last executing test programs: 2m48.026697735s ago: executing program 32 (id=74): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 2m42.728349233s ago: executing program 33 (id=105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2m15.757141254s ago: executing program 0 (id=236): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m14.832702362s ago: executing program 0 (id=232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40000) 2m14.658572776s ago: executing program 0 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x2, 0x1, {0x1}}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m14.48619112s ago: executing program 0 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 2m14.118692298s ago: executing program 0 (id=239): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x80000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2m12.208167706s ago: executing program 0 (id=246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xd, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x7, 0x7f}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x3, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m11.982098011s ago: executing program 34 (id=246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xd, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x7, 0x7f}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x3, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m52.562269287s ago: executing program 7 (id=364): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x4, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0) 1m52.317691582s ago: executing program 7 (id=366): syz_emit_ethernet(0x1017, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x200, 0x8, 0x7, 0x4000000000000e4d, 0x7, 0x5479, 0x103d, 0x200000000006, 0x0, 0x100000032a, 0xfffffffffffffffe, 0xc6, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x0, 0x84cd4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m51.836564942s ago: executing program 7 (id=370): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000002003008500000007000100181100006f03147392f0237d", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m51.147068955s ago: executing program 7 (id=373): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75c, &(0x7f0000000b00)="$eJzs3M1rHGUYAPBnJtmkTaMbQfDjIEILFko3SXNpT40Xb4VCwWsNySSETLIhu6ndWLD1LNTmoiCIePboVSj1D/AmBQXvgmiNB/GyMptNatNsum3Srqa/H0z3eefjfd6nO7zsQN4J4Ln1ZvFPEjEcERcjotzen0bEQCs6EnF987yNe9emiy2JZvPSb0lxWWw0y9t9Je3PY9G6JF6NiDuliFMfPZy31lhbmMrzbKXdHq0vLo/WGmtD84tTc9lctjQ+cW7s7MTE2bGJR9bwSpe1nnj33NFb37+zvv7DN/Wbb/SfTmKyVXe0a+uym8ey+X9Siskd+5eeRrIeSno9AAAAulL8zu+LiP7Wr9Ry9LUiAAAA4DBpDjYBAACAQy+JPQ4e2esgAAAA8P+w9XcAW2t7n9Y62E5+fTsiRnbL399aQxxxJEoRMbSRPLAyIdm8DPbl+o2IuD258/77qrjDru+z77Ed7QfXSA/ss3cOwu1i/pncbf5Jt+ef2GX+6d96d8I+dZ7/7ufv6zD/Xewyx7dfvFbqmP9GxOv9u+VPtvMnHfK/12X+m+sf33rUObvl/3eurfdDnH74/RCTs/P5nq8fuPP3ybudjhX1D3XK3+q1c/3LXdRe+GDjj4VOc0mR/+Txvb//3fIX98Qn7XGkEXGr/Vm013fkOL7443d71T8T0XyS7//LLuv/+evBq12eCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC1pRAxHkla24zStVCKORcTLMZTm1Vr91Gx1dWmmOBYxEqV0dj7PxiKivNlOivZ4K77fPrOjPRERL/10dDPpfJ5Vpqv5TK+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNuxiBiOJK1ERBoRf5bTtFKJ6O/i2sFnMD4AAADggIz0egAAAADAU+f5HwAAAA6/J33+Tw54HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMChdvHChWJrbty7Nl20Z640VheqV07PZLWFyuLqdGW6urJcmatW5/KsMl1dfFR/ebW6PH4uVq+O1rNafbTWWLu8WF1dql+eX5yayy5npWdSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI9ruLUlaSUi0lacppVKxAsRMRKlZHY+z8Yi4sWIuFsuDRbt8V4PGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgANXa6wtTOV5tiIQCJ5Z8GFE/AeGsUfQ65kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBeqDXWFqbyPFup9XokAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fb6SxIRxfZW+cTwjoN9A8lf5SIYiIj3P7/06dWpen1lPGIg+X17f/2z9v4zPSkAAAAAngfnH+fkref0red4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbtUaawtTeZ6t7C84H421ZtLhnF7XCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJl/AgAA///CK8Nb") chdir(&(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f0000000840)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1m50.394749409s ago: executing program 7 (id=377): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, r2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x2) 1m49.688098953s ago: executing program 7 (id=381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x5c}}, 0x0) 1m49.510784868s ago: executing program 35 (id=381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x5c}}, 0x0) 1m36.010820519s ago: executing program 8 (id=437): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m35.51011193s ago: executing program 8 (id=442): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r4}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 1m35.372164012s ago: executing program 8 (id=444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="baa100ecb8e5008ed8643ef367640f09ba400066ed67ad640f350fae56e40fc76df70fc775bcb818008ee0", 0xffffffffffffffed}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m34.832815823s ago: executing program 8 (id=447): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1c0, &(0x7f0000000500)="$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") socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x3083, 0x800, 0x0, 0x4e, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m33.308758124s ago: executing program 8 (id=454): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062"], 0x4c}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2000c000) 1m32.602103859s ago: executing program 8 (id=462): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2f, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff2}, {0xffff, 0xffff}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x44004) r0 = syz_clone(0x0, 0x0, 0x57, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ptrace(0x10, r0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f00000022c0)={0x0}) 1m32.264968556s ago: executing program 36 (id=462): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2f, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff2}, {0xffff, 0xffff}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x44004) r0 = syz_clone(0x0, 0x0, 0x57, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ptrace(0x10, r0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f00000022c0)={0x0}) 1m11.247976675s ago: executing program 6 (id=559): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 1m8.650929638s ago: executing program 6 (id=575): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e6"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0xfffffffb}}, 0x30) write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000000000", @ANYRES64=r1], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 1m6.871018104s ago: executing program 6 (id=583): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="202301"], 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xb, 0x40000) io_getevents(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000180)) syz_usb_control_io$uac1(r0, &(0x7f0000000300)={0x14, &(0x7f0000000440)={0x20, 0xc, 0x2, {0x2, 0x27}}, 0x0}, &(0x7f0000000700)={0x44, &(0x7f0000000500)={0x40, 0x30, 0x67, "99373ffeeec86e7f49a42dfa849b98f3399e5d00e39f64ae1c7d8b2a33c3fc7b6bec2746524da486e6e5ff5224fe97219eb1eb3dcf6f7ef3241f4987e2510fcd627032071027a57212b6a0ca5ac16da7a3b922c317c686daaee3aab15b7f6b91a528d5b510f898"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000005c0)={0x20, 0x81, 0x1, "b2"}, 0x0, &(0x7f0000000640)={0x20, 0x83, 0x2, "c69a"}, &(0x7f0000000680)={0x20, 0x84, 0x2, "6b8c"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "f3654b"}}) syz_emit_ethernet(0x88, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x52, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3b}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd"}}}}}}}, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x13f, 0x4}}, 0x20) 1m4.376739295s ago: executing program 6 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x12c7498, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 1m4.1215993s ago: executing program 6 (id=603): r0 = inotify_init() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.585374572s ago: executing program 6 (id=617): socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 1m1.345740317s ago: executing program 37 (id=617): socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 32.254714891s ago: executing program 4 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={[{}, {}, {}, {}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4s5mdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//wHCY0w==") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) 30.920454448s ago: executing program 4 (id=786): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010303010902120001000000000904"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000080)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0}) 27.986888978s ago: executing program 4 (id=801): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 27.388701871s ago: executing program 4 (id=806): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) inotify_init1(0x800) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 27.011001258s ago: executing program 4 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r2}, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0) 26.499579758s ago: executing program 4 (id=816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x3, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0xe474, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.399675751s ago: executing program 38 (id=816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x3, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0xe474, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.34261739s ago: executing program 3 (id=925): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 6.207590393s ago: executing program 3 (id=930): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0x6, 0xcbff, 0x0, {0x5, 0x6, 0x200000003, 0x6c, 0x7, 0x400000000011, 0x3, 0xfffff2df, 0x101, 0xa000, 0x9, 0xffffffffffffffff, 0x0, 0x4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) 5.941089288s ago: executing program 3 (id=934): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x19) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0xb000) 5.86475399s ago: executing program 2 (id=935): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) getdents64(r3, 0x0, 0x0) 5.573362376s ago: executing program 2 (id=938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004d00)=@newtaction={0x78, 0x30, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{0x64, 0x1, [@m_mirred={0x30, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x30, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40014}, 0x2400c800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.491050318s ago: executing program 1 (id=939): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYRESOCT=0x0], 0x0, 0x26, 0x0, 0x1, 0x1}, 0x28) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) 5.213732233s ago: executing program 1 (id=942): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x80, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x34, 0x7, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf, 0x28}}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x800) 5.075017736s ago: executing program 5 (id=944): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file3'}, 0xb) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) 4.87398103s ago: executing program 1 (id=945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c0000005168b0"], 0x480000) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.736223213s ago: executing program 5 (id=947): llistxattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), 0x0}, 0x20) 4.618746655s ago: executing program 2 (id=948): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 4.534594287s ago: executing program 5 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 4.533960587s ago: executing program 3 (id=959): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.371948421s ago: executing program 9 (id=950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x7, 0x108000, 0x40, 0x0, 0xe0, 0x2004cc, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x3, 0x8, 0x200004, 0x0, 0x3, 0xfffffffffffffffd, 0x1], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.266778382s ago: executing program 2 (id=951): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 4.221519033s ago: executing program 1 (id=952): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xa}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 3.116885946s ago: executing program 5 (id=953): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000dc0)="06", 0x1}], 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r3, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a40)={r4, &(0x7f0000000dc0), 0x0}, 0x20) 3.000959059s ago: executing program 3 (id=954): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0xff1f, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.902787801s ago: executing program 1 (id=955): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.831220972s ago: executing program 5 (id=956): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) fadvise64(r1, 0xfcff, 0x20000, 0x3) 2.736143664s ago: executing program 9 (id=957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]}) timer_settime(0x0, 0x1, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x30880, 0x0) syz_clone3(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x90) timer_settime(0x0, 0x1, 0x0, 0x0) 2.544845597s ago: executing program 9 (id=958): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x1}}) r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x31b}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = eventfd2(0x8, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000400)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x4}) write$eventfd(r3, &(0x7f0000000040)=0x6, 0x8) 2.325736122s ago: executing program 9 (id=960): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x4ee}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.149046836s ago: executing program 5 (id=961): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) 2.103396137s ago: executing program 1 (id=962): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1R67trNKK1gFCbgBQVCRVsAFuUHigovcIKEVQhE3iwRIEajSIpAItI1WQoBXsLBiJYzOzDv22BvXbr6cNL/fbvKfc+Y9M++Z9jlzpprnTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEV/46RNDh9NOzwIAuJ9eG39j6Kj3fwB4pJzx+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK2lKOKtSPHe2HKabC93DJxqti5cnBgdu/VmgylSVKJojy//DBw+cvTYiy+9PNzNj97+bvtMvD5+5kTt5Nzs/EJjcbExXZtoNc/OTTe2/Qh3uv1G+9svQG32zQvT584t1o4cOrru7ovVm7sf21s9Pvzsgee7YydGx8bGe8b09d/2s3+fdPceik+QXVHEFyPFNw5+K9UjohJ3XgtbHDvutcHoK+uvvRMTo2PtHZlp1ltL5Z2pkkf1RVR7Nhrp1sh9qMU7MhJxqfznVE54f7l74/P1hfrUTKN2ur6w1FxqzrVSpTPbcn+qUYnhFDEfEcvFTk+eB01/FPFqpLj5veU0FRFFtw5eeG38jaGjm2/Ydx8nucnTV4uI6/EQ1Cw8oHZHEb8dKd6dHIqzua7aZfNBxOfLfCXirTKvpbicl1N5gBiO+Lb3E3io9UURfxMp5tJymu7Wfvu88tSXa19qnZvrGds9r3zoPx/cT85NeIANRBFT7TP+5XT7/7ELAAAAAAAAAAAAALg/ivh6pLg6uy/NR29PabN1vnamPjXT+VZw97v/tbzVysrKSjV1spZzKOdIztM5J3PO57yU83LOKzmv5ryW83rOGzmXc0YlP3/OWs6hnCM5T+eczDmf81LOyzmvdLLb0bhyLa+/nvNGzuWcoe8JAAAAAAAAAAAAAAAAAACAu2wwiviNSPHvv/+V9u9KR/t36T99fPjkqU/1/mb8M1s8Tjn2UER8Pbb3m7y78m+Np0r5v7u/X8DWBqKIr+bf//vlnZ4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQKhEEb8SKb72neUUKSJGIiajkzeKnZ4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDanYp4NVL87O+OrK7ri4jU/n/HvvKvYzFS5HyizFdi5HA7KyMnyhyIOLQD8wdu3+Lb77xZn5lpLLjhhhturN7Y6SMTAAAAAAAAAAAAAAAAADzCUhF/Hyl+8veWUzUiLlZv7n5sb/X48LMHni+iaF8EIPWOf338zInaybnZ+YXG4mJjujbRap6dm25s9+kGTjVbFy5OjI7dk53Z0uA9nv/gwMm5+bcXmud/YemW9+8ZODG1uLRQP3vru2Mw+iKGetfsb094YnSsPemZZr3V3jRVNplgX0RtuzvDI29PKuJ/I8V7B78Zj+d1+fof/Z2lter/w19cW/rhvvW5+q9j+/jx6ePDJ/c8t53babsT3d8uvLIQxsZ7VvflWf5Qz7pqnte2HxseUWX9vxApfv6PitStoVz/P9BZKlbH/s9X12rq+IZctUP1/0TPuuP5qNXfFzGwNDvf/3TEwOLb7xxsztbPN843WseOvPzS8LGXXzz2Uv+uiIFzzZnG0Nqtbb92AAAAAAAAAAAAAAAAAHCv9KcivhApfunv/nK1bzz3/32qs7TW/9fb/7tvw+P0Xjdgs9u37PXboq+vV/mcKRXxVKR49s+eac83xR4973Cb9qQivlvW0/QX0+fyulz/ubP/1vV/aUOu2qH+38d71l3Kx4n/iBSP/8Ez8bme48TG7t5y3F9Eiqkf+WweF7vKcd3H6/REdxqDy7FfiRTvn14/tts3/cTa2MPb3S3YSWX9z0aKf/itv40fzevWX//j1vW/Z0Ou2qH6f7J3nyJi8e133qzPzDQWFrf9UsAjp6z/X48Uf/0n34zn8rqPuv5P9zo/+55bn4PdQTtU/0/1rKvmef3Yx3wtAAAAAAAAAAAA4GGxJxXxT5Hiz//0QDqY123n+7/TG3LVDn3/7+meddPrvv97725s+0UGAIAHRH8q4icixR9Pf5C6vbGb9v++stb/M7rxxL19Tv+D7T7/j3Wu/zH6/8vnTKmI/8t9vUNb9PX+eKT4tZ86kMelveW4ke50238PvDbXOnhiZmbubH2pPjXTqI3P1882ym33R4p//bfP5m0r7T7fbn90pzd4rSf4dyLFz33YHdvpCe72Uj65NvZwOfZgpPju++vHdvuunlobe6Qc+5uRYuy/bz1279rYo+XYf4wU//lurTt2Tzm2+3nu6bWxh87OzXzfRzYAAAAAAAAAAAAAAAAAAAB2Xn8qIkWKaz9zZbU3fv31v7rXAVh//a+N7tXv/1fvzm4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMhRRH/FSneG1tON4pyuWPgVLN14eLE6NitNxtMkaISRXt8+Wfg8JGjx1586eXhbn709nfbZ+L18TMnaifnZucXGouLjenaRKt5dm66se1HuL3ti03v2d9+AWqzb16YPndusXbk0NF1d1+s3tz92N7q8eFnDzzfHTsxOjY23jOmr3/bs99SunsPxSfIrijiryLFNw5+K/1zEVGJ266FVVscO+61wegr66+9ExOjY+0dmWnWW0vlnamSR/VFVHs2GunWyH2oxTsyEnEpIirlhPeXuzc+X1+oT800aqfrC0vNpeZcK1U6sy33pxqVGE4R8xGxvPnRikdUfxRxLVLc/N5y+pei84bWroMXXht/Y+jo5hv23cdJbvL01SLiejwENQsPqN1RxJOR4t3JoXi/6NRVu2w+iPh8ma9EvFXmtRSX83IqDxDDEd/2fgIPtb4o4nSkmEvL6YMi1377vPLUl2tfap2b6xnbPa986D8f3E/OTXiADUQRH7bP+JfTh97PAQAAAAAAAAAAAOABV8SrkeLq7L7U7g9d7Sltts7XztSnZjpf6+9+97+Wt1pZWVmppk7Wcg7lHMl5Oudkzvmcl3Jeznkl59Wc13Jez3mjnbvbjYnlclTy8+es5RzKOZLzdM7JnPM5L+W8nPNKzqs5r+W8nvNGzuWcH9H1DwAAAAAAAAAAAAAAAAAAd6QSRfxqpPjad5bTStH5fdnJ6OSN9X2uu3ZqjsC98f8BAAD//3zgG/w=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x2) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f030) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xe1) 