last executing test programs: 4m13.593431732s ago: executing program 3 (id=4): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000000)=ANY=[], 0x5, 0x7e1, &(0x7f0000001100)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0, 0x80) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 4m13.289357871s ago: executing program 3 (id=10): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x3000010, &(0x7f0000000300)={[{@auto_da_alloc}, {@nouser_xattr}]}, 0x1, 0x513, &(0x7f0000000380)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 4m8.849705246s ago: executing program 3 (id=23): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/66}, 0x20) 4m8.745221846s ago: executing program 3 (id=24): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f0000001200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) ftruncate(r0, 0x20000) 4m7.603813792s ago: executing program 3 (id=30): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='F'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 4m2.751797746s ago: executing program 3 (id=49): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113960000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4m2.671788356s ago: executing program 32 (id=49): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113960000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1m59.823110518s ago: executing program 0 (id=1245): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x20a4808, &(0x7f0000000300)=ANY=[], 0x1, 0x19c, &(0x7f0000000440)="$eJzs0L9rE3EYx/H3871vfglVo051aEAxXqkmd1UHp+BUoQcOLoJBj/Rsihc1vQy2tNhFBCl2cHHUqY4q6CSi6CxuDlqXbpIbioM4SCSXr4J/Q78vOD73PHD3PDztpJsUgN87Ky0aZBz28glBAxMy6ik1ylem/m5yYxScM/W6yacmx5Ol5ethHEeLlbMVyv81gB9Z718ref7o/R1SoYF83llphXI1YNCgo+ZYM8s16boPGNdjHLqCw6C6znlFV6qzsK/W69yqJUvLJxY64Xw0H93w/ekz9VP1+mm/dm0hjuovEfe+KB6zihtQCCi5q+Sa3P2o9zAliNtWW45MpuSbbOSd40emUpTbZ4DwtppS+KrbldJFjlG8PFx+hoPCE5yAo7OUFJps0AxyQb0QT1P8mVMU1xznZOtmPHfvkpJf+c2G9IvibZOreviTHtPD03CAd+TM5djcYvsbE/J6OOXvXXV2hmemOkz2cjvs9Ra9PHwQHTzcD/hlGMt+p7K9yvDGfCPm+SLQx7Isy7Isy7Isy9od/gQAAP//YJRgiA==") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$eJzs3M1vFOUfAPDvzG7L+6/8EF9A0CoaiS8tLS9y8ILRxIMmJnrAeKptIchCDa2JEKLoAY+GxLvxaOJf4EkvRj2ZeNW7ISGGC+hpzezOlKXdbbvtlq3M55MMPM/Os3me78w8u888z04DKK3h7J8kYntE/B4RQ83s3QWGm//dvnl58u+blyeTqNff+itplLt18/JkUbR437Zmpl7P85va1Hv13YiJWm36Qp4fnTv3wejsxUsvnDk3cXr69PT58ePHjxzeP3hs/GhP4sziurX345l9e15759obkyevvffzt1l7t+f7W+NYkXT5IsPNo9vW011VtvHtaEkn1T42hK5UIiI7XQON/j8Uldgyv28oXv2sr40D1lW9Xq+3+37OXakD97Ek+t0CoD+KL/rs/rfY7tHQY0O4caJ5A5TFfTvfmnuq87f4Awvub3tpOCJOXvnnq2yL1cxDAAB06fts/PN8u/FfGg+1lPtfvoayMyL+HxG7IuKBiNgdEQ9GNMo+HBGPdFn/whWSxeOf9PqqAluhbPz3Ur62dff4L22M+7KQK/lyz45G/APJqTO16UP5MTkYA5uy/NgSdfzwym9fdNrXOv7Ltqz+YiyYt+N6dcEE3dTE3MTaor7jxqcRe6vt4k+iWMZJImJPROxdZR1nnv1mX6d9y8e/hB6sM9W/jnimef6vxIL4C0nH9cmxF4+NHx3dHLXpQ6PFVbHYL79efbNT/WuKvwey87+17fU/H//OZHPE7MVLZxvrtbPd13H1j8873tOs9vofTN5upAfz1z6amJu7MBYxmLy++PXxO+8t8kX5LP6DB9r3/13VO0fi0YjILuL9EfFYRDyet/2JiHgyIg4sEf9PLz/1fvfxLzEr30NZ/FPLnf9oPf/dJypnf/yu+/gL2fk/0kgdzF9ZyeffShu4lmMHAAAA/xVp4zfwSToyn07TkZHmb/h3x9a0NjM799ypmQ/PTzV/K78zBtJipmuoZT50LJ8bLvLjC/KH83njLytbGvmRyZnaVL+Dh5Lb1qH/Z/6s9Lt1wLrzvBaUl/4P5aX/Q3np/1Be+j+UV7v+/0kf2gHce77/obz0fygv/R/KS/+HUur4bHy6pkf+1z1RfGRtlPbcD4kTXb0r0o3Q5hIkqiv+YxarTGxqu6vPH0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA98m8AAAD//0Fo4Oc=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) close(r3) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='ext3\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x0) 1m56.124070925s ago: executing program 0 (id=1258): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002780)=""/4071, 0xfffe}], 0x1}, 0x0) close(0x3) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 1m55.083602442s ago: executing program 0 (id=1266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="2b0300000000fcdbdf25050000000c001701"], 0x130}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r4, 0x0, 0x0, 0x0, 0x0) fremovexattr(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0xee00]) setresgid(0x0, r7, 0x0) setresgid(0x0, r6, r7) r8 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000000000000a"], 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000480)) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = gettid() process_vm_readv(r9, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xffffffffffffffff, 0x19000}], 0x1, 0x0) 1m53.461912337s ago: executing program 0 (id=1271): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x0, 0x1, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x48, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000004000226,adinicb,gid=forget,nostrict,unhide,nostrict,dmode=00000000000017777777777,uid=ignore,shortad,volume=00000000000000000006,\x00'], 0x4, 0xc24, &(0x7f0000000d00)="$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") open(0x0, 0x143200, 0x9) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 1m51.282070581s ago: executing program 0 (id=1283): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000050902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 1m50.74621287s ago: executing program 0 (id=1289): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000040)) 1m50.60870261s ago: executing program 33 (id=1289): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000040)) 1m18.956213277s ago: executing program 6 (id=1514): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgget$private(0x0, 0x0) 1m13.208731395s ago: executing program 6 (id=1555): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000680)={0x2, @win={{0x9, 0xc, 0x8, 0x8}, 0x8, 0x0, &(0x7f00000002c0)={{0xb, 0x9, 0x9, 0x3}, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0xc}}}, 0x9, &(0x7f0000000780)="7c3db5b614f551010688956184f9a4681f27eaafa9b323316972c712ecc898a0adee2cf5cd1faafb1bae4b8f8eaa26a896c410bf6d572cf357ddf4b9f05aec5de92c2dcfcbfe3eddc40b0d495a56d8c0342910db18be55e897fc416978238af0101868eafea5029d2597d3ca9984b6bb2b1e150c8723b1ae43a420df1cf03770f02625a974423a3142fd9b903082920cb4e66ba5c0ae5416aa898ad3fbbaefaec7d450754fc1dc20f3149b3970a3d26e93b60b8ef96f820e9feb659febd10943b9a152ce177be19cfdac4d34c2435a1376d9", 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfa, "729bee", "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"}}, 0x110) r4 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r4, &(0x7f0000002340), 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="1780869ebe3ab666866b62437305091cbfc88b25c79f27ef660a312084e156e3f466d4e9d07290895bf9ffa77236e87006e9dae59b2f657fda59b0156b64ca994df45f428e6a921f9023cbf52ef27192a3c5918af57450e9c9e5df4e6cb8406925b6bc46befc1438295732f21a5286661d1094a855188c77bd7d744e8f7588f02bdc7064623a1800"/151, 0x9e) socket$igmp6(0xa, 0x3, 0x2) 1m12.191071164s ago: executing program 6 (id=1561): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000300)=""/226) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 1m11.146664312s ago: executing program 6 (id=1566): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x1}], 0x1, 0x6120, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m10.52298792s ago: executing program 6 (id=1574): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x1, 0x7a1, &(0x7f00000017c0)="$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") inotify_init1(0x180800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0x6, 0x20009, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x10001, 0x8, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fe, 0x1, 0xff0f}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 1m6.204854291s ago: executing program 6 (id=1604): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 50.709221711s ago: executing program 34 (id=1604): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 19.92821662s ago: executing program 4 (id=1929): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, 0x0, 0x0) 16.280656933s ago: executing program 4 (id=1978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r2 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x10a4, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000640)='\"', 0x1}], 0x1) close(r0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, '0'}]}}}}}}}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') setns(r7, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c00010000000000"], 0x18}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r8, r9, r8}, &(0x7f00000005c0)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000280)={'sha512\x00'}}) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x20c, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x9c, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x268) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaf691596480f30878e7a67b4231fcef72af623c3bcc7e76f3f75a4b26868b427c397e2b51f4af0ab29c37e04fa44e167bb3d75d67f94b13944eba1caf2697f2403d666b2a8a878116e48eddd273ba46f74347b1568aa88f77c5e973"], 0x5d) r11 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f00000002c0)={0x0, 0xfc, 0x2, &(0x7f00000008c0)={0x0, "cc3df0b97c31c635d41f1db17008852daad3915d105cea6345c0bd492ca56f24ee"}}) 16.279576203s ago: executing program 4 (id=1982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) getrusage(0x0, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50010000020205000000000000000000020000040800044000000081280001800c00"], 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 14.82103254s ago: executing program 4 (id=1991): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1, 0x177, &(0x7f0000000240)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x140) 14.633806259s ago: executing program 4 (id=1996): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000080b7030000feffffff85000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14.361521399s ago: executing program 4 (id=2003): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x23, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a855055aa57dd85673c7f6344e8b50dee773f09f44bf", 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.527526787s ago: executing program 35 (id=2003): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x23, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a855055aa57dd85673c7f6344e8b50dee773f09f44bf", 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.942794846s ago: executing program 5 (id=2101): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0x7}) 2.761149386s ago: executing program 5 (id=2105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x4, 0x99, &(0x7f0000000c00)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r0) 2.618099366s ago: executing program 7 (id=2106): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xab, 0xd1, 0xa0, 0x40, 0x77b, 0x2226, 0xca8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3a, 0x92, 0xf8}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.617832926s ago: executing program 5 (id=2107): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") socket$alg(0x26, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x3180810, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)=""/79) 2.464754295s ago: executing program 5 (id=2109): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a855055aa57dd856", 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.998182074s ago: executing program 7 (id=2111): r0 = socket$packet(0x11, 0x2, 0x300) r1 = gettid() read(r0, 0x0, 0xffffff52) tkill(r1, 0x7) 1.738494584s ago: executing program 5 (id=2112): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) 1.721479024s ago: executing program 7 (id=2113): syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x8c55, &(0x7f0000000a40)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5"], 0xf5, 0x315, &(0x7f0000000c40)="$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") 1.585926854s ago: executing program 5 (id=2115): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000c40)='user\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff2a}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00', 0x2}, &(0x7f00000000c0)=0x1e) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @local, 0x1}}]}, 0x50}}, 0x0) 1.531482663s ago: executing program 8 (id=2116): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) 1.473878633s ago: executing program 7 (id=2117): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="83931e57", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40044) 1.430020153s ago: executing program 2 (id=2118): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f0000000040)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@nombcache}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@bh}, {@nodiscard}, {@block_validity}, {@resgid, 0x32}]}, 0x9b, 0x4d8, &(0x7f0000000a40)="$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") r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x14, 0x0) 1.337133923s ago: executing program 7 (id=2120): socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 1.229991873s ago: executing program 2 (id=2121): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x0, 0xffffffffffffffff, 0x7b, 0xfffffffffffffffd, 0x9b}) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000002c0)={0x0, 0x0, 0x800, 0x0, 0x0, 0x20000000}) open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0) 1.205682462s ago: executing program 1 (id=2122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000102010200000000000000000a0000004400018006000340000000000c00028005000100000000002c0001"], 0x58}}, 0x0) 1.077615443s ago: executing program 8 (id=2123): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file0/file0\x00', 0x2802072, &(0x7f0000000140)=ANY=[], 0x1, 0x36b, &(0x7f00000002c0)="$eJzs3T9oJFUYAPBvM/snOdCkEwVhtRM0XK7TxgTJwWEalcU/hbh4OZVNFBIMJsUlsVAsBUut7BS0sBBLERSxs7D1BDkVC0134OGT3dnZnWQ3udxhlHC/H2Tz9r33zftm3rA7GXZfXpiPzsVaXNrbuxqTk5Wozj82H9cqMRNZFHZiVH1MHQBwOlxLKf5MueP0zyIqJ58VAHCSeu//L0VEM2bymje/Pqp/8u4PAKde/+//qaP6TB7W8NqJpAQAnLCR+//372uu936qxdNq6VMBAMBp9dSzzz2+sBTxZLM5GbH69kZroxWPDNsXLsUrsRLLcTam43pEfqHQfaj0Hs9fWFo822w2t+OXmWhFxEQ/sJVfKSxkvfhGzA1aBlcbKaXs/GdLi3PNnojY2e6NH6uVjVYtzvTH//FMLA8vPGaKJKL3cGFp8Vyzv4HWahG/HbE7vG/RzX82puP7FwebSan4BOPS4uW5if6TYfxGqxEXB0fh0DsgAAAAAAAAAAAAAAAAAAAAAABwS2abAzOD9XNS93e+Us7s7Jj23vo4eXx/faDdfH2g1EiR0h9vPNR6J4t96wMdXJ9nw0KCAAAAAAAAAAAAAAAAAAAAMLC+WY/2ysry2vrmVqdc2F5b35yIiG7Nq99+8tVUjPa5QaGaD9GIGAzR7A+71WmnrOicsojR8Kw7eFHz0eeDjMt9GoO9GJtGY3zTXnQLd9z38/vDpnuzYst/DztnMX4Hs1Iajx4YdPXOPKXaEcencljTuXJNY3T0KymlUs1b5fDLz49uMCoR1ZufuK3ORBzeJ3UL31x9+e7i6Le/TLkHHpx++sp7H/7Waa90R47eDNbX1q+nTrtSdL6ZNLpTMDw3KpEXKuUzoXpU+O7+mnb2w+/P3PPud8cbPZVrXu+ezwf6ZPnufHowvN6f5YjeDNaHZ8vUMLzW34mV5dqYk/9GhVuY07s++OLjlH769dhD5LrZT4y8bFT+vVcgAAAAAAAAAAAAAAAAAACgUPqueF//y761o6IefuLkMwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/87w//+XCrs7caDmOIW/tsdENZbX1iPq//duAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwm/snAAD//0TUVR8=") syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x8c55, &(0x7f0000000a40)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5"], 0xf5, 0x315, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r3, 0x5, 0x1, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@crypto_settings=[@NL80211_ATTR_PMK={0x8, 0xfe, "8779cab3"}]]}, 0x24}}, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) ftruncate(r0, 0x8200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000740)=0xa00, 0x12) 1.006009543s ago: executing program 2 (id=2124): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfff, 0x5}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x3c}}, 0x0) 1.005748572s ago: executing program 1 (id=2125): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[], 0xfd, 0x2a4, &(0x7f0000000700)="$eJzs3M9r02AYwPGn7X52bu1BBAXxQS96CVv9C4psIBaUuYp6EDKXamlsRxInFXG7efXvGB69Ceo/0Is37+JlCIKXgcPK8mPL6sRMOjPX7wdK3uZ9nuZNmpTnDTQbt18+atRco2Z6kh1TyYqsyaZIcbsVyoTLrN8ekbg1uTTx7ePZm3fuXitXKrPzqnPlhcslVZ069/bJs1fn33sTt15PvRmVTvHextfSp86pzumNHwvRp7c8NXWx1fLMRdvSpbrbMFRv2JbpWlpvupbjrW5Hhf01u7W83FazuTSZX3Ys11Wz2daG1d460VLPaav5wKw31TAMnczLoMkdOKO6Pj9vlg9lMEjDeOxy3eE4ZTMXdu5VXf9XAwMAAEdHWvX/w7qrdVebf6r/sxLv/239rx71/1+g/h8E2/V/Prx+96L+BwAAAAAAAAAAAAAAAAAAAADgf7DZ7Ra63W4hWkavUREZE5Ho/U5CMdXhos8O/P3jWIn9cW9MxH6xUl2pBsugv1yTuthiyfSwyJZ/PoSC9tzVyuy0+oryzl4N81dXqjkZjfIjxf3zZ4J83Zs/LPn49ktS+H5y//zSvvkjcvFCLN+Qgny4Ly2xZck/r3fzn8+oXrle6ckf9+MAAAAAADgODN3RM3/PDPn9hkaPDenpD1b68+uMiExLIbg/INlgZv3L/YGe+fWQnBlKcccBAAAAABggbvtpw7Rtyzm2jUxf9rQjPWsG4dD1vzGRF0kcnJUDBPe38UVEjsYRS9gYTxT8+XFwLSQJTvNXCQAAAMBh2C360x4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDK+kDxqL4ZE8jy0h8TWxzuXT2EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgafgYAAP//LOkXIw==") r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1}]) 921.331272ms ago: executing program 2 (id=2126): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xab, 0xd1, 0xa0, 0x40, 0x77b, 0x2226, 0xca8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3a, 0x92, 0xf8}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 858.997462ms ago: executing program 1 (id=2127): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) socket$packet(0x11, 0x3, 0x300) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 653.970722ms ago: executing program 1 (id=2128): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) 653.575892ms ago: executing program 8 (id=2129): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000801, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 618.543721ms ago: executing program 1 (id=2130): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c0004"], 0x40c}}, 0x0) 498.059291ms ago: executing program 8 (id=2131): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x2006, 0x0, 0x3}) 314.015041ms ago: executing program 2 (id=2132): r0 = userfaultfd(0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x248}) 313.668131ms ago: executing program 8 (id=2133): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000300)=""/226) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 253.978251ms ago: executing program 2 (id=2134): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 150.337951ms ago: executing program 7 (id=2135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x20000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7f, 0x0, 0x0, 0xf7d, 0x0, 0x0, 0x9e81], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000]}, 0x45c) 517.89µs ago: executing program 1 (id=2136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007"], 0x38}}, 0x0) 0s ago: executing program 8 (id=2137): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) syz_clone(0x14000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) kernel console output (not intermixed with test programs): T-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 96.809917][ T4979] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 96.809917][ T4979] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 96.809917][ T4979] [ 97.432963][ T4910] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.470603][ T4979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b8024118, mo2=0002] [ 97.490579][ T4979] System zones: 1-12 [ 97.503613][ T4979] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.279: corrupted in-inode xattr [ 97.527339][ T4994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.283'. [ 97.529809][ T4979] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.279: couldn't read orphan inode 15 (err -117) [ 97.562885][ T4979] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,nogrpid,commit=0x0000000000000005,init_itable=0x0000000000000601,noacl,nogrpid,,errors=continue. Quota mode: none. [ 97.584162][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.586112][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.682725][ T1961] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 97.684353][ T1961] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 97.686170][ T1961] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 97.746305][ T5004] netlink: 160 bytes leftover after parsing attributes in process `syz.2.288'. [ 97.750471][ T5004] netlink: 160 bytes leftover after parsing attributes in process `syz.2.288'. [ 97.773985][ T5004] netlink: 160 bytes leftover after parsing attributes in process `syz.2.288'. [ 97.801463][ T5007] loop5: detected capacity change from 0 to 128 [ 97.892423][ T1961] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 97.934176][ T5007] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.964683][ T5007] syz.5.289 (pid 5007) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 98.107003][ T1961] cdc_ncm 1-1:1.0 eth4: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 98.154766][ T1961] usb 1-1: USB disconnect, device number 5 [ 98.156844][ T1961] cdc_ncm 1-1:1.0 eth4: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 98.366417][ T5043] loop4: detected capacity change from 0 to 512 [ 98.409872][ T5044] loop1: detected capacity change from 0 to 1024 [ 98.415816][ T5043] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 98.995642][ T5044] EXT4-fs (loop1): Ignoring removed bh option [ 99.042194][ T5044] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.088908][ T5043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 99.113288][ T5043] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.299: corrupted in-inode xattr [ 99.157188][ T5044] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,i_version,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 99.165790][ T5043] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.299: couldn't read orphan inode 15 (err -117) [ 99.250197][ T5043] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 99.307236][ T5063] loop0: detected capacity change from 0 to 256 [ 99.376521][ T5063] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 99.955099][ T5108] loop5: detected capacity change from 0 to 256 [ 100.018262][ T5108] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 100.060834][ T5116] Zero length message leads to an empty skb [ 100.131430][ T5120] loop0: detected capacity change from 0 to 1024 [ 100.228199][ T5120] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 100.260187][ T5120] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,init_itable,mblk_io_submit,,errors=continue. Quota mode: none. [ 100.456222][ T5136] device syzkaller0 entered promiscuous mode [ 100.655434][ T5159] loop1: detected capacity change from 0 to 1024 [ 100.719037][ T5159] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 100.760645][ T5159] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,init_itable,mblk_io_submit,,errors=continue. Quota mode: none. [ 100.978223][ T5179] loop4: detected capacity change from 0 to 256 [ 101.021555][ T5179] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 101.539264][ T5204] loop5: detected capacity change from 0 to 256 [ 101.626871][ T5204] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 102.041750][ T5238] loop5: detected capacity change from 0 to 256 [ 102.101810][ T5238] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 102.498082][ T5274] loop1: detected capacity change from 0 to 256 [ 102.554047][ T5274] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 104.088376][ T5329] device pim6reg1 entered promiscuous mode [ 105.468058][ T5400] device syzkaller0 entered promiscuous mode [ 108.155387][ T5484] loop5: detected capacity change from 0 to 256 [ 108.262337][ T5484] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 108.266025][ T5484] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 108.273823][ T5484] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 108.275706][ T5484] UDF-fs: Scanning with blocksize 512 failed [ 108.301877][ T5484] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 108.331786][ T5484] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.896491][ T5519] loop4: detected capacity change from 0 to 256 [ 109.959909][ T5519] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 110.556394][ T5569] loop4: detected capacity change from 0 to 256 [ 110.602953][ T5569] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 111.039648][ T5601] loop4: detected capacity change from 0 to 256 [ 111.114916][ T5601] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 111.318675][ T5615] device veth1_macvtap left promiscuous mode [ 111.320472][ T5615] device macsec0 entered promiscuous mode [ 111.540728][ T5630] device pim6reg1 entered promiscuous mode [ 111.556033][ T5635] loop4: detected capacity change from 0 to 256 [ 111.610901][ T5635] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 111.615815][ T5635] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 111.621900][ T5635] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 111.639367][ T5635] UDF-fs: Scanning with blocksize 512 failed [ 111.643329][ T5635] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 111.656139][ T5635] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.864075][ T5654] device bridge_slave_1 left promiscuous mode [ 111.867194][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.921730][ T5654] device bridge_slave_0 left promiscuous mode [ 111.924549][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.199283][ T5680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.554'. [ 112.554290][ T5708] loop1: detected capacity change from 0 to 256 [ 112.651054][ T5708] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 112.853470][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.567'. [ 114.363512][ T5800] udc-core: couldn't find an available UDC or it's busy [ 114.365390][ T5800] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 115.839183][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 115.898564][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 116.176126][ T5853] loop0: detected capacity change from 0 to 256 [ 116.227796][ T5853] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 116.240277][ T5853] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 116.264426][ T5853] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 116.279107][ T5853] UDF-fs: Scanning with blocksize 512 failed [ 116.302559][ T5853] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 116.330720][ T5853] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.808892][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.840581][ T26] audit: type=1326 audit(116.796:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.5.611" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 116.855635][ T26] audit: type=1326 audit(116.816:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.5.611" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 116.889812][ T26] audit: type=1326 audit(116.816:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.5.611" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 116.935693][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.938364][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.940215][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.962404][ T26] audit: type=1326 audit(116.816:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.5.611" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 116.975188][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.243142][ T26] audit: type=1326 audit(117.196:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.5.611" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 117.255194][ T26] audit: type=1326 audit(117.216:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.5.611" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 117.392249][ T26] audit: type=1326 audit(117.326:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.5.611" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=155 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 117.401295][ T26] audit: type=1326 audit(117.326:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.5.611" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 117.425877][ T26] audit: type=1326 audit(117.326:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.5.611" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 118.242386][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 118.818681][ T5920] device team_slave_0 entered promiscuous mode [ 118.820626][ T5920] device team_slave_1 entered promiscuous mode [ 118.849258][ T5920] device macsec1 entered promiscuous mode [ 118.850983][ T5920] device team0 entered promiscuous mode [ 118.879929][ T5920] team0: Device macsec1 is already an upper device of the team interface [ 118.891251][ T5920] device team0 left promiscuous mode [ 118.900232][ T5920] device team_slave_0 left promiscuous mode [ 118.901870][ T5920] device team_slave_1 left promiscuous mode [ 118.966398][ T5922] tipc: Started in network mode [ 118.968171][ T5922] tipc: Node identity 7, cluster identity 4711 [ 118.969957][ T5922] tipc: Node number set to 7 [ 119.016197][ T26] audit: type=1326 audit(118.976:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz.4.632" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89f23968 