe of 5-1:0.67 failed with error -32 [ 227.868253][ T1325] usb 1-1: Using ep0 maxpacket: 8 [ 227.929573][ T4244] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0006/input/input7 [ 227.968275][ T4259] usb 8-1: too many configurations: 13, using maximum allowed: 8 [ 228.024662][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.038553][ T1325] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 228.050526][ T4259] usb 8-1: config 0 has no interfaces? [ 228.057152][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.059668][ T4244] sony 0003:054C:03D5.0006: input,hidraw1: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 228.086192][ T1325] usb 1-1: config 0 descriptor?? [ 228.137867][ T4259] usb 8-1: config 0 has no interfaces? [ 228.145655][ T4302] usb 2-1: USB disconnect, device number 5 [ 228.182727][ T4301] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 9: -71 [ 228.228592][ T4259] usb 8-1: config 0 has no interfaces? [ 228.231668][ T4301] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -71 [ 228.263249][ T6541] fido_id[6541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 228.283694][ T4301] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense [ 228.292667][ T4301] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 228.307616][ T4301] playstation: probe of 0003:054C:0DF2.0005 failed with error -71 [ 228.309112][ T4259] usb 8-1: config 0 has no interfaces? [ 228.348001][ T4301] usb 7-1: USB disconnect, device number 3 [ 228.362338][ T6511] udc-core: couldn't find an available UDC or it's busy [ 228.374975][ T6511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 228.418814][ T4259] usb 8-1: config 0 has no interfaces? [ 228.426742][ T6511] udc-core: couldn't find an available UDC or it's busy [ 228.455795][ T6511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 228.475868][ T6511] udc-core: couldn't find an available UDC or it's busy [ 228.484950][ T6551] fido_id[6551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 228.504494][ T6511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 228.511610][ T4259] usb 8-1: config 0 has no interfaces? [ 228.532456][ T1325] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 228.588446][ T4259] usb 8-1: config 0 has no interfaces? [ 228.668353][ T4259] usb 8-1: config 0 has no interfaces? [ 228.796515][ T6564] binder: 6563:6564 ioctl 4018620d 0 returned -22 [ 228.828247][ T4259] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.837420][ T4259] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.881343][ T4301] usb 5-1: USB disconnect, device number 7 [ 228.894597][ T4259] usb 8-1: Product: syz [ 228.904008][ T4259] usb 8-1: Manufacturer: syz [ 228.928119][ T4259] usb 8-1: SerialNumber: syz [ 228.949274][ T4259] usb 8-1: config 0 descriptor?? [ 228.971058][ T4259] usb 8-1: can't set config #0, error -71 [ 228.989982][ T4259] usb 8-1: USB disconnect, device number 3 [ 229.083805][ T4302] usb 1-1: USB disconnect, device number 5 [ 229.167700][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.499'. [ 229.206004][ T4236] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 229.231909][ T6587] tipc: Enabling of bearer rejected, failed to enable media [ 229.383909][ T6591] fuse: Bad value for 'user_id' [ 229.458132][ T4236] usb 2-1: Using ep0 maxpacket: 8 [ 229.578203][ T4236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.608287][ T4236] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 229.665569][ T6602] binder: BINDER_SET_CONTEXT_MGR already set [ 229.686374][ T6605] netlink: 288 bytes leftover after parsing attributes in process `syz.4.501'. [ 229.699631][ T6602] binder: 6601:6602 ioctl 4018620d 200000004a80 returned -16 [ 229.798470][ T4236] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 229.813050][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 229.830831][ T4236] usb 2-1: Product: syz [ 229.837842][ T4236] usb 2-1: Manufacturer: syz [ 229.847260][ T4236] usb 2-1: SerialNumber: syz [ 229.876543][ T4236] usb 2-1: config 0 descriptor?? [ 229.937840][ T4236] imon_raw 2-1:0.0: IR endpoint missing [ 230.282146][ T4251] usb 2-1: USB disconnect, device number 6 [ 230.847758][ T6628] fuse: Bad value for 'user_id' [ 230.859192][ T6629] tipc: Started in network mode [ 230.864102][ T6629] tipc: Node identity 7f000001, cluster identity 4711 [ 