2.065668137s ago: executing program 9 (id=963): mmap(&(0x7f0000622000/0x1000)=nil, 0x1000, 0x8, 0x3032, 0xffffffffffffffff, 0xfffff000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getdents(r0, &(0x7f0000000ec0)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 2.065067777s ago: executing program 3 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000040), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 1.411489221s ago: executing program 2 (id=965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000003e000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 149.012696ms ago: executing program 2 (id=966): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x19) 0s ago: executing program 9 (id=967): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001180)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): rwarding state [ 121.027555][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.089625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.140928][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.171781][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.215840][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.230520][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.240956][ T5652] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 121.268577][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.295680][ T5652] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 121.303787][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.342097][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.401266][ T5495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.449800][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.507113][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.523375][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.988481][ T5640] loop3: detected capacity change from 0 to 32768 [ 122.050648][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.083778][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.129837][ T5495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.191835][ T5675] loop2: detected capacity change from 0 to 4096 [ 122.264739][ T5675] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 122.575580][ T2857] Bluetooth: hci1: command 0x0419 tx timeout [ 122.981318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.017928][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.101105][ T5495] device veth0_vlan entered promiscuous mode [ 123.150553][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.169698][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.237631][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.278053][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.344969][ T4241] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.363514][ T5495] device veth1_vlan entered promiscuous mode [ 123.469665][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.495241][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.520268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.568344][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.583542][ T5495] device veth0_macvtap entered promiscuous mode [ 123.601203][ T5720] loop5: detected capacity change from 0 to 512 [ 123.607795][ T4241] usb 4-1: Using ep0 maxpacket: 8 [ 123.629632][ T5495] device veth1_macvtap entered promiscuous mode [ 123.699054][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.706546][ T5720] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 123.720775][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.734819][ T5720] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.734914][ T4241] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.797965][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.808808][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.819131][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.830180][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.843711][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.848066][ T4241] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.860780][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.891751][ T5495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.923196][ T5720] EXT4-fs error (device loop5): ext4_get_group_desc:277: comm syz.5.292: block_group >= groups_count - block_group = 31, groups_count = 1 [ 123.923511][ T4176] udevd[4176]: incorrect jbd checksum on /dev/loop5 [ 123.949166][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.959258][ T5720] EXT4-fs (loop5): Remounting filesystem read-only [ 123.962081][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.973137][ T5720] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4439: inode #1024: comm syz.5.292: unable to read itable block [ 123.979874][ T4241] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.000843][ T4241] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 124.010427][ T5720] EXT4-fs (loop5): Remounting filesystem read-only [ 124.023989][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.042287][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.054922][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.075658][ T4241] usb 4-1: config 0 descriptor?? [ 124.089523][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.135128][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.156192][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.182755][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.211020][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.238862][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.260101][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.282956][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.307919][ T5495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.326988][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.348622][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.434967][ T5495] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.464404][ T5495] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.524745][ T5495] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.533514][ T5495] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.556457][ T4241] ntrig 0003:1B96:0004.0003: unknown main item tag 0x0 [ 124.563441][ T4241] ntrig 0003:1B96:0004.0003: unknown main item tag 0x0 [ 124.593745][ T5744] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 124.612805][ T4241] ntrig 0003:1B96:0004.0003: unknown main item tag 0x0 [ 124.625370][ T5744] overlayfs: failed to look up (file2) for ino (-5) [ 124.627987][ T4241] ntrig 0003:1B96:0004.0003: unknown main item tag 0x0 [ 124.669768][ T4241] ntrig 0003:1B96:0004.0003: unknown main item tag 0x0 [ 124.697456][ T4241] ntrig 0003:1B96:0004.0003: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.3-1/input0 [ 124.774798][ T4241] ntrig 0003:1B96:0004.0003: Firmware version: 2.3.17.43.7 (4ee5 7f3d) [ 125.044140][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.094763][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.129107][ T5761] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 125.144574][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.166341][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.185547][ T5761] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 125.191726][ T1108] usb 4-1: USB disconnect, device number 4 [ 125.218788][ T5755] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 125.238734][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.254558][ T5755] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 125.294165][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.611943][ T5785] netlink: 'syz.6.302': attribute type 12 has an invalid length. [ 127.034529][ T4246] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 127.284616][ T4246] usb 7-1: Using ep0 maxpacket: 16 [ 127.354558][ T4241] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 127.404629][ T4246] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.424987][ T4246] usb 7-1: config 0 interface 0 has no altsetting 0 [ 127.438485][ T4246] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 127.447757][ T4246] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.464510][ T4246] usb 7-1: config 0 descriptor?? [ 127.616475][ T4241] usb 8-1: Using ep0 maxpacket: 8 [ 127.734751][ T4241] usb 8-1: config 0 has no interfaces? [ 127.934910][ T4241] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 127.950355][ T4246] hid-generic 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 127.951102][ T4241] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.976406][ T4241] usb 8-1: Product: syz [ 127.980689][ T4241] usb 8-1: Manufacturer: syz [ 127.985676][ T4241] usb 8-1: SerialNumber: syz [ 128.033275][ T4241] usb 8-1: config 0 descriptor?? [ 128.055371][ T5863] loop2: detected capacity change from 0 to 8 [ 128.315519][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 128.356402][ T26] audit: type=1800 audit(1758666431.979:28): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.316" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 128.575081][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 128.644994][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 128.678554][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 128.983189][ T4271] usb 7-1: USB disconnect, device number 4 [ 129.015914][ T5865] fido_id[5865]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 129.157379][ T5870] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 129.911989][ T5917] loop2: detected capacity change from 0 to 7 [ 129.931941][ T4176] Dev loop2: unable to read RDB block 7 [ 129.942252][ T4176] loop2: unable to read partition table [ 129.954556][ T4176] loop2: partition table beyond EOD, truncated [ 129.978755][ T5917] Dev loop2: unable to read RDB block 7 [ 129.999058][ T5917] loop2: unable to read partition table [ 130.036855][ T5917] loop2: partition table beyond EOD, truncated [ 130.064600][ T5917] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 130.122414][ T3562] Dev loop2: unable to read RDB block 7 [ 130.134698][ T3562] loop2: unable to read partition table [ 130.151026][ T3562] loop2: partition table beyond EOD, truncated [ 130.373944][ T4241] usb 8-1: USB disconnect, device number 2 [ 130.703894][ T5945] loop2: detected capacity change from 0 to 256 [ 130.829727][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.116739][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.198309][ T5965] netlink: 'syz.7.338': attribute type 13 has an invalid length. [ 131.258212][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.278843][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.294240][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.368659][ T5981] IPVS: rr: FWM 3 0x00000003 - no destination available [ 131.394502][ T4241] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 131.394695][ T5969] device syzkaller1 entered promiscuous mode [ 131.775629][ T4241] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.787901][ T4241] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 131.793567][ T5994] block device autoloading is deprecated and will be removed. [ 131.808019][ T4241] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.851353][ T4241] usb 6-1: config 0 descriptor?? [ 131.957608][ T6008] loop7: detected capacity change from 0 to 16 [ 132.036860][ T6008] erofs: (device loop7): mounted with root inode @ nid 36. [ 132.101037][ T6008] attempt to access beyond end of device [ 132.101037][ T6008] loop7: rw=0, want=40, limit=16 [ 132.170059][ T6008] erofs: (device loop7): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 1168 of nid 36 [ 132.199069][ T6017] loop6: detected capacity change from 0 to 1024 [ 132.234503][ T4241] usbhid 6-1:0.0: can't add hid device: -71 [ 132.256771][ T4241] usbhid: probe of 6-1:0.0 failed with error -71 [ 132.294997][ T4241] usb 6-1: USB disconnect, device number 3 [ 132.662656][ T6042] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.747753][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.754157][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.191366][ T6063] netlink: 24 bytes leftover after parsing attributes in process `syz.7.364'. [ 133.241555][ T6063] bridge_slave_1: Caught tx_queue_len zero misconfig [ 133.544912][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'. [ 133.702527][ T6078] loop2: detected capacity change from 0 to 2048 [ 133.865735][ T6078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.997771][ T6059] loop6: detected capacity change from 0 to 32768 [ 134.028947][ T6090] loop3: detected capacity change from 0 to 512 [ 134.069099][ T26] audit: type=1800 audit(1758666437.689:29): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.368" name="bus" dev="loop2" ino=1436 res=0 errno=0 [ 134.142774][ T6090] EXT4-fs (loop3): Ignoring removed orlov option [ 134.201069][ T6090] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 134.226009][ T6090] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 134.268265][ T6059] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.363 (6059) [ 134.360815][ T6090] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 134.374675][ T6059] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 134.383576][ T6059] BTRFS info (device loop6): using free space tree [ 134.414386][ T6059] BTRFS info (device loop6): has skinny extents [ 134.469510][ T6090] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.371: corrupted in-inode xattr [ 134.566139][ T6112] loop7: detected capacity change from 0 to 2048 [ 134.582008][ T6090] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.371: couldn't read orphan inode 15 (err -117) [ 134.614418][ T6090] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,nomblk_io_submit,jqfmt=vfsv1,auto_da_alloc,,errors=continue. Quota mode: none. [ 134.706227][ T6112] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.779187][ T6059] BTRFS info (device loop6): enabling ssd optimizations [ 134.786588][ T6112] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.067426][ T4201] udevd[4201]: incorrect jbd checksum on /dev/loop3 [ 135.162258][ T4201] udevd[4201]: incorrect jbd checksum on /dev/loop3 [ 135.283310][ T5495] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 135.305523][ T5400] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 135.328722][ T5495] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 135.508151][ T6149] loop5: detected capacity change from 0 to 2048 [ 135.584865][ T5400] usb 3-1: Using ep0 maxpacket: 32 [ 135.655893][ T6155] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.727358][ T5400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.769266][ T5400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.795754][ T5400] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 135.803281][ T9] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 135.807716][ T5400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.831389][ T5400] usb 3-1: config 0 descriptor?? [ 135.895875][ T5400] hub 3-1:0.0: USB hub found [ 135.944006][ T155] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.104597][ T5400] hub 3-1:0.0: 1 port detected [ 136.291456][ T155] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.423626][ T155] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.504108][ T4246] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 136.520979][ T6169] loop5: detected capacity change from 0 to 1024 [ 136.526866][ T155] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.594061][ T6169] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 136.613400][ T4246] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.669864][ T6169] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 136.696133][ T6169] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.775439][ T6169] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,nolazytime,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [ 136.824638][ T21] hub 3-1:0.0: activate --> -90 [ 136.886584][ T4241] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 137.164514][ T4241] usb 7-1: Using ep0 maxpacket: 32 [ 137.197796][ T6175] loop3: detected capacity change from 0 to 32768 [ 137.241240][ T6175] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.384 (6175) [ 137.244885][ T21] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 137.304586][ T4241] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 137.323663][ T6170] chnl_net:caif_netlink_parms(): no params data found [ 137.324655][ T4241] usb 7-1: config 0 has no interface number 0 [ 137.354899][ T5394] usb 3-1: USB disconnect, device number 3 [ 137.365985][ T4241] usb 7-1: config 0 interface 12 has no altsetting 0 [ 137.403101][ T6175] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 137.432697][ T6175] BTRFS info (device loop3): using free space tree [ 137.440010][ T6175] BTRFS info (device loop3): has skinny extents [ 137.554685][ T4241] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 137.564319][ T4241] usb 7-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 137.572966][ T4241] usb 7-1: Product: syz [ 137.585193][ T4241] usb 7-1: Manufacturer: syz [ 137.591072][ T4241] usb 7-1: SerialNumber: syz [ 137.602200][ T6175] BTRFS info (device loop3): enabling ssd optimizations [ 137.612135][ T4241] usb 7-1: config 0 descriptor?? [ 137.645300][ T6170] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.672497][ T6170] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.688062][ T6170] device bridge_slave_0 entered promiscuous mode [ 137.745202][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.782685][ T6221] loop2: detected capacity change from 0 to 128 [ 137.784504][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.797187][ T4175] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 137.824102][ T6170] device bridge_slave_1 entered promiscuous mode [ 138.064431][ T4175] usb 6-1: Using ep0 maxpacket: 32 [ 138.093976][ T6170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.131883][ T6170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.376671][ T4175] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 138.386271][ T4175] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.394680][ T4175] usb 6-1: Product: syz [ 138.399029][ T4175] usb 6-1: Manufacturer: syz [ 138.403704][ T4175] usb 6-1: SerialNumber: syz [ 138.411601][ T4175] usb 6-1: config 0 descriptor?? [ 138.465686][ T4175] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 138.564525][ T5391] Bluetooth: hci1: command 0x0409 tx timeout [ 138.640130][ T6170] team0: Port device team_slave_0 added [ 138.650340][ T6170] team0: Port device team_slave_1 added [ 138.772620][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.781291][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.810870][ T6170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.864903][ T155] device hsr_slave_0 left promiscuous mode [ 138.871466][ T155] device hsr_slave_1 left promiscuous mode [ 138.908828][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.943775][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.993948][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.005479][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.013462][ T155] device bridge_slave_1 left promiscuous mode [ 139.022088][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.031506][ T155] device bridge_slave_0 left promiscuous mode [ 139.038740][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.069647][ T155] device veth1_macvtap left promiscuous mode [ 139.076367][ T155] device veth0_macvtap left promiscuous mode [ 139.082468][ T155] device veth1_vlan left promiscuous mode [ 139.111221][ T155] device veth0_vlan left promiscuous mode [ 139.649109][ T155] team0 (unregistering): Port device team_slave_1 removed [ 139.691551][ T155] team0 (unregistering): Port device team_slave_0 removed [ 139.722176][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.764189][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.925884][ T4241] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 139.941992][ T4241] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 139.972697][ T4241] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 139.982556][ T155] bond0 (unregistering): Released all slaves [ 140.002352][ T4241] f81534: probe of 7-1:0.12 failed with error -71 [ 140.049742][ T4241] usb 7-1: USB disconnect, device number 5 [ 140.080375][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.094320][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.133533][ T6170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.254224][ T6170] device hsr_slave_0 entered promiscuous mode [ 140.268589][ T6170] device hsr_slave_1 entered promiscuous mode [ 140.278508][ T6170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.297356][ T6170] Cannot create hsr debugfs directory [ 140.464485][ T4175] gspca_stk1135: reg_w 0x200 err -71 [ 140.470925][ T4175] gspca_stk1135: serial bus timeout: status=0x00 [ 140.504315][ T4175] gspca_stk1135: Sensor write failed [ 140.509752][ T4175] gspca_stk1135: serial bus timeout: status=0x00 [ 140.524213][ T4175] gspca_stk1135: Sensor write failed [ 140.547656][ T4175] gspca_stk1135: serial bus timeout: status=0x00 [ 140.584407][ T4175] gspca_stk1135: Sensor read failed [ 140.594558][ T4175] gspca_stk1135: serial bus timeout: status=0x00 [ 140.621344][ T4175] gspca_stk1135: Sensor read failed [ 140.631495][ T4175] gspca_stk1135: Detected sensor type unknown (0x0) [ 140.642643][ T4175] gspca_stk1135: serial bus timeout: status=0x00 [ 140.644502][ T4246] Bluetooth: hci1: command 0x041b tx timeout [ 140.658590][ T4175] gspca_stk1135: Sensor read failed [ 140.667842][ T4175] gspca_stk1135: serial bus timeout: status=0x00 [ 140.686165][ T4175] gspca_stk1135: Sensor read failed [ 140.691449][ T4175] gspca_stk1135: serial bus timeout: status=0x00 [ 140.719746][ T4175] gspca_stk1135: Sensor write failed [ 140.734137][ T6286] loop3: detected capacity change from 0 to 8192 [ 140.749518][ T4175] gspca_stk1135: serial bus timeout: status=0x00 [ 140.789990][ T4175] gspca_stk1135: Sensor write failed [ 140.795465][ T6286] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 140.801283][ T6286] REISERFS (device loop3): using ordered data mode [ 140.815016][ T4175] stk1135: probe of 6-1:0.0 failed with error -71 [ 140.825429][ T4175] usb 6-1: USB disconnect, device number 4 [ 140.853245][ T6286] reiserfs: using flush barriers [ 140.875330][ T6286] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.948461][ T6286] REISERFS (device loop3): checking transaction log (loop3) [ 141.422205][ T6286] REISERFS (device loop3): Using tea hash to sort names [ 141.443368][ T6286] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 141.466714][ T6170] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 141.538298][ T6170] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 141.583909][ T6170] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 141.686908][ T6170] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 141.755470][ T6303] loop2: detected capacity change from 0 to 8192 [ 141.857148][ T6303] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 141.894986][ T6303] REISERFS (device loop2): using ordered data mode [ 141.902421][ T6303] reiserfs: using flush barriers [ 141.942508][ T6303] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 141.975188][ T6170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.023368][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.056300][ T6303] REISERFS (device loop2): checking transaction log (loop2) [ 142.077571][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.114185][ T6170] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.161504][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.199997][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.245032][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.252175][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.299455][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.374731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.403118][ T6303] REISERFS (device loop2): Using tea hash to sort names [ 142.403712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.425082][ T6303] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 142.464948][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.472165][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.529034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.575421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.615937][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.642820][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.675345][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.697391][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.724462][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 142.739739][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.773109][ T6170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.868680][ T6170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.914112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.939110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.995378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.034777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.049823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.601185][ T6334] loop5: detected capacity change from 0 to 40427 [ 143.668555][ T6334] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 143.676549][ T6334] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 143.690676][ T6340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.712284][ T6334] F2FS-fs (loop5): invalid crc value [ 143.790308][ T6334] F2FS-fs (loop5): Found nat_bits in checkpoint [ 143.866407][ T6334] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 143.873507][ T6334] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 143.881762][ T6170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.893544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.936527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.039291][ T26] audit: type=1804 audit(1758666447.659:30): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.405" name="/newroot/63/file0/bus" dev="loop5" ino=10 res=1 errno=0 [ 144.547620][ T6374] batman_adv: batadv0: Adding interface: dummy0 [ 144.605792][ T6374] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.664625][ T6374] batman_adv: batadv0: Interface activated: dummy0 [ 144.718575][ T6377] syz_tun: tun_net_xmit 86 [ 144.739975][ T6378] batadv0: mtu less than device minimum [ 144.776559][ T6378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.789770][ T6378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.802423][ T6378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.815042][ T6378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.827950][ T6378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.840696][ T6378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.853324][ T6378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.866031][ T6378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.878630][ T6378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.927086][ T4546] Bluetooth: hci1: command 0x0419 tx timeout [ 145.015044][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.055107][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.148138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.177233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.207800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.239521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.253652][ T6385] tipc: Enabled bearer , priority 0 [ 145.274590][ T4546] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 145.338179][ T6388] device syzkaller0 entered promiscuous mode [ 145.395670][ T6170] device veth0_vlan entered promiscuous mode [ 145.442911][ T6170] device veth1_vlan entered promiscuous mode [ 145.498116][ T6384] tipc: Resetting bearer [ 145.556168][ T6396] kvm: pic: non byte read [ 145.570986][ T6396] kvm: pic: level sensitive irq not supported [ 145.571084][ T6396] kvm: pic: non byte read [ 145.597325][ T6384] tipc: Disabling bearer [ 145.613814][ T6396] kvm: pic: level sensitive irq not supported [ 145.613882][ T6396] kvm: pic: non byte read [ 145.634771][ T4546] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 145.654078][ T4546] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.656349][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.662716][ T6396] kvm: pic: level sensitive irq not supported [ 145.683596][ T4546] usb 3-1: config 0 descriptor?? [ 145.690965][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.704743][ T6396] kvm: pic: non byte read [ 145.709595][ T6396] kvm: pic: level sensitive irq not supported [ 145.709664][ T6396] kvm: pic: non byte read [ 145.725092][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.734272][ T6396] kvm: pic: level sensitive irq not supported [ 145.739570][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.741289][ T6396] kvm: pic: non byte read [ 145.757472][ T6170] device veth0_macvtap entered promiscuous mode [ 145.764563][ C0] syz_tun: tun_net_xmit 86 [ 145.782485][ T6396] kvm: pic: level sensitive irq not supported [ 145.782552][ T6396] kvm: pic: non byte read [ 145.795003][ T6170] device veth1_macvtap entered promiscuous mode [ 145.828506][ T6396] kvm: pic: level sensitive irq not supported [ 145.828575][ T6396] kvm: pic: non byte read [ 145.883184][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.891149][ T6396] kvm: pic: level sensitive irq not supported [ 145.893739][ T6396] kvm: pic: non byte read [ 145.916576][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.944557][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.969036][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.990953][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.004476][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.019876][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.037940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.058798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.125160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.150357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.168103][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.196489][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.222697][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.233834][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.246816][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.258622][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.268882][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.279727][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.292426][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.312285][ T6170] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.328016][ T6170] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.338251][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 146.369582][ T6170] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.392606][ T6170] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.457909][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.419'. [ 146.604315][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.613163][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.804980][ C0] syz_tun: tun_net_xmit 86 [ 146.856586][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.894499][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.939112][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.957109][ T6432] netlink: 'syz.3.421': attribute type 29 has an invalid length. [ 146.976171][ T6432] netlink: 'syz.3.421': attribute type 29 has an invalid length. [ 146.985634][ T4468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.004677][ T4468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.029405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.201092][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 147.238577][ T6447] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 147.784871][ T4546] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 147.826736][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 147.844679][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 147.870772][ T4546] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 147.929315][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 148.049843][ T4546] asix: probe of 3-1:0.0 failed with error -71 [ 148.328960][ T4546] usb 3-1: USB disconnect, device number 4 [ 149.149164][ T6484] loop6: detected capacity change from 0 to 764 [ 149.192053][ T6469] loop3: detected capacity change from 0 to 32768 [ 149.361932][ T6469] XFS (loop3): Mounting V5 Filesystem [ 149.450579][ T6469] XFS (loop3): Ending clean mount [ 149.652626][ T6512] loop2: detected capacity change from 0 to 7 [ 149.696372][ T6512] loop2: [ 149.703942][ T6512] loop2: partition table partially beyond EOD, truncated [ 149.860355][ T4189] XFS (loop3): Unmounting Filesystem [ 151.474716][ T6554] loop8: detected capacity change from 0 to 64 [ 151.552757][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 152.385173][ T6170] Bad inode number on dev loop8: 4160749571 is out of range [ 152.408668][ T6170] Bad inode number on dev loop8: 4160749571 is out of range [ 152.784553][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.456'. [ 152.860882][ T6592] netlink: 'syz.6.456': attribute type 2 has an invalid length. [ 153.002534][ T155] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.267117][ T155] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.387505][ T155] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.591396][ T155] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.779029][ T6630] VFS: Mount too revealing [ 153.842188][ T26] audit: type=1804 audit(1758666457.459:31): pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.468" name="/newroot/79/file0/file1" dev="overlay" ino=472 res=1 errno=0 [ 154.743582][ T6635] chnl_net:caif_netlink_parms(): no params data found [ 155.097860][ T6669] loop2: detected capacity change from 0 to 7 [ 155.144809][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.151922][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.166053][ T4196] loop2: [ 155.170407][ T4196] loop2: partition table partially beyond EOD, truncated [ 155.190191][ T6635] device bridge_slave_0 entered promiscuous mode [ 155.206107][ T6669] loop2: [ 155.212479][ T6669] loop2: partition table partially beyond EOD, truncated [ 155.283983][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.293845][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.317161][ T6635] device bridge_slave_1 entered promiscuous mode [ 155.381856][ T4470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.415427][ T4470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.470426][ T6635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.502988][ T6681] bridge0: port 4(gretap0) entered blocking state [ 155.558338][ T6681] bridge0: port 4(gretap0) entered disabled state [ 155.629430][ T6681] device gretap0 entered promiscuous mode [ 155.692045][ T6681] bridge0: port 4(gretap0) entered blocking state [ 155.699016][ T6681] bridge0: port 4(gretap0) entered forwarding state [ 155.760187][ T6635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.805152][ T6683] device gretap0 left promiscuous mode [ 155.828821][ T6683] bridge0: port 4(gretap0) entered disabled state [ 156.004510][ T4246] Bluetooth: hci1: command 0x0409 tx timeout [ 156.078481][ T6635] team0: Port device team_slave_0 added [ 156.169485][ T155] device hsr_slave_0 left promiscuous mode [ 156.225770][ T155] device hsr_slave_1 left promiscuous mode [ 156.252741][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.275956][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.303603][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.314505][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.342680][ T155] device bridge_slave_1 left promiscuous mode [ 156.362834][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.386640][ T155] device bridge_slave_0 left promiscuous mode [ 156.392913][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.398852][ T6707] loop5: detected capacity change from 0 to 2048 [ 156.529730][ T155] device veth1_macvtap left promiscuous mode [ 156.544840][ T155] device veth0_macvtap left promiscuous mode [ 156.550955][ T155] device veth1_vlan left promiscuous mode [ 156.555077][ T6707] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.582044][ T6717] netlink: 104 bytes leftover after parsing attributes in process `syz.3.498'. [ 156.584474][ T155] device veth0_vlan left promiscuous mode [ 156.787946][ T6720] EXT4-fs error (device loop5): ext4_ind_map_blocks:604: inode #15: comm syz.5.488: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 156.922143][ T6720] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 156.964490][ T6720] EXT4-fs (loop5): This should not happen!! Data will be lost [ 156.964490][ T6720] [ 157.009644][ T6707] EXT4-fs error (device loop5): ext4_ind_map_blocks:604: inode #15: comm syz.5.488: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 157.109737][ T155] team0 (unregistering): Port device team_slave_1 removed [ 157.114706][ T6707] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 117 [ 157.141076][ T155] team0 (unregistering): Port device team_slave_0 removed [ 157.150134][ T6707] EXT4-fs (loop5): This should not happen!! Data will be lost [ 157.150134][ T6707] [ 157.185551][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.254926][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.523766][ T155] bond0 (unregistering): Released all slaves [ 157.591814][ T6635] team0: Port device team_slave_1 added [ 157.616613][ T6705] tipc: Started in network mode [ 157.622128][ T6705] tipc: Node identity 5215832791a3, cluster identity 4711 [ 157.630802][ T6705] tipc: Enabled bearer , priority 0 [ 157.718917][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.744790][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.770809][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.861525][ T6635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.897598][ T6705] tipc: Disabling bearer [ 157.927272][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'. [ 157.969800][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.494'. [ 158.055181][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.062178][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.088262][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.096421][ T4246] Bluetooth: hci1: command 0x041b tx timeout [ 158.148310][ T6635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.365983][ T6754] loop6: detected capacity change from 0 to 256 [ 158.608437][ T6635] device hsr_slave_0 entered promiscuous mode [ 159.020160][ T6635] device hsr_slave_1 entered promiscuous mode [ 159.075829][ T6635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.222793][ T6635] Cannot create hsr debugfs directory [ 159.797434][ T6772] netlink: 24 bytes leftover after parsing attributes in process `syz.6.503'. [ 159.948327][ T6762] loop3: detected capacity change from 0 to 32768 [ 160.233866][ T4546] Bluetooth: hci1: command 0x040f tx timeout [ 160.273956][ T6762] XFS (loop3): Mounting V5 Filesystem [ 161.086608][ T6762] XFS (loop3): Ending clean mount [ 161.107007][ T6635] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 161.128436][ T6762] XFS (loop3): Quotacheck needed: Please wait. [ 161.208521][ T6762] XFS (loop3): Quotacheck: Done. [ 161.209657][ T6635] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 161.286425][ T6635] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 161.365411][ T6635] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 161.634007][ T4189] XFS (loop3): Unmounting Filesystem [ 161.761412][ T6635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.822042][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.850372][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.917922][ T6635] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.949763][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.974852][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.010211][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.017618][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.065329][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.132087][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.151898][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.196711][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.203970][ T4470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.234476][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 162.264852][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.295923][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.326443][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.394049][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.420741][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.448994][ T6811] loop5: detected capacity change from 0 to 32768 [ 162.474520][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 162.482691][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.508610][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.529446][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.548422][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.577755][ T6811] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.510 (6811) [ 162.606367][ T1108] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 162.621379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.631445][ T1108] usb 3-1: config 0 has no interface number 0 [ 162.641726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.654438][ T1108] usb 3-1: config 0 interface 184 has no altsetting 0 [ 162.676755][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.685031][ T6811] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 162.702325][ T6811] BTRFS info (device loop5): disabling tree log [ 162.721611][ T6811] BTRFS info (device loop5): enabling disk space caching [ 162.739528][ T6811] BTRFS info (device loop5): force clearing of disk cache [ 162.771315][ T6811] BTRFS info (device loop5): max_inline at 0 [ 162.823813][ T6811] BTRFS info (device loop5): setting nodatasum [ 162.831404][ T1108] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 162.850271][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.864566][ T6811] BTRFS info (device loop5): disabling disk space caching [ 162.878689][ T1108] usb 3-1: Product: syz [ 162.888778][ T6811] BTRFS info (device loop5): has skinny extents [ 162.930960][ T1108] usb 3-1: Manufacturer: syz [ 162.951680][ T1108] usb 3-1: SerialNumber: syz [ 162.989704][ T1108] usb 3-1: config 0 descriptor?? [ 163.045365][ T4546] Bluetooth: hci1: command 0x0419 tx timeout [ 163.066464][ T1108] smsc75xx v1.0.0 [ 163.261296][ T6858] tipc: Started in network mode [ 163.318484][ T6858] tipc: Node identity 4, cluster identity 4711 [ 163.337114][ T6811] BTRFS info (device loop5): clearing free space tree [ 163.374537][ T6858] tipc: Node number set to 4 [ 163.383494][ T6811] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.396803][ T6635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.417665][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.431959][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.472429][ T6811] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.724612][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 163.754447][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 163.804139][ T6882] loop3: detected capacity change from 0 to 512 [ 163.822334][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.833914][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.879085][ T6882] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 163.938501][ T6635] device veth0_vlan entered promiscuous mode [ 163.965854][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.016170][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.025988][ T6882] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.516: bad orphan inode 131083 [ 164.064716][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 164.124228][ T6635] device veth1_vlan entered promiscuous mode [ 164.131035][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 164.141560][ T6882] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,init_itable,noload,,errors=continue. Quota mode: none. [ 164.166103][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.182244][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.194882][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 164.257698][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 164.305877][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.319481][ T1108] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 164.335324][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.386028][ T6635] device veth0_macvtap entered promiscuous mode [ 164.438120][ T6635] device veth1_macvtap entered promiscuous mode [ 164.480526][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.513216][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.550778][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.570805][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.633135][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.663335][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.735193][ T6635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.750112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.808656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.860767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.911920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.093993][ T6899] loop5: detected capacity change from 0 to 40427 [ 165.106560][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.149894][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.224398][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.235288][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.245257][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.260432][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.279266][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.327335][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.441169][ T6899] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 165.449348][ T6899] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 165.464229][ T6635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.540141][ T6635] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.568005][ T6899] F2FS-fs (loop5): Found nat_bits in checkpoint [ 165.609585][ T6899] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 165.636522][ T6895] usb 3-1: USB disconnect, device number 5 [ 165.696107][ T6899] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 165.703252][ T6899] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 165.754380][ T6635] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.860914][ T6635] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.909156][ T6635] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.936257][ T6899] attempt to access beyond end of device [ 165.936257][ T6899] loop5: rw=2049, want=45104, limit=40427 [ 165.951095][ T6921] loop6: detected capacity change from 0 to 1024 [ 165.966196][ T6899] attempt to access beyond end of device [ 165.966196][ T6899] loop5: rw=2049, want=77960, limit=40427 [ 165.995571][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.046180][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.094850][ T6921] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.138748][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.154648][ T6921] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.165590][ T1108] syz_tun: tun_net_xmit 110 [ 166.235314][ T6916] device team0 left promiscuous mode [ 166.285153][ T6916] device team_slave_0 left promiscuous mode [ 166.314671][ T6916] device team_slave_1 left promiscuous mode [ 166.321910][ T6916] bridge0: port 3(team0) entered disabled state [ 166.409328][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.426625][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.469883][ T6916] device bridge_slave_0 left promiscuous mode [ 166.482077][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.509645][ T6916] device bridge_slave_1 left promiscuous mode [ 166.552592][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.585421][ T6916] bond0: (slave bond_slave_0): Releasing backup interface [ 166.628777][ T6916] bond0: (slave bond_slave_1): Releasing backup interface [ 166.791596][ T6916] team0: Port device team_slave_0 removed [ 166.908564][ T6916] team0: Port device team_slave_1 removed [ 166.951003][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.973035][ T6932] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.523: bg 0: block 393: padding at end of block bitmap is not set [ 166.979718][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.034475][ T6952] loop3: detected capacity change from 0 to 8 [ 167.241328][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.397248][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.520135][ T6932] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 167.798868][ T4536] syz_tun: tun_net_xmit 110 [ 167.805048][ T6932] EXT4-fs (loop6): This should not happen!! Data will be lost [ 167.805048][ T6932] [ 167.980086][ T6932] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 172 with error 28 [ 168.105148][ T6932] EXT4-fs (loop6): This should not happen!! Data will be lost [ 168.105148][ T6932] [ 168.116651][ T6957] loop2: detected capacity change from 0 to 16 [ 168.119394][ T4491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.153032][ T4491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.211614][ T4470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.220507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.244910][ T6932] EXT4-fs (loop6): Total free blocks count 0 [ 168.250956][ T6932] EXT4-fs (loop6): Free/Dirty block details [ 168.264533][ T4470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.275482][ T6932] EXT4-fs (loop6): free_blocks=0 [ 168.283646][ T6957] erofs: (device loop2): mounted with root inode @ nid 36. [ 168.294030][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.321847][ T6932] EXT4-fs (loop6): dirty_blocks=176 [ 168.342013][ T6932] EXT4-fs (loop6): Block reservation details [ 168.367277][ T6957] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 168.392550][ T6932] EXT4-fs (loop6): i_reserved_data_blocks=11 [ 169.917426][ T6995] loop6: detected capacity change from 0 to 32768 [ 169.950370][ T6980] loop5: detected capacity change from 0 to 40427 [ 169.982923][ T7010] loop2: detected capacity change from 0 to 2048 [ 170.118980][ T6995] XFS (loop6): Mounting V5 Filesystem [ 170.138295][ T6980] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 170.166636][ T7010] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.196688][ T6980] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 170.267335][ T6980] F2FS-fs (loop5): invalid crc value [ 170.307986][ T6995] XFS (loop6): Ending clean mount [ 170.326119][ T6995] XFS (loop6): Quotacheck needed: Please wait. [ 170.379598][ T6980] F2FS-fs (loop5): Found nat_bits in checkpoint [ 170.547805][ T7002] loop9: detected capacity change from 0 to 32768 [ 170.565389][ T6995] XFS (loop6): Quotacheck: Done. [ 170.589727][ T6980] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 170.619557][ T6980] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 170.671896][ T7002] XFS (loop9): Mounting V5 Filesystem [ 171.072946][ T7002] XFS (loop9): Ending clean mount [ 171.087184][ T7002] XFS (loop9): Quotacheck needed: Please wait. [ 171.283798][ T7002] XFS (loop9): Quotacheck: Done. [ 171.614797][ T6635] XFS (loop9): Unmounting Filesystem [ 172.114075][ T7066] bridge0: port 3(gretap0) entered blocking state [ 172.132010][ T7066] bridge0: port 3(gretap0) entered disabled state [ 172.180938][ T7066] device gretap0 entered promiscuous mode [ 172.212901][ T7066] bridge0: port 3(gretap0) entered blocking state [ 172.219458][ T7066] bridge0: port 3(gretap0) entered forwarding state [ 172.270131][ T7070] device gretap0 left promiscuous mode [ 172.311664][ T7070] bridge0: port 3(gretap0) entered disabled state [ 172.358726][ T4711] XFS (loop6): Unmounting Filesystem [ 174.192241][ T7108] loop3: detected capacity change from 0 to 1756 [ 174.229308][ T7082] loop9: detected capacity change from 0 to 40427 [ 174.260897][ T4470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.277731][ T4470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.387265][ T7116] 8021q: VLANs not supported on ipvlan0 [ 174.397382][ T7082] F2FS-fs (loop9): invalid crc value [ 174.462803][ T7082] F2FS-fs (loop9): Found nat_bits in checkpoint [ 174.723879][ T7082] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 174.873610][ T6635] attempt to access beyond end of device [ 174.873610][ T6635] loop9: rw=2049, want=45104, limit=40427 [ 175.537507][ T7128] loop6: detected capacity change from 0 to 32768 [ 175.594577][ T7128] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.559 (7128) [ 175.661490][ T7129] loop3: detected capacity change from 0 to 32768 [ 175.674154][ T7128] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 175.713991][ T7128] BTRFS info (device loop6): using free space tree [ 175.744726][ T7128] BTRFS info (device loop6): has skinny extents [ 175.765614][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.566'. [ 175.893468][ T7129] XFS (loop3): Mounting V5 Filesystem [ 175.924909][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.566'. [ 176.152130][ T7129] XFS (loop3): Ending clean mount [ 176.171390][ T7129] XFS (loop3): Quotacheck needed: Please wait. [ 176.177416][ T7128] BTRFS info (device loop6): enabling ssd optimizations [ 176.384015][ T7129] XFS (loop3): Quotacheck: Done. [ 176.443575][ T7208] loop2: detected capacity change from 0 to 512 [ 176.462859][ T7204] loop5: detected capacity change from 0 to 8 [ 176.597674][ T26] audit: type=1800 audit(1758666480.219:32): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.569" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 176.816892][ T7208] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.834546][ T7208] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.214618][ T7208] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz.2.572: Invalid inode table block 131 in block_group 0 [ 177.219142][ T7229] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #2: block 4: comm syz.2.572: lblock 0 mapped to illegal pblock 4 (length 1) syzkaller syzkaller login: [ 177.414908][ T7208] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 177.507449][ T7208] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #15: comm syz.2.572: mark_inode_dirty error [ 177.891155][ T7241] loop9: detected capacity change from 0 to 32768 [ 177.985738][ T7241] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by syz.9.579 (7241) [ 178.149622][ T4472] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm kworker/u4:9: Invalid inode table block 131 in block_group 0 [ 178.155206][ T7241] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 178.171927][ T7241] BTRFS info (device loop9): enabling disk space caching [ 178.179111][ T7241] BTRFS info (device loop9): enabling auto defrag [ 178.185622][ T7241] BTRFS info (device loop9): doing ref verification [ 178.192245][ T7241] BTRFS info (device loop9): use no compression [ 178.198687][ T7241] BTRFS info (device loop9): force clearing of disk cache [ 178.206138][ T7241] BTRFS info (device loop9): disabling disk space caching [ 178.213290][ T7241] BTRFS info (device loop9): has skinny extents [ 178.420673][ T7241] BTRFS info (device loop9): enabling ssd optimizations [ 178.430248][ T7241] BTRFS info (device loop9): clearing free space tree [ 178.437298][ T7241] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 178.449185][ T7241] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 178.558037][ T4189] XFS (loop3): Unmounting Filesystem [ 179.384459][ T6895] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 179.766588][ T6895] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 179.787338][ T6895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.841574][ T6895] usb 7-1: config 0 descriptor?? [ 180.145137][ T7313] netlink: 20 bytes leftover after parsing attributes in process `syz.5.588'. [ 180.221302][ T7313] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.231140][ T7313] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.240043][ T7313] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.248805][ T7313] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.284560][ T7313] device vxlan0 entered promiscuous mode [ 180.318215][ T7317] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.349780][ T7317] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.429129][ T6895] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2 [ 180.461637][ T6895] [drm] Initialized udl on minor 2 [ 180.610175][ T6895] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 180.627936][ T6895] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 180.680286][ T6895] usb 7-1: USB disconnect, device number 6 [ 180.736901][ T4290] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 180.770859][ T4290] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 180.812700][ T4290] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 180.844499][ T4312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 181.038646][ T7366] binder: 7365:7366 ioctl c0306201 200000000080 returned -14 [ 181.094740][ T4312] usb 4-1: Using ep0 maxpacket: 8 [ 181.214680][ T4312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.235019][ T4312] usb 4-1: config 0 has no interfaces? [ 181.414818][ T4312] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 181.423937][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.472726][ T4312] usb 4-1: Product: syz [ 181.481932][ T4312] usb 4-1: Manufacturer: syz [ 181.492310][ T4312] usb 4-1: SerialNumber: syz [ 181.557456][ T4312] usb 4-1: config 0 descriptor?? [ 181.691489][ T7383] overlayfs: failed to get index nlink (file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, err=-61) [ 181.783866][ T7385] tipc: Started in network mode [ 181.789367][ T7385] tipc: Node identity 9612d55a4213, cluster identity 4711 [ 181.808298][ T7385] tipc: Enabled bearer , priority 0 [ 181.829862][ T7388] tipc: Resetting bearer [ 181.862685][ T4312] usb 4-1: USB disconnect, device number 5 [ 181.904861][ T7384] tipc: Disabling bearer [ 181.980910][ T4470] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.122661][ T4470] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.425366][ T4470] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.682118][ T7418] loop5: detected capacity change from 0 to 512 [ 182.747112][ T4470] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.849341][ T7418] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 183.006047][ T7418] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.623454][ T7418] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 184.084063][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'. [ 184.095527][ T7434] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 184.147206][ T7438] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.275906][ T7441] bond0: (slave bond_slave_1): Releasing backup interface [ 184.364020][ T4470] tipc: Left network mode [ 184.659214][ T4271] Process accounting resumed [ 184.720972][ T7418] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 185.390479][ T7455] chnl_net:caif_netlink_parms(): no params data found [ 185.529693][ T7486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'. [ 185.764682][ T4227] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 185.777383][ T7455] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.787731][ T7471] loop3: detected capacity change from 0 to 40427 [ 185.794441][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.816296][ T7455] device bridge_slave_0 entered promiscuous mode [ 185.875358][ T7471] F2FS-fs (loop3): invalid crc value [ 185.916560][ T7455] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.945726][ T7471] F2FS-fs (loop3): Found nat_bits in checkpoint [ 185.952040][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.953843][ T7455] device bridge_slave_1 entered promiscuous mode [ 186.004825][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 186.012358][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 186.019283][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'. [ 186.028676][ T4227] usb 10-1: Using ep0 maxpacket: 8 [ 186.146447][ T4227] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 186.157973][ T7455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.158825][ T7471] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 186.178224][ T4227] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 186.200627][ T7471] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 186.208279][ T4227] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.243896][ T4227] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.274011][ T4227] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.307422][ T4470] device hsr_slave_0 left promiscuous mode [ 186.332044][ T4470] device hsr_slave_1 left promiscuous mode [ 186.345625][ T4470] batman_adv: batadv0: Interface deactivated: dummy0 [ 186.365550][ T4227] usbtmc 10-1:16.0: bulk endpoints not found [ 186.369138][ T4470] batman_adv: batadv0: Removing interface: dummy0 [ 186.425874][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.450662][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.473836][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.486389][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.495613][ T4470] device bridge_slave_1 left promiscuous mode [ 186.501873][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.510850][ T4470] device bridge_slave_0 left promiscuous mode [ 186.519256][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.598569][ T7524] loop5: detected capacity change from 0 to 8 [ 186.724640][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 186.828464][ T4470] device veth1_macvtap left promiscuous mode [ 186.834771][ T4470] device veth0_macvtap left promiscuous mode [ 186.841379][ T4470] device veth1_vlan left promiscuous mode [ 186.852303][ T4470] device veth0_vlan left promiscuous mode [ 187.333937][ T4227] usb 10-1: USB disconnect, device number 2 [ 187.609050][ T4470] team0 (unregistering): Port device team_slave_1 removed [ 187.645006][ T4470] team0 (unregistering): Port device team_slave_0 removed [ 187.670436][ T4470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.689093][ T4470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.760317][ T4470] bond0 (unregistering): Released all slaves [ 187.890595][ T7455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.911541][ T7471] netem: incorrect gi model size [ 187.999030][ T7455] team0: Port device team_slave_0 added [ 188.026372][ T4189] attempt to access beyond end of device [ 188.026372][ T4189] loop3: rw=2049, want=45104, limit=40427 [ 188.059951][ T7455] team0: Port device team_slave_1 added [ 188.145814][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.160349][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.214544][ T7455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.260757][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.276753][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.343890][ T7455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.521349][ T7455] device hsr_slave_0 entered promiscuous mode [ 188.542365][ T7455] device hsr_slave_1 entered promiscuous mode [ 188.571323][ T7455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.589800][ T7455] Cannot create hsr debugfs directory [ 188.758331][ T7540] loop9: detected capacity change from 0 to 32768 [ 188.804553][ T4227] Bluetooth: hci3: command 0x041b tx timeout [ 188.849388][ T7555] loop3: detected capacity change from 0 to 1024 [ 188.953498][ T7540] XFS (loop9): Mounting V5 Filesystem [ 188.976660][ T7555] EXT4-fs (loop3): Ignoring removed nobh option [ 188.996728][ T7555] EXT4-fs (loop3): Ignoring removed bh option [ 189.002832][ T7555] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.087344][ T7540] XFS (loop9): Ending clean mount [ 189.099047][ T7540] XFS (loop9): Quotacheck needed: Please wait. [ 189.142448][ T7555] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 189.217108][ T26] audit: type=1800 audit(1758666492.839:33): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.642" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 189.250451][ T7540] XFS (loop9): Quotacheck: Done. [ 189.748248][ T6635] XFS (loop9): Unmounting Filesystem [ 189.792123][ T7576] binder: 7575:7576 ioctl c0306201 200000000080 returned -14 [ 190.224607][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.314845][ T7455] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.346679][ T7455] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.390536][ T7455] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.413813][ T7455] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.586218][ T7] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.608714][ T7] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.649736][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.658443][ T7455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.670002][ T7] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 190.699793][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.730861][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.747726][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.763702][ T7] usb 4-1: config 0 descriptor?? [ 190.772574][ T7455] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.847653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.870674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.884436][ T4312] Bluetooth: hci3: command 0x040f tx timeout [ 190.940801][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.948076][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.039127][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.103531][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.151132][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.174900][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.182231][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.196972][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.212197][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.258096][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.307250][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.314570][ T4312] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 191.328170][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.367000][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.392635][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.404118][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.422017][ T7455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.443635][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.464015][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.474028][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.483472][ T7] usb 4-1: string descriptor 0 read error: -22 [ 191.515404][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.685871][ T4312] usb 3-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 191.708309][ T4312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.734609][ T7] uclogic 0003:256C:006D.0006: interface is invalid, ignoring [ 191.904688][ T4312] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.934231][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.974223][ T4312] usb 3-1: Product: syz [ 191.980364][ T4312] usb 3-1: Manufacturer: syz [ 191.999530][ T4312] usb 3-1: SerialNumber: syz [ 192.012696][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.034755][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.053700][ T7628] loop9: detected capacity change from 0 to 4096 [ 192.082955][ T7455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.146633][ T7628] NILFS (loop9): invalid segment: Checksum error in segment payload [ 192.174941][ T7628] NILFS (loop9): trying rollback from an earlier position [ 192.243079][ T7628] NILFS (loop9): recovery complete [ 192.258352][ T6894] usb 4-1: USB disconnect, device number 6 [ 192.344721][ T4312] usb 3-1: 0:2 : does not exist [ 192.352237][ T7630] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.403903][ T4312] usb 3-1: USB disconnect, device number 6 [ 192.708079][ T6599] udevd[6599]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.916500][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 192.967305][ T4312] Bluetooth: hci3: command 0x0419 tx timeout [ 193.003802][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.023090][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.073599][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.091317][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.114157][ T7455] device veth0_vlan entered promiscuous mode [ 193.127583][ T6894] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 193.148740][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.185155][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.232884][ T7455] device veth1_vlan entered promiscuous mode [ 193.296236][ T7647] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 193.313015][ T7455] device veth0_macvtap entered promiscuous mode [ 193.331544][ T7647] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 193.342698][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.380772][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.407701][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.416005][ T6894] usb 4-1: Using ep0 maxpacket: 8 [ 193.432929][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.453751][ T7641] loop5: detected capacity change from 0 to 32768 [ 193.468806][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.499817][ T7455] device veth1_macvtap entered promiscuous mode [ 193.511368][ T7641] XFS: noikeep mount option is deprecated. [ 193.545893][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.558515][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.597836][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.631438][ T7641] XFS (loop5): Mounting V5 Filesystem [ 193.640226][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.669893][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.681164][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.696650][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.706383][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.723051][ T7641] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 193.739981][ T6894] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 193.749270][ T6894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.755690][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.757430][ T6894] usb 4-1: Product: syz [ 193.772097][ T6894] usb 4-1: Manufacturer: syz [ 193.776896][ T6894] usb 4-1: SerialNumber: syz [ 193.783990][ T6894] usb 4-1: config 0 descriptor?? [ 193.790059][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.804175][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.817081][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.821128][ T7641] XFS (loop5): Starting recovery (logdev: internal) [ 193.833415][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.860080][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.877439][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.887821][ T7641] XFS (loop5): Ending recovery (logdev: internal) [ 193.913544][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.942381][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.960124][ T7455] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.982535][ T7455] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.993538][ T7455] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.012116][ T7455] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.063508][ T6894] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.094059][ T7] XFS (loop5): Metadata corruption detected at xfs_btree_lookup_get_block+0x481/0x6a0, xfs_bnobt block 0x8 [ 194.123296][ T7] XFS (loop5): Unmount and run xfs_repair [ 194.140333][ T7] XFS (loop5): xfs_inactive_ifree: xfs_ifree returned error -117 [ 194.180497][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.186862][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.196283][ T7] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_inactive_ifree+0x1c6/0x390 (fs/xfs/xfs_inode.c:1639). Shutting down filesystem. [ 194.242048][ T4470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.272754][ T4470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.308405][ T7] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 194.340076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.362478][ T4572] XFS (loop5): Unmounting Filesystem [ 194.377424][ T4470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.432985][ T4470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.477293][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.640117][ T4241] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 194.683440][ T4241] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.904667][ T6894] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 194.970739][ T6894] usb 4-1: USB disconnect, device number 7 [ 195.129293][ T7690] loop9: detected capacity change from 0 to 512 [ 195.268092][ T7690] EXT4-fs (loop9): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 195.296786][ T7690] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.471377][ T7690] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: writeback. [ 195.583054][ T7701] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: writeback. [ 195.881636][ T7718] device veth0 entered promiscuous mode [ 195.920383][ T7717] device veth0 left promiscuous mode [ 196.256347][ T1108] Process accounting resumed [ 196.307201][ T7690] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: writeback. [ 196.733115][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.9.680'. [ 196.797364][ T7749] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 196.798227][ T7747] overlayfs: failed to clone upperpath [ 198.186037][ T7761] loop4: detected capacity change from 0 to 32768 [ 198.302339][ T7761] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.686 (7761) [ 198.419917][ T7796] Illegal XDP return value 514, expect packet loss! [ 198.422924][ T7761] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 198.470795][ T7761] BTRFS info (device loop4): setting nodatacow, compression disabled [ 198.507067][ T7761] BTRFS info (device loop4): setting datasum, datacow enabled [ 198.548125][ T7761] BTRFS info (device loop4): force zlib compression, level 3 [ 198.568358][ T7761] BTRFS info (device loop4): using free space tree [ 198.573086][ T7770] loop2: detected capacity change from 0 to 40427 [ 198.588613][ T7761] BTRFS info (device loop4): has skinny extents [ 198.594077][ T7802] overlayfs: failed to clone upperpath [ 198.657223][ T7809] binder: 7804:7809 ioctl c0306201 200000000080 returned -14 [ 198.688443][ T7770] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 198.723445][ T7770] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 198.884656][ T7770] F2FS-fs (loop2): Found nat_bits in checkpoint [ 199.018918][ T7761] BTRFS info (device loop4): enabling ssd optimizations [ 199.032612][ T7770] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 199.044579][ T7770] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 199.237267][ T7849] loop3: detected capacity change from 0 to 128 [ 199.366777][ T7849] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.309192][ T7871] loop4: detected capacity change from 0 to 1024 [ 200.385410][ T7874] overlayfs: failed to clone upperpath [ 200.445784][ T7871] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 200.528484][ T7871] EXT4-fs (loop4): orphan cleanup on readonly fs [ 200.535605][ T7876] loop2: detected capacity change from 0 to 1024 [ 200.635834][ T7871] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.705: Freeing blocks not in datazone - block = 0, count = 4096 [ 200.677727][ T7876] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.719857][ T7871] EXT4-fs (loop4): 1 orphan inode deleted [ 200.752030][ T7891] overlayfs: failed to clone lowerpath [ 200.761947][ T7891] overlayfs: failed to clone upperpath [ 200.764744][ T7871] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.838147][ T7894] EXT4-fs (loop2): shut down requested (0) [ 201.210548][ T7903] loop3: detected capacity change from 0 to 512 [ 201.361124][ T7903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.710: inode #1: comm syz.3.710: iget: illegal inode # [ 201.374494][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 201.385337][ T7903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.710: error while reading EA inode 1 err=-117 [ 201.425056][ T7903] EXT4-fs (loop3): 1 orphan inode deleted [ 201.430846][ T7903] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x0000000000000006,minixdf,noinit_itable,grpquota,usrjquota=,journal_dev=0x0000000000000dd2,,errors=continue. Quota mode: writeback. [ 201.549563][ T26] audit: type=1800 audit(1758666505.169:34): pid=7903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.710" name="bus" dev="loop3" ino=15 res=0 errno=0 [ 201.983734][ T7916] device bridge_slave_1 left promiscuous mode [ 202.005783][ T7916] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.073374][ T7916] device bridge_slave_0 left promiscuous mode [ 202.085261][ T7916] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.704800][ T7911] loop4: detected capacity change from 0 to 32768 [ 202.831383][ T7949] netlink: 'syz.3.720': attribute type 4 has an invalid length. [ 202.840024][ T7949] netlink: 17 bytes leftover after parsing attributes in process `syz.3.720'. [ 202.883133][ T7911] XFS (loop4): Mounting V5 Filesystem [ 203.098227][ T7911] XFS (loop4): Ending clean mount [ 203.402109][ T7978] loop3: detected capacity change from 0 to 16 [ 203.425623][ T7455] XFS (loop4): Unmounting Filesystem [ 203.610989][ T7978] overlayfs: failed to clone upperpath [ 203.683035][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.730'. [ 203.816961][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 204.146530][ T8000] binder: 7998:8000 ioctl c0306201 200000000080 returned -14 [ 204.517759][ T8011] loop2: detected capacity change from 0 to 8 [ 205.970158][ T8034] kvm: pic: non byte read [ 206.005557][ T8034] kvm: pic: level sensitive irq not supported [ 206.005626][ T8034] kvm: pic: non byte read [ 206.102360][ T8006] loop4: detected capacity change from 0 to 32768 [ 206.109523][ T8034] kvm: pic: level sensitive irq not supported [ 206.109589][ T8034] kvm: pic: non byte read [ 206.132796][ T8034] kvm: pic: level sensitive irq not supported [ 206.132864][ T8034] kvm: pic: non byte read [ 206.164117][ T8034] kvm: pic: level sensitive irq not supported [ 206.164185][ T8034] kvm: pic: non byte