code=0x0 [ 119.057194][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 119.327058][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.329058][ T5945] bridge0: port 2(bridge_slave_1) entered listening state [ 119.331021][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.333071][ T5945] bridge0: port 1(bridge_slave_0) entered listening state [ 119.338803][ T5945] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.341094][ T5945] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.382586][ T5945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.501335][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.646'. [ 119.704272][ T5963] udc-core: couldn't find an available UDC or it's busy [ 119.706138][ T5963] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.072889][ T4369] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.726536][ T5976] netlink: 'syz.1.654': attribute type 1 has an invalid length. [ 120.852240][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 120.889814][ T5980] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 120.909122][ T5976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.917277][ T153] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 120.920616][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 120.975477][ T4369] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 120.977727][ T4369] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 120.990160][ T4369] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 121.006322][ T4369] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 121.008595][ T4369] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.029500][ T4369] usb 1-1: config 0 has no interface number 0 [ 121.031145][ T4369] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 121.043248][ T1692] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 121.050384][ T4369] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 121.069963][ T4369] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.082069][ T4369] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.099281][ T4369] usb 1-1: config 0 interface 125 has no altsetting 0 [ 121.101042][ T4369] usb 1-1: config 0 interface 125 has no altsetting 2 [ 121.440452][ T4369] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 121.442906][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.444926][ T4369] usb 1-1: Product: syz [ 121.445958][ T4369] usb 1-1: Manufacturer: syz [ 121.447115][ T4369] usb 1-1: SerialNumber: syz [ 121.451664][ T4369] usb 1-1: config 0 descriptor?? [ 121.493839][ T4369] usb 1-1: selecting invalid altsetting 2 [ 121.701758][ T5961] udc-core: couldn't find an available UDC or it's busy [ 121.707842][ T5961] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.040598][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 122.060834][ T6029] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.063649][ T6029] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.066014][ T6029] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.068399][ T6029] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.104355][ T6029] device vxlan0 entered promiscuous mode [ 122.136506][ T5961] udc-core: couldn't find an available UDC or it's busy [ 122.138733][ T5961] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.152249][ C1] usb 1-1: async_complete: urb error -71 [ 122.154070][ C1] usb 1-1: async_complete: urb error -71 [ 122.155704][ C1] usb 1-1: async_complete: urb error -71 [ 122.158183][ T4369] get_1284_register: usb error -71 [ 122.159559][ T4369] uss720: probe of 1-1:0.125 failed with error -71 [ 122.170886][ T4369] usb 1-1: USB disconnect, device number 6 [ 122.430532][ T6038] loop1: detected capacity change from 0 to 256 [ 122.486558][ T6038] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 122.490301][ T6038] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 122.504601][ T6038] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 122.506662][ T6038] UDF-fs: Scanning with blocksize 512 failed [ 122.514159][ T6038] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 122.524466][ T6038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.808597][ T6055] netlink: 80 bytes leftover after parsing attributes in process `syz.2.688'. [ 122.901247][ T6060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.690'. [ 123.121673][ T6073] fuse: Bad value for 'fd' [ 123.137018][ T6073] loop5: detected capacity change from 0 to 256 [ 123.145026][ T6076] batman_adv: Cannot find parent device [ 123.183726][ T6073] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 123.188031][ T6073] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 123.192736][ T6073] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 123.198505][ T6073] UDF-fs: Scanning with blocksize 512 failed [ 123.207093][ T6073] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 123.218586][ T6073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.554356][ T6086] netlink: 80 bytes leftover after parsing attributes in process `syz.0.701'. [ 123.892617][ T26] audit: type=1326 audit(123.856:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9885a968 code=0x7fc00000 [ 123.902889][ T26] audit: type=1326 audit(123.856:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9885a968 code=0x7fc00000 [ 123.913569][ T26] audit: type=1326 audit(123.856:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9885a968 code=0x7fc00000 [ 123.920113][ T26] audit: type=1326 audit(123.856:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9885a968 code=0x7fc00000 [ 123.926127][ T26] audit: type=1326 audit(123.856:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9885a968 code=0x7fc00000 [ 123.931733][ T26] audit: type=1326 audit(123.856:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9885a968 code=0x7fc00000 [ 123.938254][ T26] audit: type=1326 audit(123.856:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9885a968 code=0x7fc00000 [ 123.945752][ T26] audit: type=1326 audit(123.856:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9885a968 code=0x7fc00000 [ 123.951710][ T26] audit: type=1326 audit(123.856:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9885a968 code=0x7fc00000 [ 124.001501][ T26] audit: type=1326 audit(123.856:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9885a968 code=0x7fc00000 [ 125.160942][ T6126] udc-core: couldn't find an available UDC or it's busy [ 125.166929][ T6126] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.716420][ T6137] netlink: 80 bytes leftover after parsing attributes in process `syz.1.720'. [ 125.955362][ T6145] udc-core: couldn't find an available UDC or it's busy [ 125.957167][ T6145] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 126.388240][ T6165] syz.5.733 uses obsolete (PF_INET,SOCK_PACKET) [ 126.692133][ T6167] udc-core: couldn't find an available UDC or it's busy [ 126.719991][ T6167] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 127.093624][ T6184] netlink: 'syz.4.742': attribute type 10 has an invalid length. [ 127.109782][ T6184] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.131599][ T6184] bond0: (slave team0): Enslaving as an active interface with an up link [ 127.312339][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 127.557324][ T6206] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.559576][ T6206] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.683183][ T6206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.926345][ T6225] udc-core: couldn't find an available UDC or it's busy [ 128.928209][ T6225] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 128.951040][ T6225] udc-core: couldn't find an available UDC or it's busy [ 128.969866][ T6225] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.334439][ T6261] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.421643][ T6267] sctp: [Deprecated]: syz.5.778 (pid 6267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.421643][ T6267] Use struct sctp_sack_info instead [ 130.455889][ T6266] device bond_slave_0 entered promiscuous mode [ 130.457813][ T6266] device bond_slave_1 entered promiscuous mode [ 130.459559][ T6266] device team_slave_0 entered promiscuous mode [ 130.461307][ T6266] device team_slave_1 entered promiscuous mode [ 130.499758][ T6266] device macsec1 entered promiscuous mode [ 130.506831][ T6266] device bond0 entered promiscuous mode [ 130.511929][ T6266] device team0 entered promiscuous mode [ 130.540081][ T6266] device bond0 left promiscuous mode [ 130.546189][ T6266] device team0 left promiscuous mode [ 130.555080][ T6266] device bond_slave_0 left promiscuous mode [ 130.556643][ T6266] device bond_slave_1 left promiscuous mode [ 130.558392][ T6266] device team_slave_0 left promiscuous mode [ 130.559909][ T6266] device team_slave_1 left promiscuous mode [ 130.575501][ T6271] udc-core: couldn't find an available UDC or it's busy [ 130.583104][ T6271] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.597932][ T6271] udc-core: couldn't find an available UDC or it's busy [ 130.600005][ T6271] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.103504][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.109491][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.392430][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 131.562951][ T6279] udc-core: couldn't find an available UDC or it's busy [ 131.564820][ T6279] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.787239][ T6292] udc-core: couldn't find an available UDC or it's busy [ 131.790992][ T6292] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.821938][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.001065][ T6292] udc-core: couldn't find an available UDC or it's busy [ 132.007252][ T6292] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 132.020933][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.077828][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.150784][ T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.236695][ T6310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.238906][ T6310] IPv6: NLM_F_CREATE should be set when creating new route [ 132.274385][ T6297] chnl_net:caif_netlink_parms(): no params data found [ 132.486518][ T6297] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.488507][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.504680][ T6297] device bridge_slave_0 entered promiscuous mode [ 132.535416][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.553589][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.581724][ T6297] device bridge_slave_1 entered promiscuous mode [ 132.751913][ T6297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.758168][ T6297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.854309][ T6297] team0: Port device team_slave_0 added [ 132.884074][ T6297] team0: Port device team_slave_1 added [ 132.990112][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.991923][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.032276][ T6297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.080135][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.081979][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.106618][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 133.106631][ T26] audit: type=1326 audit(133.066:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.5.810" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 133.122241][ T26] audit: type=1326 audit(133.066:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.5.810" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 133.128402][ T6297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.142886][ T26] audit: type=1326 audit(133.066:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.5.810" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 133.162360][ T26] audit: type=1326 audit(133.066:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.5.810" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 133.349434][ T6297] device hsr_slave_0 entered promiscuous mode [ 133.402754][ T6297] device hsr_slave_1 entered promiscuous mode [ 133.459906][ T6297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.464694][ T6297] Cannot create hsr debugfs directory [ 133.555531][ T6382] netlink: 'syz.4.818': attribute type 29 has an invalid length. [ 133.608019][ T6382] netlink: 'syz.4.818': attribute type 29 has an invalid length. [ 133.669724][ T6385] netlink: 'syz.4.818': attribute type 29 has an invalid length. [ 133.896399][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.822'. [ 134.034272][ T1961] Bluetooth: hci0: command 0x0409 tx timeout [ 134.289784][ T6411] udc-core: couldn't find an available UDC or it's busy [ 134.301618][ T6411] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.535663][ T136] device hsr_slave_0 left promiscuous mode [ 134.595114][ T136] device hsr_slave_1 left promiscuous mode [ 134.652873][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.654916][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.657649][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.659776][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.666583][ T136] device bridge_slave_1 left promiscuous mode [ 134.671253][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.724169][ T136] device bridge_slave_0 left promiscuous mode [ 134.726042][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.841316][ T136] device veth1_macvtap left promiscuous mode [ 134.843095][ T136] device veth0_macvtap left promiscuous mode [ 134.844762][ T136] device veth1_vlan left promiscuous mode [ 134.846363][ T136] device veth0_vlan left promiscuous mode [ 135.337756][ T136] team0 (unregistering): Port device team_slave_1 removed [ 135.358810][ T136] team0 (unregistering): Port device team_slave_0 removed [ 135.375253][ T6400] syz.4.824 (6400): drop_caches: 2 [ 135.380166][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.420012][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.648037][ T136] bond0 (unregistering): Released all slaves [ 135.776007][ T6424] netlink: 'syz.2.830': attribute type 1 has an invalid length. [ 135.902018][ T6297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.948557][ T6297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.004503][ T6297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.024204][ T6297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.113475][ T1961] Bluetooth: hci0: command 0x041b tx timeout [ 136.401065][ T6297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.464432][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.467121][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.502696][ T6297] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.517381][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.520182][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.523162][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.525081][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.543731][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.598923][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.601623][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.613360][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.615326][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.642917][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.654502][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.677864][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.681226][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.704022][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.718050][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.739930][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.762057][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.768198][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.780821][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.800438][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.818784][ T6498] bridge0: port 3(vlan2) entered blocking state [ 136.840046][ T6498] bridge0: port 3(vlan2) entered disabled state [ 136.870170][ T6498] device vlan2 entered promiscuous mode [ 136.881249][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.300847][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.306913][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.336771][ T6297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.389309][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.412093][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.429392][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.437274][ T6519] device bridge_slave_0 left promiscuous mode [ 137.438974][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.508751][ T6519] device bridge_slave_1 left promiscuous mode [ 137.510671][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.565929][ T6519] bond0: (slave bond_slave_0): Releasing backup interface [ 137.646312][ T6519] bond0: (slave bond_slave_1): Releasing backup interface [ 137.752762][ T6519] team0: Port device team_slave_0 removed [ 137.822765][ T6519] team0: Port device team_slave_1 removed [ 137.825033][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.852796][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.881673][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.886955][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.903678][ T6536] netlink: del zone limit has 8 unknown bytes [ 137.942133][ T6519] bond1: (slave ip6gretap1): Removing an active aggregator [ 137.945991][ T6519] bond1: (slave ip6gretap1): Releasing backup interface [ 138.074714][ T6519] device vlan2 left promiscuous mode [ 138.076361][ T6519] bridge0: port 3(vlan2) entered disabled state [ 138.098988][ T6546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.864'. [ 138.164861][ T6521] device vlan0 entered promiscuous mode [ 138.192321][ T1961] Bluetooth: hci0: command 0x040f tx timeout [ 138.236502][ T6521] team0: Port device vlan0 added [ 138.296341][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.299486][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.304991][ T6546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.864'. [ 138.358886][ T6543] netlink: 60 bytes leftover after parsing attributes in process `syz.2.864'. [ 138.361703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.373196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.376692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.381425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.399577][ T6297] device veth0_vlan entered promiscuous mode [ 138.434091][ T6297] device veth1_vlan entered promiscuous mode [ 138.519431][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.529914][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.537797][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.553011][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.575462][ T6297] device veth0_macvtap entered promiscuous mode [ 138.592071][ T6297] device veth1_macvtap entered promiscuous mode [ 