230.898583][ T6629] tipc: Enabled bearer , priority 10 [ 231.181654][ T6640] binder: BINDER_SET_CONTEXT_MGR already set [ 231.209593][ T4251] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 231.217259][ T6640] binder: 6636:6640 ioctl 4018620d 200000004a80 returned -16 [ 231.416316][ T6652] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 231.485267][ T4251] usb 7-1: Using ep0 maxpacket: 32 [ 232.589008][ T4251] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 232.597240][ T4251] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 232.682871][ T6662] fuse: Bad value for 'user_id' [ 232.687961][ T4251] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 232.736104][ T4251] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 232.828699][ T6665] 9pnet: Insufficient options for proto=fd [ 232.838319][ T4251] usb 7-1: config 0 interface 0 has no altsetting 0 [ 232.868210][ T4301] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 232.881270][ T4259] tipc: Node number set to 2130706433 [ 232.914778][ T6669] tipc: Enabling of bearer rejected, already enabled [ 233.038436][ T4251] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 233.057936][ T4251] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 233.067259][ T4251] usb 7-1: Product: syz [ 233.073037][ T4251] usb 7-1: Manufacturer: syz [ 233.095165][ T4251] usb 7-1: SerialNumber: syz [ 233.117082][ T4301] usb 2-1: Using ep0 maxpacket: 16 [ 233.137140][ T4251] usb 7-1: config 0 descriptor?? [ 233.186197][ T6684] binder: BINDER_SET_CONTEXT_MGR already set [ 233.199740][ T4251] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 233.206470][ T6684] binder: 6682:6684 ioctl 4018620d 200000004a80 returned -16 [ 233.273195][ T4301] usb 2-1: config 0 has an invalid interface number: 5 but max is 0 [ 233.289196][ T4301] usb 2-1: config 0 has no interface number 0 [ 233.367347][ T4251] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 233.410166][ T6633] udc-core: couldn't find an available UDC or it's busy [ 233.417327][ T6633] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 233.426910][ T6633] udc-core: couldn't find an available UDC or it's busy [ 233.434273][ T6633] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 233.461685][ T6633] udc-core: couldn't find an available UDC or it's busy [ 233.468954][ T6633] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 233.478457][ T4301] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=4b.84 [ 233.489976][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.504296][ T4301] usb 2-1: Product: syz [ 233.511642][ T4301] usb 2-1: Manufacturer: syz [ 233.516444][ T4301] usb 2-1: SerialNumber: syz [ 233.528160][ T4236] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 233.537522][ T4301] usb 2-1: config 0 descriptor?? [ 233.578380][ T6070] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 233.683892][ T6633] udc-core: couldn't find an available UDC or it's busy [ 233.691180][ T6633] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 233.702710][ T6633] udc-core: couldn't find an available UDC or it's busy [ 233.711053][ T6633] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 233.725737][ T6633] ldusb 7-1:0.0: Write buffer overflow, 64804 bytes dropped [ 233.778195][ T4236] usb 5-1: Using ep0 maxpacket: 32 [ 233.899092][ T4236] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 233.907393][ T4236] usb 5-1: config 0 has no interface number 0 [ 233.924967][ T4236] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 233.938354][ T4301] usb 2-1: probing VID:PID(2201:012C) [ 233.940481][ T4236] usb 5-1: config 0 interface 126 has no altsetting 0 [ 233.954636][ T4301] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 0A [ 233.963230][ T4301] usb 2-1: vub300 ignoring EndPoint(0) 0A [ 233.969508][ T4301] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 233.979077][ T6070] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.990227][ T6070] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 234.021490][ T6070] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 234.031737][ T6070] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.051391][ T4301] vub300: probe of 2-1:0.5 failed with error -22 [ 234.059145][ T6070] usb 8-1: config 0 descriptor?? [ 234.076259][ T4301] usb 2-1: USB disconnect, device number 7 [ 234.108454][ T4236] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 234.127141][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.135471][ T4236] usb 5-1: Product: syz [ 234.141884][ T6070] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 234.146107][ T4236] usb 5-1: Manufacturer: syz [ 234.169067][ T4236] usb 5-1: SerialNumber: syz [ 234.206432][ T4236] usb 5-1: config 0 descriptor?? [ 234.228562][ T6679] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 235.246437][ T6714] device syzkaller0 entered promiscuous mode [ 235.656274][ T6715] udc-core: couldn't find an available UDC or it's busy [ 235.710595][ T6715] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 236.380665][ T4236] ir_usb 5-1:0.126: required endpoints missing [ 236.397966][ T4236] usb 5-1: USB disconnect, device number 8 [ 236.427003][ T6734] tipc: Enabling of bearer rejected, already enabled [ 236.523335][ T6739] binder: 6737:6739 ioctl c0306201 0 returned -14 [ 236.990116][ T6755] netlink: 288 bytes leftover after parsing attributes in process `syz.1.539'. [ 237.085542][ T4244] usb 8-1: USB disconnect, device number 4 [ 238.869785][ T6633] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 238.959960][ T6070] usb 7-1: USB disconnect, device number 4 [ 238.989009][ T6070] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 239.012588][ T6787] binder: 6785:6787 ioctl c0306201 0 returned -14 [ 239.091363][ T6790] tipc: Enabling of bearer rejected, already enabled [ 239.478910][ T6797] loop0: detected capacity change from 0 to 16 [ 239.895724][ T6797] erofs: (device loop0): mounted with root inode @ nid 36. [ 239.911017][ T6796] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 239.922244][ T6796] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 240.129408][ T6803] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 241.108107][ T6070] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 242.227311][ T6070] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 242.318216][ T6070] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.381800][ T6070] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.424087][ T6070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.441585][ T6836] binder: 6833:6836 ioctl c0306201 0 returned -14 [ 242.477604][ T6070] usb 5-1: config 0 descriptor?? [ 242.540664][ T6070] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 242.591458][ T6842] tipc: Started in network mode [ 242.613126][ T6842] tipc: Node identity 7f000001, cluster identity 4711 [ 242.633001][ T6842] tipc: Enabled bearer , priority 10 [ 243.003501][ T6856] loop0: detected capacity change from 0 to 16 [ 243.060479][ T6856] erofs: (device loop0): mounted with root inode @ nid 36. [ 243.075102][ T6856] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 243.086255][ T6856] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 243.479547][ T6858] udc-core: couldn't find an available UDC or it's busy [ 243.577112][ T6858] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 243.649525][ T4611] tipc: Node number set to 2130706433 [ 243.775804][ T6858] udc-core: couldn't find an available UDC or it's busy [ 243.813444][ T6858] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 244.083222][ T4611] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.305672][ T4302] usb 5-1: USB disconnect, device number 9 [ 244.369691][ T6881] xt_bpf: check failed: parse error [ 244.513571][ T4611] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 244.656244][ T4611] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 244.840145][ T4611] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.056629][ T4611] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.150514][ T4611] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.196625][ T4611] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.233567][ T6866] netlink: 288 bytes leftover after parsing attributes in process `syz.0.573'. [ 245.259370][ T4611] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.336063][ T6899] tipc: Enabling of bearer rejected, already enabled [ 245.398455][ T4611] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.416573][ T4611] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.508495][ T6904] loop6: detected capacity change from 0 to 16 [ 245.656618][ T4611] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.676905][ T6904] erofs: (device loop6): mounted with root inode @ nid 36. [ 245.692004][ T6904] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 245.703156][ T6904] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 245.989216][ T4611] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.293831][ T4611] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.306279][ T4611] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.559627][ T4611] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.569121][ T4611] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.580114][ T4611] usb 2-1: config 0 interface 0 has no altsetting 0 [ 247.306011][ T6927] xt_bpf: check failed: parse error [ 247.638193][ T4611] usb 2-1: unable to read config index 5 descriptor/start: -71 [ 247.654622][ T4611] usb 2-1: can't read configurations, error -71 [ 247.674205][ T6938] binder: BINDER_SET_CONTEXT_MGR already set [ 247.720965][ T6938] binder: 6937:6938 ioctl 4018620d 200000004a80 returned -16 [ 247.737912][ T6945] tipc: Started in network mode [ 247.766762][ T6945] tipc: Node identity 7f000001, cluster identity 4711 [ 247.802755][ T6945] tipc: Enabled bearer , priority 10 [ 247.904326][ T6953] loop6: detected capacity change from 0 to 16 [ 248.109954][ T6953] erofs: (device loop6): mounted with root inode @ nid 36. [ 248.125192][ T6953] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 248.136384][ T6953] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 248.217620][ T6956] fuse: Bad value for 'fd' [ 248.798163][ T4251] tipc: Node number set to 2130706433 [ 249.195992][ T6980] xt_bpf: check failed: parse error [ 250.063865][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 250.098580][ T6988] loop0: detected capacity change from 0 to 128 [ 250.401411][ T6996] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 250.410537][ T6996] FAT-fs (loop0): Filesystem has been set read-only [ 250.421926][ T7000] fuse: Bad value for 'fd' [ 250.678665][ T7009] netlink: 288 bytes leftover after parsing attributes in process `syz.1.600'. [ 250.707470][ T7012] tipc: Started in network mode [ 250.728302][ T7012] tipc: Node identity 7f000001, cluster identity 4711 [ 250.748095][ T7012] tipc: Enabled bearer , priority 10 [ 251.644271][ T7038] loop0: detected capacity change from 0 to 16 [ 251.659222][ T7035] loop6: detected capacity change from 0 to 128 [ 251.728813][ T7038] erofs: (device loop0): mounted with root inode @ nid 36. [ 251.744132][ T7038] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 251.755289][ T7038] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 251.771309][ T4251] tipc: Node number set to 2130706433 [ 252.144411][ T7040] loop4: detected capacity change from 0 to 16 [ 252.399465][ T7040] erofs: (device loop4): mounted with root inode @ nid 36. [ 252.417255][ T7040] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 252.428514][ T7040] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 252.525730][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.534450][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.713782][ T7056] fuse: Bad value for 'fd' [ 252.956465][ T7067] tipc: Enabling of bearer rejected, already enabled [ 253.528575][ T7089] loop7: detected capacity change from 0 to 16 [ 253.639015][ T7089] erofs: (device loop7): mounted with root inode @ nid 36. [ 253.654462][ T7089] erofs: (device loop7): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 253.665688][ T7089] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 254.692453][ T7109] tipc: Enabling of bearer rejected, already enabled [ 255.151441][ T7131] tmpfs: Cannot retroactively limit inodes [ 255.504671][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.511141][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.866754][ T7162] netlink: 288 bytes leftover after parsing attributes in process `syz.1.647'. [ 256.349647][ T7180] xt_hashlimit: size too large, truncated to 1048576 [ 256.449221][ T7184] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.757937][ T7198] loop0: detected capacity change from 0 to 512 [ 256.850416][ T7198] EXT4-fs (loop0): Ignoring removed nobh option [ 256.871735][ T7198] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 256.956658][ T7198] EXT4-fs (loop0): 1 truncate cleaned up [ 256.968378][ T7198] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 