read [ 206.182131][ T8034] kvm: pic: level sensitive irq not supported [ 206.189609][ T8034] kvm: pic: non byte read [ 206.231293][ T8034] kvm: pic: level sensitive irq not supported [ 206.231362][ T8034] kvm: pic: non byte read [ 206.261839][ T8006] XFS (loop4): Mounting V5 Filesystem [ 206.311655][ T8034] kvm: pic: level sensitive irq not supported [ 206.311723][ T8034] kvm: pic: non byte read [ 206.336380][ T8034] kvm: pic: level sensitive irq not supported [ 206.336447][ T8034] kvm: pic: non byte read [ 206.341251][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.744'. [ 206.554639][ T8006] XFS (loop4): Ending clean mount [ 206.573707][ T8006] XFS (loop4): Quotacheck needed: Please wait. [ 206.947062][ T8006] XFS (loop4): Quotacheck: Done. [ 208.330588][ T7455] XFS (loop4): Unmounting Filesystem [ 208.453020][ T8088] overlayfs: failed to clone upperpath [ 208.502669][ T8088] overlayfs: failed to clone upperpath [ 208.925123][ T8106] loop9: detected capacity change from 0 to 8 [ 208.942501][ T8107] netlink: 'syz.5.758': attribute type 1 has an invalid length. [ 208.987801][ T8107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.012586][ T8110] bond2: (slave gretap1): making interface the new active one [ 209.072204][ T8106] SQUASHFS error: Unable to read directory block [1d0:0] [ 209.199483][ T8110] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 209.275733][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 209.298495][ T8107] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 210.302219][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 210.347055][ T8166] loop9: detected capacity change from 0 to 256 [ 212.200420][ T8191] loop3: detected capacity change from 0 to 32768 [ 213.791454][ T8240] loop4: detected capacity change from 0 to 8 [ 214.864569][ T6894] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 215.104445][ T6894] usb 10-1: Using ep0 maxpacket: 16 [ 215.534678][ T1324] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 215.834593][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 215.994564][ T6894] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.014387][ T6894] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.142790][ T8269] netlink: 'syz.3.792': attribute type 4 has an invalid length. [ 216.154767][ T1324] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 216.184720][ T6894] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.194101][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 216.198723][ T6894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.212582][ T1324] usb 5-1: Product: syz [ 216.223315][ T6894] usb 10-1: Product: syz [ 216.228175][ T6894] usb 10-1: Manufacturer: syz [ 216.231336][ T1324] usb 5-1: Manufacturer: syz [ 216.234161][ T6894] usb 10-1: SerialNumber: syz [ 216.249514][ T1324] usb 5-1: SerialNumber: syz [ 216.289170][ T1324] usb 5-1: config 0 descriptor?? [ 216.572422][ T1324] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 216.604720][ T6894] usb 10-1: 0:2 : does not exist [ 216.634945][ T6894] usb 10-1: USB disconnect, device number 3 [ 216.824607][ T5391] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 216.896499][ T6599] udevd[6599]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.104557][ T1324] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 217.129718][ T1324] usb 5-1: USB disconnect, device number 3 [ 217.194723][ T5391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.212656][ T5391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.243074][ T5391] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.274423][ T5391] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.306508][ T5391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.326588][ T5391] usb 4-1: config 0 descriptor?? [ 217.806996][ T5391] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 217.865285][ T5391] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 217.982553][ T8324] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 218.166358][ T8278] loop3: detected capacity change from 0 to 1024 [ 218.294281][ T8278] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.312364][ T8341] loop4: detected capacity change from 0 to 128 [ 218.486142][ T8341] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.524894][ T8341] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.106750][ T155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.211530][ T155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.301628][ T155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.389935][ T155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.047468][ T1324] usb 4-1: USB disconnect, device number 8 [ 220.260914][ T8387] chnl_net:caif_netlink_parms(): no params data found [ 220.650045][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.668196][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.697896][ T8387] device bridge_slave_0 entered promiscuous mode [ 220.768739][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.788172][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.816169][ T8387] device bridge_slave_1 entered promiscuous mode [ 220.846121][ T8431] netlink: 'syz.9.826': attribute type 1 has an invalid length. [ 220.877823][ T8405] loop3: detected capacity change from 0 to 32768 [ 220.935996][ T8431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.994254][ T8434] bond1: (slave gretap1): making interface the new active one [ 221.014991][ T8434] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 221.048385][ T8405] XFS (loop3): Mounting V5 Filesystem [ 221.066261][ T8387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.083220][ T8436] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 221.148404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 221.207418][ T8387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.208491][ T8405] XFS (loop3): Ending clean mount [ 221.247272][ T8405] XFS (loop3): Quotacheck needed: Please wait. [ 221.266163][ T4227] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 221.386023][ T155] device hsr_slave_0 left promiscuous mode [ 221.431632][ T155] device hsr_slave_1 left promiscuous mode [ 221.459203][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.463002][ T8405] XFS (loop3): Quotacheck: Done. [ 221.486120][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.534838][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 221.555074][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.562738][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.604421][ T4271] Bluetooth: hci3: command 0x0409 tx timeout [ 221.633295][ T155] device bridge_slave_1 left promiscuous mode [ 221.648340][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.658022][ T155] device bridge_slave_0 left promiscuous mode [ 221.696727][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.728047][ T155] device veth1_macvtap left promiscuous mode [ 221.734123][ T155] device veth0_macvtap left promiscuous mode [ 221.748934][ T155] device veth1_vlan left promiscuous mode [ 221.759304][ T155] device veth0_vlan left promiscuous mode [ 221.768030][ T4189] XFS (loop3): Unmounting Filesystem [ 221.874688][ T4227] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 221.883782][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.904248][ T4227] usb 3-1: Product: syz [ 221.908630][ T4227] usb 3-1: Manufacturer: syz [ 221.914149][ T4227] usb 3-1: SerialNumber: syz [ 221.932820][ T4227] usb 3-1: config 0 descriptor?? [ 222.093574][ T155] team0 (unregistering): Port device team_slave_1 removed [ 222.110031][ T155] team0 (unregistering): Port device team_slave_0 removed [ 222.127408][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.178867][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.316899][ T155] bond0 (unregistering): Released all slaves [ 222.372568][ T8387] team0: Port device team_slave_0 added [ 222.381192][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.836'. [ 222.395426][ T8473] HTB: quantum of class 800D0004 is small. Consider r2q change. [ 222.451080][ T8485] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.470080][ T8387] team0: Port device team_slave_1 added [ 222.535941][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.554740][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.591451][ T8387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.635986][ T8485] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.651283][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.658582][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.685331][ T8387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.715652][ T4227] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 222.723961][ T4227] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 222.763139][ T8485] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.856371][ T8387] device hsr_slave_0 entered promiscuous mode [ 222.874245][ T8387] device hsr_slave_1 entered promiscuous mode [ 222.881629][ T8387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.890310][ T8387] Cannot create hsr debugfs directory [ 222.897945][ T4227] peak_usb: probe of 3-1:0.0 failed with error -71 [ 222.924649][ T4227] usb 3-1: USB disconnect, device number 7 [ 223.080472][ T8485] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.366267][ T8485] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.419244][ T8485] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.489510][ T8485] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.542016][ T8485] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.684157][ T8509] loop3: detected capacity change from 0 to 2048 [ 223.704950][ T5391] Bluetooth: hci3: command 0x041b tx timeout [ 223.771854][ T8509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.562327][ T8387] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.687225][ T8387] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 224.748331][ T8387] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.788507][ T8387] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.278738][ T8387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.343958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.364105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.402928][ T8519] loop9: detected capacity change from 0 to 32768 [ 225.404292][ T8387] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.453439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.466804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.500969][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.508566][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.556585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.582482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.616030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.651802][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.659022][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.680786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.721382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.781182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.793873][ T4241] Bluetooth: hci3: command 0x040f tx timeout [ 225.827862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.866678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.898589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.929051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.955662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.981861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.013219][ T8387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.056938][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.086165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.096711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.131155][ T8558] loop2: detected capacity change from 0 to 128 [ 227.521755][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.584594][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.653436][ T8387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.764049][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.793625][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.844878][ T4175] Bluetooth: hci3: command 0x0419 tx timeout [ 227.879904][ T8387] device veth0_vlan entered promiscuous mode [ 227.912260][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.945716][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.955760][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.034998][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.073174][ T8596] loop2: detected capacity change from 0 to 512 [ 228.106884][ T8387] device veth1_vlan entered promiscuous mode [ 228.197794][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.230022][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.295140][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.311815][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.349166][ T8596] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.439547][ T8387] device veth0_macvtap entered promiscuous mode [ 228.458779][ T8387] device veth1_macvtap entered promiscuous mode [ 228.510113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.537713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.595855][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.619908][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.674567][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.694745][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.728217][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.778179][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.824687][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.866822][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.901154][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.937147][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.969297][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.989760][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.018095][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.066202][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.131800][ T8387] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.164530][ T8387] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.183526][ T8387] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.200850][ T8387] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.229111][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.248621][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.581840][ T4468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.610692][ T4468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.658102][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 229.668201][ T4472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.714138][ T4472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.761697][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 229.803040][ T8651] overlayfs: failed to clone upperpath [ 229.814140][ T8650] loop9: detected capacity change from 0 to 512 [ 230.019904][ T8650] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 230.075012][ T8650] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.194525][ T4271] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 231.197731][ T8671] binder: BINDER_SET_CONTEXT_MGR already set [ 231.212173][ T8671] binder: 8670:8671 ioctl 4018620d 200000004a80 returned -16 [ 231.240831][ T8650] EXT4-fs warning (device loop9): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 2092153407 [ 231.254976][ T4271] usb 2-1: Using ep0 maxpacket: 32 [ 231.374659][ T4271] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 231.394708][ T4271] usb 2-1: config 0 has no interface number 0 [ 231.400855][ T4271] usb 2-1: config 0 interface 89 has no altsetting 0 [ 231.594602][ T4271] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 231.603737][ T4271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.646954][ T4271] usb 2-1: Product: syz [ 231.651301][ T4271] usb 2-1: Manufacturer: syz [ 231.673316][ T4271] usb 2-1: SerialNumber: syz [ 231.725522][ T4271] usb 2-1: config 0 descriptor?? [ 231.767111][ T4271] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 