138.632763][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.655982][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.662020][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.671755][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.688295][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.699193][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.709274][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.731316][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.734657][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.737297][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.749768][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.760081][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.770076][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.777288][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.792504][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.800422][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.817757][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.833268][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.840876][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.845752][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.874830][ T6297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.877246][ T6297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.879507][ T6297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.881823][ T6297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.921298][ T6554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.866'. [ 139.064837][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 139.075675][ T4468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.077893][ T4468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.096864][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.166016][ T4468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.168228][ T4468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.172740][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.537847][ T4073] Bluetooth: hci0: command 0x0419 tx timeout [ 140.735125][ T6625] tipc: Started in network mode [ 140.739148][ T6625] tipc: Node identity 7, cluster identity 4711 [ 140.740752][ T6625] tipc: Node number set to 7 [ 140.864047][ T6632] device team0 entered promiscuous mode [ 140.865646][ T6632] device team_slave_0 entered promiscuous mode [ 140.867346][ T6632] device team_slave_1 entered promiscuous mode [ 140.892927][ T6633] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 140.909671][ T6632] device team0 left promiscuous mode [ 140.911313][ T6632] device team_slave_0 left promiscuous mode [ 140.962568][ T6632] device team_slave_1 left promiscuous mode [ 142.306272][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 142.381178][ T26] audit: type=1326 audit(142.336:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.904" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff930a7968 code=0x0 [ 142.600463][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'. [ 142.683446][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.910'. [ 142.685713][ T6687] tipc: Started in network mode [ 142.687027][ T6687] tipc: Node identity 7, cluster identity 5 [ 142.688646][ T6687] tipc: Node number set to 7 [ 145.493834][ T6748] netlink: 248 bytes leftover after parsing attributes in process `syz.0.931'. [ 145.617709][ T4028] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 146.209075][ T6771] loop5: detected capacity change from 0 to 256 [ 146.309164][ T6771] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 146.319445][ T6771] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 146.335968][ T6771] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 146.348437][ T6771] UDF-fs: Scanning with blocksize 512 failed [ 146.363942][ T6771] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 146.381439][ T6771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.539155][ T7] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 146.541858][ T7] Bluetooth: hci4: Injecting HCI hardware error event [ 146.545497][ T4028] Bluetooth: hci4: hardware error 0x00 [ 147.179069][ T6808] loop1: detected capacity change from 0 to 256 [ 147.236917][ T6808] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 147.248255][ T6808] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 147.279263][ T6808] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 147.281350][ T6808] UDF-fs: Scanning with blocksize 512 failed [ 147.306539][ T6808] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 147.321302][ T6808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.416315][ T6827] netlink: 40 bytes leftover after parsing attributes in process `syz.4.965'. [ 148.015325][ T6855] loop5: detected capacity change from 0 to 256 [ 148.033273][ T6855] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 148.054927][ T6855] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 148.066865][ T6855] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 148.072394][ T6855] UDF-fs: Scanning with blocksize 512 failed [ 148.082022][ T6855] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 148.095384][ T6855] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.182781][ T6863] netlink: 'syz.4.978': attribute type 4 has an invalid length. [ 148.187236][ T6863] netlink: 17 bytes leftover after parsing attributes in process `syz.4.978'. [ 148.244656][ T6865] binder: 6864:6865 tried to acquire reference to desc 0, got 1 instead [ 148.268610][ T6865] binder_alloc: 6864: pid 6864 spamming oneway? 1 buffers allocated for a total size of 4096 [ 148.281857][ T4077] binder: undelivered TRANSACTION_COMPLETE [ 148.347249][ T4077] binder: undelivered transaction 6, process died. [ 148.389389][ T6871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.979'. [ 148.440817][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.443574][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.026396][ T6893] fuse: Bad value for 'fd' [ 149.807266][ T6893] loop5: detected capacity change from 0 to 256 [ 149.866485][ T6893] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 149.875167][ T6893] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 149.903576][ T6893] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 149.905564][ T6893] UDF-fs: Scanning with blocksize 512 failed [ 149.909823][ T6893] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 149.922233][ T6893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.083537][ T6905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.993'. [ 150.107395][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.290785][ T6919] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 150.799360][ T6945] netlink: 'syz.2.1011': attribute type 10 has an invalid length. [ 150.875741][ T6945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.879440][ T6949] udc-core: couldn't find an available UDC or it's busy [ 150.884023][ T6945] team0: Port device bond0 added [ 150.922414][ T6949] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 150.958717][ T26] audit: type=1326 audit(150.916:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.1015" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff930a7968 code=0x0 [ 151.045305][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1016'. [ 151.143697][ T4038] Bluetooth: Unknown LE signaling command 0x0c [ 151.145661][ T4038] Bluetooth: Wrong link type (-22) [ 151.480650][ T6974] device bridge_slave_0 entered promiscuous mode [ 151.560856][ T6974] device bridge_slave_0 left promiscuous mode [ 151.922358][ T6982] udc-core: couldn't find an available UDC or it's busy [ 151.926148][ T6982] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 151.963143][ T6986] udc-core: couldn't find an available UDC or it's busy [ 151.968272][ T6986] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 152.182558][ T6986] udc-core: couldn't find an available UDC or it's busy [ 152.184503][ T6986] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 152.394862][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.466863][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.468970][ T7009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.509324][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.085301][ T7036] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1052'. [ 153.230822][ T4038] Bluetooth: hci1: link tx timeout [ 153.234018][ T4038] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.385069][ T7046] udc-core: couldn't find an available UDC or it's busy [ 153.412584][ T7046] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 153.450033][ T7048] udc-core: couldn't find an available UDC or it's busy [ 153.480679][ T7048] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 153.776532][ T7049] udc-core: couldn't find an available UDC or it's busy [ 153.778617][ T7049] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 153.875947][ T26] audit: type=1326 audit(153.836:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a4f0968 code=0x7ffc0000 [ 153.890958][ T26] audit: type=1326 audit(153.836:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a4f0968 code=0x7ffc0000 [ 153.917131][ T26] audit: type=1326 audit(153.846:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a4f0968 code=0x7ffc0000 [ 153.934781][ T26] audit: type=1326 audit(153.846:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a4f0968 code=0x7ffc0000 [ 153.965908][ T26] audit: type=1326 audit(153.846:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a4f0968 code=0x7ffc0000 [ 153.981972][ T26] audit: type=1326 audit(153.866:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=77 compat=0 ip=0xffff9a4f0968 code=0x7ffc0000 [ 154.003504][ T26] audit: type=1326 