257.445557][ T7220] loop0: detected capacity change from 0 to 2048 [ 257.644278][ T7220] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 258.468682][ T7232] [ 258.471055][ T7232] ====================================================== [ 258.478092][ T7232] WARNING: possible circular locking dependency detected [ 258.485163][ T7232] syzkaller #0 Not tainted [ 258.489593][ T7232] ------------------------------------------------------ [ 258.496636][ T7232] syz.0.674/7232 is trying to acquire lock: [ 258.502540][ T7232] ffff88805f184690 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 258.512357][ T7232] [ 258.512357][ T7232] but task is already holding lock: [ 258.519736][ T7232] ffff888073d7ebd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 258.529861][ T7232] [ 258.529861][ T7232] which lock already depends on the new lock. [ 258.529861][ T7232] [ 258.540274][ T7232] [ 258.540274][ T7232] the existing dependency chain (in reverse order) is: [ 258.549300][ T7232] [ 258.549300][ T7232] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 258.557770][ T7232] percpu_down_read+0x46/0x1b0 [ 258.563102][ T7232] ext4_writepages+0x20f/0x2df0 [ 258.568527][ T7232] do_writepages+0x476/0x6e0 [ 258.573663][ T7232] __writeback_single_inode+0x153/0xda0 [ 258.579770][ T7232] writeback_single_inode+0x3cb/0x8e0 [ 258.585686][ T7232] write_inode_now+0x23b/0x2c0 [ 258.591000][ T7232] iput+0x5ab/0x8a0 [ 258.595439][ T7232] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 258.601370][ T7232] ext4_xattr_block_set+0x4fd/0x2d20 [ 258.607216][ T7232] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 258.613568][ T7232] __ext4_expand_extra_isize+0x301/0x3e0 [ 258.619737][ T7232] __ext4_mark_inode_dirty+0x469/0x700 [ 258.625743][ T7232] ext4_evict_inode+0xa8d/0x1090 [ 258.631226][ T7232] evict+0x4c9/0x8d0 [ 258.635819][ T7232] ext4_orphan_cleanup+0xad2/0x1320 [ 258.641590][ T7232] ext4_fill_super+0x8e25/0x95a0 [ 258.647074][ T7232] mount_bdev+0x287/0x3c0 [ 258.651954][ T7232] legacy_get_tree+0xe6/0x180 [ 258.657185][ T7232] vfs_get_tree+0x88/0x270 [ 258.662150][ T7232] do_new_mount+0x24a/0xa40 [ 258.667198][ T7232] __se_sys_mount+0x2e3/0x3d0 [ 258.672435][ T7232] do_syscall_64+0x4c/0xa0 [ 258.677414][ T7232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.683855][ T7232] [ 258.683855][ T7232] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 258.691438][ T7232] __lock_acquire+0x2c42/0x7d10 [ 258.696839][ T7232] lock_acquire+0x19e/0x400 [ 258.701989][ T7232] down_write+0x38/0x60 [ 258.706694][ T7232] ext4_destroy_inline_data+0x24/0xe0 [ 258.712609][ T7232] ext4_writepages+0x670/0x2df0 [ 258.718000][ T7232] do_writepages+0x476/0x6e0 [ 258.723130][ T7232] filemap_fdatawrite_wbc+0x1eb/0x240 [ 258.729065][ T7232] filemap_flush+0xd4/0x130 [ 258.734109][ T7232] ext4_convert_inline_data+0x18b/0x5f0 [ 258.740201][ T7232] ext4_fallocate+0xf4/0x1ed0 [ 258.745425][ T7232] vfs_fallocate+0x587/0x6f0 [ 258.750571][ T7232] do_vfs_ioctl+0x1bd5/0x1ef0 [ 258.755778][ T7232] __se_sys_ioctl+0x83/0x170 [ 258.760921][ T7232] do_syscall_64+0x4c/0xa0 [ 258.765906][ T7232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.772345][ T7232] [ 258.772345][ T7232] other info that might help us debug this: [ 258.772345][ T7232] [ 258.782578][ T7232] Possible unsafe locking scenario: [ 258.782578][ T7232] [ 258.790039][ T7232] CPU0 CPU1 [ 258.795415][ T7232] ---- ---- [ 258.800795][ T7232] lock(&sbi->s_writepages_rwsem); [ 258.806002][ T7232] lock(&ei->xattr_sem); [ 258.812914][ T7232] lock(&sbi->s_writepages_rwsem); [ 258.820650][ T7232] lock(&ei->xattr_sem); [ 258.825006][ T7232] [ 258.825006][ T7232] *** DEADLOCK *** [ 258.825006][ T7232] [ 258.833163][ T7232] 3 locks held by syz.0.674/7232: [ 258.838201][ T7232] #0: ffff888069050460 (sb_writers#5){.+.