231.785111][ T4271] em28xx 2-1:0.89: Video interface 89 found: bulk [ 231.855980][ T8688] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.945580][ T8700] netlink: 'syz.5.887': attribute type 4 has an invalid length. [ 232.052480][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.9.889'. [ 232.229963][ T8688] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.333597][ T8688] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.404538][ T4271] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 232.430963][ T8688] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.267845][ T8688] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.310163][ T8721] syz.9.891[8721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.310336][ T8721] syz.9.891[8721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.335834][ T8688] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.371844][ T8688] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.410539][ T8688] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.714588][ T4271] em28xx 2-1:0.89: AC97 command still being executed: not handled properly! [ 233.904949][ T4271] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 233.932350][ T4271] em28xx 2-1:0.89: board has no eeprom [ 233.957883][ T8751] binder: 8750:8751 ioctl c0306201 200000000080 returned -14 [ 234.064475][ T4271] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 234.075178][ T4271] em28xx 2-1:0.89: analog set to bulk mode. [ 234.107643][ T5391] em28xx 2-1:0.89: Registering V4L2 extension [ 234.202289][ T4271] usb 2-1: USB disconnect, device number 2 [ 234.227744][ T8760] loop3: detected capacity change from 0 to 2048 [ 234.248817][ T4271] em28xx 2-1:0.89: Disconnecting em28xx [ 234.326589][ T5391] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 234.334158][ T5391] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 234.410921][ T5391] em28xx 2-1:0.89: No AC97 audio processor [ 234.441360][ T8760] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 234.484575][ T8760] UDF-fs: Scanning with blocksize 512 failed [ 234.608062][ T8760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.634991][ T5391] usb 2-1: Decoder not found [ 234.677016][ T8768] loop1: detected capacity change from 0 to 512 [ 234.719492][ T5391] em28xx 2-1:0.89: failed to create media graph [ 234.745836][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.9.905'. [ 234.754926][ T5391] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 234.852716][ T5391] em28xx 2-1:0.89: Registering snapshot button... [ 234.896793][ T8768] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 234.930076][ T5391] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input9 [ 235.093944][ T5391] em28xx 2-1:0.89: Remote control support is not available for this card. [ 235.172998][ T4271] em28xx 2-1:0.89: Closing input extension [ 235.185710][ T4271] em28xx 2-1:0.89: Deregistering snapshot button [ 235.215216][ T8768] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 235.245032][ T8768] FAT-fs (loop1): Filesystem has been set read-only [ 235.318943][ T8768] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 235.661308][ T8794] loop9: detected capacity change from 0 to 32768 [ 235.707094][ T4271] em28xx 2-1:0.89: Freeing device [ 235.724277][ T8794] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by syz.9.910 (8794) [ 235.740725][ T8794] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 235.749479][ T8794] BTRFS info (device loop9): enabling disk space caching [ 235.756645][ T8794] BTRFS info (device loop9): enabling auto defrag [ 235.763080][ T8794] BTRFS info (device loop9): doing ref verification [ 235.770202][ T8794] BTRFS info (device loop9): use no compression [ 235.776523][ T8794] BTRFS info (device loop9): force clearing of disk cache [ 235.783692][ T8794] BTRFS info (device loop9): disabling disk space caching [ 235.791228][ T8794] BTRFS info (device loop9): has skinny extents [ 237.212471][ T8794] BTRFS info (device loop9): enabling ssd optimizations [ 237.223676][ T8794] BTRFS info (device loop9): clearing free space tree [ 237.230616][ T8794] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 237.240380][ T8794] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 238.406357][ T8857] netlink: 'syz.3.925': attribute type 1 has an invalid length. [ 238.549515][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 238.769897][ T6599] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop9 scanned by udevd (6599) [ 239.243116][ T8860] device macvlan2 entered promiscuous mode [ 239.273005][ T8860] device bond1 entered promiscuous mode [ 239.285082][ T8860] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 239.299835][ T8860] device bond1 left promiscuous mode [ 239.903184][ T8926] loop3: detected capacity change from 0 to 1024 [ 240.009674][ T8934] loop9: detected capacity change from 0 to 512 [ 240.101364][ T8926] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 240.128616][ T8934] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 240.153256][ T8926] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 240.215041][ T8926] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 240.247906][ T8926] EXT4-fs (loop3): This should not happen!! Data will be lost [ 240.247906][ T8926] [ 240.332793][ T8926] EXT4-fs (loop3): Total free blocks count 0 [ 240.379544][ T8926] EXT4-fs (loop3): Free/Dirty block details [ 240.433691][ T8926] EXT4-fs (loop3): free_blocks=68451041280 [ 240.504238][ T8926] EXT4-fs (loop3): dirty_blocks=80 [ 240.540319][ T8926] EXT4-fs (loop3): Block reservation details [ 240.551752][ T4472] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 240.594465][ T8926] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 240.696862][ T8953] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 40 with error 28 [ 240.759931][ T8966] overlayfs: failed to clone upperpath [ 240.812220][ T8953] EXT4-fs (loop3): This should not happen!! Data will be lost [ 240.812220][ T8953] [ 242.560314][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 242.799034][ T9013] loop1: detected capacity change from 0 to 128 [ 243.674086][ T9040] loop9: detected capacity change from 0 to 1024 [ 243.777525][ T9040] EXT4-fs (loop9): Ignoring removed bh option [ 243.792974][ T9040] EXT4-fs (loop9): inline encryption not supported [ 243.817650][ T9047] loop1: detected capacity change from 0 to 2048 [ 243.830247][ T9038] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.859000][ T9040] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 243.874237][ T9038] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.947031][ T9040] EXT4-fs error (device loop9): ext4_map_blocks:629: inode #3: block 2: comm syz.9.963: lblock 2 mapped to illegal pblock 2 (length 1) [ 243.981610][ T9040] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 243.990231][ T9040] EXT4-fs error (device loop9): ext4_map_blocks:629: inode #3: block 48: comm syz.9.963: lblock 0 mapped to illegal pblock 48 (length 1) [ 244.004976][ T9040] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 244.018256][ T9040] EXT4-fs error (device loop9): ext4_acquire_dquot:6209: comm syz.9.963: Failed to acquire dquot type 0 [ 244.059429][ T9040] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 244.071302][ T9047] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 244.130176][ T9047] UDF-fs: Scanning with blocksize 512 failed [ 244.143074][ T9038] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.154450][ T9040] EXT4-fs error (device loop9): ext4_evict_inode:282: inode #11: comm syz.9.963: mark_inode_dirty error [ 244.184977][ T9038] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.212824][ T9047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.242891][ T9040] EXT4-fs warning (device loop9): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 244.315378][ T9040] EXT4-fs (loop9): 1 orphan inode deleted [ 244.341080][ T9040] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 244.436519][ T154] EXT4-fs error (device loop9): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 245.565321][ T9038] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.575690][ T9038] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.588858][ T154] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 245.657956][ T154] EXT4-fs error (device loop9): ext4_release_dquot:6245: comm kworker/u4:2: Failed to release dquot type 0 [ 245.752277][ T9059] ------------[ cut here ]------------ [ 245.765920][ T6635] EXT4-fs error (device loop9): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 245.784731][ T9059] WARNING: CPU: 0 PID: 9059 at fs/udf/inode.c:1935 __udf_add_aext+0x51a/0x6c0 [ 245.795785][ T9059] Modules linked in: [ 245.833213][ T9059] CPU: 0 PID: 9059 Comm: syz.1.962 Not tainted syzkaller #0 [ 245.864514][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 245.929943][ T6635] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 245.964436][ T9059] RIP: 0010:__udf_add_aext+0x51a/0x6c0 [ 245.969996][ T9059] Code: 08 4c 89 f7 e8 b7 2f f9 fe 49 8b 3e 4c 89 e6 e8 4c aa 12 ff 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 86 c7 b4 fe <0f> 0b e9 1b fc ff ff e8 7a c7 b4 fe 0f 0b e9 6f fd ff ff e8 6e c7 [ 246.022599][ T6635] EXT4-fs error (device loop9): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 246.117839][ T9038] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.157913][ T9059] RSP: 0018:ffffc90003abf868 EFLAGS: 00010283 [ 246.174869][ T9038] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.226348][ T9059] RAX: ffffffff82c3039a RBX: dffffc0000000000 RCX: 0000000000080000 [ 246.253123][ T9038] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.270981][ T9059] RDX: ffffc90015270000 RSI: 000000000001156d RDI: 000000000001156e [ 246.322568][ T9059] RBP: 1ffff92000757f79 R08: ffff888079ca9dc0 R09: 0000000000000002 [ 246.354426][ T9038] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.378765][ T9059] R10: 0000000000000001 R11: 0000000000000002 R12: 00000000000003d0 [ 246.417576][ T9059] R13: 0000000000000000 R14: ffffc90003abfbc0 R15: ffffc90003abfbc8 [ 246.439388][ T9038] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.454388][ T9059] FS: 00007f6a420ff6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 246.468355][ T9038] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.502821][ T9059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.533741][ T9059] CR2: 000020000006a000 CR3: 00000000692db000 CR4: 00000000003506f0 [ 246.539503][ T9038] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.569228][ T9059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.580257][ T9038] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.600949][ T9059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.648053][ T9059] Call Trace: [ 246.666588][ T9059] [ 246.682278][ T9059] udf_setup_indirect_aext+0x552/0x710 [ 246.706138][ T9059] ? __udf_add_aext+0x504/0x6c0 [ 246.726976][ T9059] udf_do_extend_file+0x6aa/0x1030 [ 246.750435][ T9059] ? udf_write_failed+0x1b0/0x1b0 [ 246.772389][ T9059] udf_setsize+0xb08/0x1090 [ 246.792839][ T9059] ? _raw_spin_unlock_irq+0x2a/0x40 [ 246.816154][ T9059] ? rwsem_down_write_slowpath+0xe0c/0x11f0 [ 246.843653][ T9059] ? udf_evict_inode+0x3e0/0x3e0 [ 246.864559][ T9059] udf_setattr+0x404/0x560 [ 246.881399][ T9059] ? udf_release_file+0x120/0x120 [ 246.898695][ T9059] notify_change+0xbcd/0xee0 [ 246.917023][ T9059] do_truncate+0x197/0x220 [ 246.933938][ T9059] ? rcu_lock_release+0x20/0x20 [ 246.952756][ T9059] ? bpf_lsm_path_truncate+0x5/0x10 [ 246.974775][ T9059] vfs_truncate+0x262/0x2f0 [ 246.998188][ T9059] do_sys_truncate+0xdc/0x190 [ 247.014180][ T9059] ? break_lease+0xd0/0xd0 [ 247.030261][ T9059] ? lockdep_hardirqs_on+0x94/0x140 [ 247.054395][ T9059] do_syscall_64+0x4c/0xa0 [ 247.070454][ T9059] ? clear_bhb_loop+0x30/0x80 [ 247.091276][ T9059] ? clear_bhb_loop+0x30/0x80 [ 247.119878][ T9059] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.143918][ T9059] RIP: 0033:0x7f6a43eb8ec9 [ 247.180455][ T9059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.241169][ T9059] RSP: 002b:00007f6a420ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 247.273727][ T9059] RAX: ffffffffffffffda RBX: 00007f6a44110090 RCX: 00007f6a43eb8ec9 [ 247.309044][ T9059] RDX: 0000000000000000 RSI: 000000400000f030 RDI: 0000200000000080 [ 247.348960][ T9059] RBP: 00007f6a43f3bf91 R08: 0000000000000000 R09: 0000000000000000 [ 247.386650][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.425384][ T9059] R13: 00007f6a44110128 R14: 00007f6a44110090 R15: 00007fff0ee49458 [ 247.433452][ T9059] [ 247.464487][ T9059] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 247.471836][ T9059] CPU: 0 PID: 9059 Comm: syz.1.962 Not tainted syzkaller #0 [ 247.479158][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.489253][ T9059] Call Trace: [ 247.492578][ T9059] [ 247.495532][ T9059] dump_stack_lvl+0x168/0x230 [ 247.500255][ T9059] ? show_regs_print_info+0x20/0x20 [ 247.505487][ T9059] ? load_image+0x3b0/0x3b0 [ 247.510038][ T9059] panic+0x2c9/0x7f0 [ 247.513969][ T9059] ? bpf_jit_dump+0xd0/0xd0 [ 247.518515][ T9059] ? __udf_add_aext+0x51a/0x6c0 [ 247.523410][ T9059] __warn+0x248/0x2b0 [ 247.527429][ T9059] ? __udf_add_aext+0x51a/0x6c0 [ 247.532313][ T9059] report_bug+0x1b7/0x2e0 [ 247.536689][ T9059] handle_bug+0x3a/0x70 [ 247.540874][ T9059] exc_invalid_op+0x16/0x40 [ 247.545414][ T9059] asm_exc_invalid_op+0x16/0x20 [ 247.550298][ T9059] RIP: 0010:__udf_add_aext+0x51a/0x6c0 [ 247.555806][ T9059] Code: 08 4c 89 f7 e8 b7 2f f9 fe 49 8b 3e 4c 89 e6 e8 4c aa 12 ff 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 86 c7 b4 fe <0f> 0b e9 1b fc ff ff e8 7a c7 b4 fe 0f 0b e9 6f fd ff ff e8 6e c7 [ 247.575541][ T9059] RSP: 0018:ffffc90003abf868 EFLAGS: 00010283 [ 247.581640][ T9059] RAX: ffffffff82c3039a RBX: dffffc0000000000 RCX: 0000000000080000 [ 247.589635][ T9059] RDX: ffffc90015270000 RSI: 000000000001156d RDI: 000000000001156e [ 247.597642][ T9059] RBP: 1ffff92000757f79 R08: ffff888079ca9dc0 R09: 0000000000000002 [ 247.605648][ T9059] R10: 0000000000000001 R11: 0000000000000002 R12: 00000000000003d0 [ 247.613646][ T9059] R13: 0000000000000000 R14: ffffc90003abfbc0 R15: ffffc90003abfbc8 [ 247.621657][ T9059] ? __udf_add_aext+0x51a/0x6c0 [ 247.626561][ T9059] ? __udf_add_aext+0x51a/0x6c0 [ 247.631448][ T9059] udf_setup_indirect_aext+0x552/0x710 [ 247.636946][ T9059] ? __udf_add_aext+0x504/0x6c0 [ 247.641852][ T9059] udf_do_extend_file+0x6aa/0x1030 [ 247.647004][ T9059] ? udf_write_failed+0x1b0/0x1b0 [ 247.652065][ T9059] udf_setsize+0xb08/0x1090 [ 247.656594][ T9059] ? _raw_spin_unlock_irq+0x2a/0x40 [ 247.661821][ T9059] ? rwsem_down_write_slowpath+0xe0c/0x11f0 [ 247.667753][ T9059] ? udf_evict_inode+0x3e0/0x3e0 [ 247.672728][ T9059] udf_setattr+0x404/0x560 [ 247.677169][ T9059] ? udf_release_file+0x120/0x120 [ 247.682221][ T9059] notify_change+0xbcd/0xee0 [ 247.686850][ T9059] do_truncate+0x197/0x220 [ 247.691297][ T9059] ? rcu_lock_release+0x20/0x20 [ 247.696191][ T9059] ? bpf_lsm_path_truncate+0x5/0x10 [ 247.701418][ T9059] vfs_truncate+0x262/0x2f0 [ 247.707346][ T9059] do_sys_truncate+0xdc/0x190 [ 247.712058][ T9059] ? break_lease+0xd0/0xd0 [ 247.716511][ T9059] ? lockdep_hardirqs_on+0x94/0x140 [ 247.721740][ T9059] do_syscall_64+0x4c/0xa0 [ 247.726196][ T9059] ? clear_bhb_loop+0x30/0x80 [ 247.730903][ T9059] ? clear_bhb_loop+0x30/0x80 [ 247.735612][ T9059] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.741534][ T9059] RIP: 0033:0x7f6a43eb8ec9 [ 247.745976][ T9059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.765607][ T9059] RSP: 002b:00007f6a420ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 247.774060][ T9059] RAX: ffffffffffffffda RBX: 00007f6a44110090 RCX: 00007f6a43eb8ec9 [ 247.782065][ T9059] RDX: 0000000000000000 RSI: 000000400000f030 RDI: 0000200000000080 [ 247.790067][ T9059] RBP: 00007f6a43f3bf91 R08: 0000000000000000 R09: 0000000000000000 [ 247.798074][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.806249][ T9059] R13: 00007f6a44110128 R14: 00007f6a44110090 R15: 00007fff0ee49458 [ 247.814271][ T9059] [ 247.817833][ T9059] Kernel Offset: disabled [ 247.822580][ T9059] Rebooting in 86400 seconds..