audit(153.866:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a4f0968 code=0x7ffc0000 [ 154.027101][ T26] audit: type=1326 audit(153.866:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a4f0968 code=0x7ffc0000 [ 154.287014][ T7068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1064'. [ 154.547727][ T7076] udc-core: couldn't find an available UDC or it's busy [ 154.549548][ T7076] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 155.688927][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1080'. [ 155.734539][ T7110] udc-core: couldn't find an available UDC or it's busy [ 155.768853][ T7110] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 155.802815][ T4071] Bluetooth: hci1: command 0x0406 tx timeout [ 157.827309][ T7159] loop1: detected capacity change from 0 to 256 [ 157.857899][ T7159] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 157.861473][ T7159] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 157.892954][ T7159] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 157.894852][ T7159] UDF-fs: Scanning with blocksize 512 failed [ 157.897571][ T7159] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 157.932542][ T7159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.381857][ T7217] loop1: detected capacity change from 0 to 256 [ 159.418954][ T7217] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 159.434413][ T7217] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 159.437990][ T7217] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 159.439810][ T7217] UDF-fs: Scanning with blocksize 512 failed [ 159.456983][ T7220] loop5: detected capacity change from 0 to 512 [ 159.459220][ T7218] loop4: detected capacity change from 0 to 2048 [ 159.461137][ T7217] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 159.479896][ T7217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.775132][ T7220] EXT4-fs (loop5): 1 orphan inode deleted [ 159.784517][ T7220] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.796866][ T7227] loop4: detected capacity change from 0 to 2048 [ 159.839515][ T7227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.186766][ T7239] Invalid ELF header len 8 [ 160.307685][ T7243] loop0: detected capacity change from 0 to 512 [ 160.377195][ T7243] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.454859][ T7243] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback. [ 160.592814][ T6297] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 160.989340][ T7261] loop0: detected capacity change from 0 to 256 [ 161.030145][ T7261] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 161.057885][ T7261] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 161.082113][ T7261] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 161.086268][ T7261] UDF-fs: Scanning with blocksize 512 failed [ 161.099305][ T7261] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 161.110598][ T7261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.161800][ T7271] loop1: detected capacity change from 0 to 8 [ 161.238347][ T7271] SQUASHFS error: Unable to read directory block [631:26] [ 161.373811][ T7277] loop4: detected capacity change from 0 to 1764 [ 161.458947][ T7279] loop0: detected capacity change from 0 to 1024 [ 161.477168][ T7279] EXT4-fs (loop0): inline encryption not supported [ 161.495686][ T7279] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=ordered,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 163.399996][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.404227][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.430030][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.433488][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.437671][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.441180][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.147316][ T7324] loop5: detected capacity change from 0 to 256 [ 164.226921][ T7324] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 164.957276][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1162'. [ 164.979732][ T7334] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.982102][ T7334] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.984536][ T7334] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.986540][ T7334] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.015630][ T7334] device vxlan0 entered promiscuous mode [ 165.018544][ T7336] udc-core: couldn't find an available UDC or it's busy [ 165.020224][ T7336] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 165.243707][ T7346] loop5: detected capacity change from 0 to 512 [ 165.253321][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 165.525320][ T7363] loop1: detected capacity change from 0 to 1024 [ 165.588818][ T7363] EXT4-fs (loop1): Ignoring removed bh option [ 165.600856][ T7363] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.671310][ T7363] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,auto_da_alloc=0x0000000000000003,grpquota,auto_da_alloc,data_err=abort,bh,dioread_nolock,. Quota mode: writeback. [ 165.943894][ T7387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.945841][ T7387] IPv6: NLM_F_CREATE should be set when creating new route [ 166.105605][ T7388] loop1: detected capacity change from 0 to 2048 [ 166.204112][ T7388] EXT4-fs (loop1): inline encryption not supported [ 166.252582][ T7388] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,delalloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 167.109583][ T7395] udc-core: couldn't find an available UDC or it's busy [ 167.127442][ T7395] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 167.529533][ T7399] loop5: detected capacity change from 0 to 256 [ 167.556400][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.566793][ T7399] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 167.570690][ T7399] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 167.582035][ T7399] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 167.589266][ T7399] UDF-fs: Scanning with blocksize 512 failed [ 167.592981][ T7399] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 167.597632][ T7399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.606710][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.188865][ T7387] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.191390][ T7387] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.196019][ T7387] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.198333][ T7387] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.417162][ T7406] loop0: detected capacity change from 0 to 128 [ 168.474057][ T7406] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,,errors=continue. Quota mode: none. [ 168.626963][ T7424] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 169.890075][ T4073] Bluetooth: hci2: command 0x0406 tx timeout [ 169.939640][ T4073] Bluetooth: hci3: command 0x0406 tx timeout [ 173.615498][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 173.988935][ T7479] fuse: Bad value for 'fd' [ 174.099153][ T7482] loop4: detected capacity change from 0 to 1024 [ 174.146669][ T7480] loop5: detected capacity change from 0 to 8192 [ 176.176229][ T7482] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 178.850947][ T7521] fuse: Bad value for 'fd' [ 178.947764][ T7524] udc-core: couldn't find an available UDC or it's busy [ 178.949748][ T7524] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 178.957829][ T7523] loop0: detected capacity change from 0 to 2048 [ 179.153106][ T7523] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.900592][ T7543] loop5: detected capacity change from 0 to 2048 [ 181.027769][ T7553] loop4: detected capacity change from 0 to 512 [ 181.091437][ T7555] loop0: detected capacity change from 0 to 8 [ 181.094676][ T7543] udc-core: couldn't find an available UDC or it's busy [ 181.116012][ T7543] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 181.184458][ T7553] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.1236: corrupted inode contents [ 181.303780][ T7559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.756806][ T7553] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #16: comm syz.4.1236: mark_inode_dirty error [ 181.968703][ T7553] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.1236: corrupted inode contents [ 182.011255][ T7553] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.1236: mark_inode_dirty error [ 182.015707][ T7553] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.1236: corrupted inode contents [ 182.019499][ T7553] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 182.048655][ T7553] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.1236: corrupted inode contents [ 182.091242][ T7553] EXT4-fs error (device loop4): ext4_truncate:4272: inode #16: comm syz.4.1236: mark_inode_dirty error [ 182.115242][ T7553] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 182.128101][ T7553] EXT4-fs (loop4): 1 truncate cleaned up [ 182.139240][ T7553] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.223502][ T7573] loop5: detected capacity change from 0 to 256 [ 183.454052][ T7573] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 183.457977][ T7573] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 183.472920][ T7573] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 183.482584][ T7573] UDF-fs: Scanning with blocksize 512 failed [ 183.861371][ T7573] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 184.279311][ T7573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.360207][ T7586] 9pnet: Insufficient options for proto=fd [ 184.389988][ T7588] loop0: detected capacity