+}-{0:0}, at: vfs_fallocate+0x4f4/0x6f0 [ 258.847453][ T7232] #1: ffff88805f1849b8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_fallocate+0xec/0x1ed0 [ 258.858010][ T7232] #2: ffff888073d7ebd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 258.868577][ T7232] [ 258.868577][ T7232] stack backtrace: [ 258.874501][ T7232] CPU: 0 PID: 7232 Comm: syz.0.674 Not tainted syzkaller #0 [ 258.881843][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.891933][ T7232] Call Trace: [ 258.895231][ T7232] [ 258.898185][ T7232] dump_stack_lvl+0x188/0x250 [ 258.902885][ T7232] ? load_image+0x400/0x400 [ 258.907424][ T7232] ? show_regs_print_info+0x20/0x20 [ 258.912672][ T7232] ? print_circular_bug+0x12b/0x1a0 [ 258.917889][ T7232] check_noncircular+0x296/0x330 [ 258.922842][ T7232] ? add_chain_block+0x940/0x940 [ 258.927792][ T7232] ? lockdep_lock+0xf1/0x1f0 [ 258.932402][ T7232] ? lockdep_lock+0xf1/0x1f0 [ 258.937029][ T7232] ? mark_lock+0x94/0x320 [ 258.941383][ T7232] __lock_acquire+0x2c42/0x7d10 [ 258.946270][ T7232] ? verify_lock_unused+0x140/0x140 [ 258.951527][ T7232] ? verify_lock_unused+0x140/0x140 [ 258.956756][ T7232] lock_acquire+0x19e/0x400 [ 258.961276][ T7232] ? ext4_destroy_inline_data+0x24/0xe0 [ 258.966837][ T7232] ? read_lock_is_recursive+0x10/0x10 [ 258.972228][ T7232] ? rcu_read_lock_any_held+0xb0/0x130 [ 258.977750][ T7232] ? ext4_journal_check_start+0x180/0x250 [ 258.983508][ T7232] down_write+0x38/0x60 [ 258.987681][ T7232] ? ext4_destroy_inline_data+0x24/0xe0 [ 258.993253][ T7232] ext4_destroy_inline_data+0x24/0xe0 [ 258.998651][ T7232] ext4_writepages+0x670/0x2df0 [ 259.003523][ T7232] ? mark_lock+0x94/0x320 [ 259.007865][ T7232] ? verify_lock_unused+0x140/0x140 [ 259.013081][ T7232] ? mark_lock+0x94/0x320 [ 259.017440][ T7232] ? ext4_readpage+0x2e0/0x2e0 [ 259.022233][ T7232] ? __lock_acquire+0x7d10/0x7d10 [ 259.027286][ T7232] ? do_raw_spin_lock+0x128/0x2f0 [ 259.032353][ T7232] ? do_raw_spin_unlock+0x11d/0x230 [ 259.037578][ T7232] ? ext4_readpage+0x2e0/0x2e0 [ 259.042368][ T7232] do_writepages+0x476/0x6e0 [ 259.046983][ T7232] ? filemap_fdatawrite_wbc+0x1e0/0x240 [ 259.052556][ T7232] ? __writepage+0x130/0x130 [ 259.057165][ T7232] ? __lock_acquire+0x7d10/0x7d10 [ 259.062207][ T7232] ? __rwlock_init+0x140/0x140 [ 259.066981][ T7232] ? do_raw_spin_unlock+0x11d/0x230 [ 259.072195][ T7232] filemap_fdatawrite_wbc+0x1eb/0x240 [ 259.077593][ T7232] filemap_flush+0xd4/0x130 [ 259.082118][ T7232] ? filemap_fdatawrite_range+0x140/0x140 [ 259.087871][ T7232] ext4_convert_inline_data+0x18b/0x5f0 [ 259.093521][ T7232] ? rwsem_write_trylock+0x135/0x1c0 [ 259.098830][ T7232] ? ext4_inline_data_truncate+0xbf0/0xbf0 [ 259.104676][ T7232] ext4_fallocate+0xf4/0x1ed0 [ 259.109386][ T7232] vfs_fallocate+0x587/0x6f0 [ 259.114051][ T7232] do_vfs_ioctl+0x1bd5/0x1ef0 [ 259.118739][ T7232] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 259.124394][ T7232] ? rcu_lock_release+0x5/0x20 [ 259.129218][ T7232] ? kfree+0xef/0x2a0 [ 259.133227][ T7232] ? tomoyo_path_number_perm+0x5b4/0x660 [ 259.138881][ T7232] ? verify_lock_unused+0x140/0x140 [ 259.144128][ T7232] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 259.149631][ T7232] ? bpf_lsm_file_ioctl+0x5/0x10 [ 259.154581][ T7232] ? security_file_ioctl+0x7c/0xa0 [ 259.159713][ T7232] __se_sys_ioctl+0x83/0x170 [ 259.164313][ T7232] do_syscall_64+0x4c/0xa0 [ 259.168780][ T7232] ? clear_bhb_loop+0x30/0x80 [ 259.173480][ T7232] ? clear_bhb_loop+0x30/0x80 [ 259.178165][ T7232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.184072][ T7232] RIP: 0033:0x7f5c492fdeb9 [ 259.188498][ T7232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.208127][ T7232] RSP: 002b:00007f5c47538028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.216560][ T7232] RAX: ffffffffffffffda RBX: 00007f5c49579090 RCX: 00007f5c492fdeb9 [ 259.224552][ T7232] RDX: 0000200000000240 RSI: 0000000040305829 RDI: 0000000000000004 [ 259.232545][ T7232] RBP: 00007f5c4936bc1f R08: 0000000000000000 R09: 0000000000000000 [ 259.240540][ T7232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.248528][ T7232] R13: 00007f5c49579128 R14: 00007f5c49579090 R15: 00007ffcc1d5d7a8 [ 259.256520][ T7232] [ 259.271921][ T7232] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 259.335670][ T7232] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 256 with error 28 [ 259.500949][ T7232] EXT4-fs (loop0): This should not happen!! Data will be lost [ 259.500949][ T7232] [ 259.530061][ T7232] EXT4-fs (loop0): Total free blocks count 0 [ 259.592162][ T7232] EXT4-fs (loop0): Free/Dirty block details [ 259.601581][ T7232] EXT4-fs (loop0): free_blocks=2415919504 [ 259.607406][ T7232] EXT4-fs (loop0): dirty_blocks=256 [ 259.613667][ T7232] EXT4-fs (loop0): Block reservation details [ 259.622639][ T7232] EXT4-fs (loop0): i_reserved_data_blocks=16