change from 0 to 8 [ 185.399206][ T7588] loop0: detected capacity change from 0 to 512 [ 185.432946][ T7588] EXT4-fs (loop0): Ignoring removed bh option [ 185.464020][ T7588] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 185.505342][ T7588] EXT4-fs (loop0): 1 truncate cleaned up [ 185.507046][ T7588] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 185.561272][ T7605] loop4: detected capacity change from 0 to 1024 [ 186.975362][ T7605] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.957010][ T7635] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1264'. [ 189.168927][ T7645] loop0: detected capacity change from 0 to 1024 [ 190.400155][ T7653] loop4: detected capacity change from 0 to 512 [ 190.488311][ T4070] Bluetooth: hci1: command 0x0406 tx timeout [ 190.506904][ T7655] loop5: detected capacity change from 0 to 256 [ 190.536350][ T7655] exfat: Deprecated parameter 'namecase' [ 190.537948][ T7655] exfat: Deprecated parameter 'namecase' [ 190.539436][ T7655] exfat: Bad value for 'namecase' [ 190.540842][ T7653] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 190.562395][ T7653] EXT4-fs (loop4): 1 truncate cleaned up [ 190.568537][ T7653] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.565571][ T7666] loop5: detected capacity change from 0 to 1024 [ 191.701467][ T7675] loop0: detected capacity change from 0 to 2048 [ 191.720143][ T7666] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 191.768979][ T7675] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 191.771067][ T7675] UDF-fs: Scanning with blocksize 512 failed [ 191.955241][ T7675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.697870][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.699576][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.781359][ T7686] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1280'. [ 192.813871][ T7688] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1282'. [ 192.900599][ T7692] udc-core: couldn't find an available UDC or it's busy [ 192.902605][ T7692] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 193.099202][ T7696] udc-core: couldn't find an available UDC or it's busy [ 193.107663][ T7696] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 194.443818][ T4585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.486410][ T7717] loop4: detected capacity change from 0 to 256 [ 194.522396][ T7721] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1295'. [ 194.529036][ T7717] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 194.540338][ T7717] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 194.550356][ T7717] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 194.559317][ T7717] UDF-fs: Scanning with blocksize 512 failed [ 194.569767][ T7717] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 194.575786][ T4585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.584300][ T7717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.794498][ T7724] udc-core: couldn't find an available UDC or it's busy [ 194.796415][ T7724] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 194.807376][ T4585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.688484][ T7709] chnl_net:caif_netlink_parms(): no params data found [ 195.766692][ T4585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.850325][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.855097][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.857812][ T7709] device bridge_slave_0 entered promiscuous mode [ 195.880758][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.884533][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.894478][ T7709] device bridge_slave_1 entered promiscuous mode [ 196.043368][ T7709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.073493][ T7709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.910114][ T4070] Bluetooth: hci0: command 0x0409 tx timeout [ 196.929481][ T7709] team0: Port device team_slave_0 added [ 196.937402][ T7709] team0: Port device team_slave_1 added [ 197.140085][ T7709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.141896][ T7709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.191044][ T7709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.200014][ T7709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.201884][ T7709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.221495][ T7709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.372822][ T7772] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1307'. [ 197.425295][ T7771] loop4: detected capacity change from 0 to 1024 [ 198.404366][ T7709] device hsr_slave_0 entered promiscuous mode [ 198.435600][ T7709] device hsr_slave_1 entered promiscuous mode [ 198.489495][ T7709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.491540][ T7709] Cannot create hsr debugfs directory [ 198.804891][ T7805] 9pnet: Insufficient options for proto=fd [ 198.829527][ T7808] binder: 7807:7808 BC_INCREFS_DONE node 7 has no pending increfs request [ 198.855372][ T7803] udc-core: couldn't find an available UDC or it's busy [ 198.857263][ T7803] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 198.912610][ T4071] Bluetooth: hci0: command 0x041b tx timeout [ 199.004592][ T7709] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 199.063161][ T7821] loop5: detected capacity change from 0 to 256 [ 199.077660][ T7709] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 199.116708][ T7709] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 199.134091][ T7821] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 199.142824][ T7821] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 199.145457][ T7821] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 199.147495][ T7821] UDF-fs: Scanning with blocksize 512 failed [ 199.166586][ T7823] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1320'. [ 199.169254][ T7709] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 199.179375][ T7821] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 199.185023][ T7821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.503749][ T7709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.580761][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.583391][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.606690][ T7709] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.672460][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.675228][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.677788][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.679642][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.681950][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.713578][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.721704][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.723774][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.756597][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.759542][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.763818][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.840472][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.846677][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.864047][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.872044][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.889676][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.913776][ T7709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.920182][ T7709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.934672][ T7860] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1333'. [ 199.937168][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.940136][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.944041][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.952069][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.021280][ T4585] device hsr_slave_0 left promiscuous mode [ 200.081676][ T4585] device hsr_slave_1 left promiscuous mode [ 200.162900][ T4585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.165356][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.169199][ T4585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.173617][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.181302][ T4585] device bridge_slave_1 left promiscuous mode [ 200.189220][ T4585] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.228136][ T4585] device bridge_slave_0 left promiscuous mode [ 200.229831][ T4585] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.422756][ T4585] device veth1_macvtap left promiscuous mode [ 200.424866][ T4585] device veth0_macvtap left promiscuous mode [ 200.426782][ T4585] device veth1_vlan left promiscuous mode [ 200.428606][ T4585] device veth0_vlan left promiscuous mode [ 200.986645][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 201.002215][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 201.067124][ T7899] loop4: detected capacity change from 0 to 2048 [ 201.078997][ T7899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.340669][ T4585] team0 (unregistering): Port device team_slave_1 removed [ 201.358374][ T4585] team0 (unregistering): Port device team_slave_0 removed [ 201.368131][ T4585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.161852][ T4585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.331226][ T4585] bond0 (unregistering): Released all slaves [ 202.514452][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.521732][ T7896] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1345'. [ 202.536996][ T7909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.539072][ T7909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.587613][ T7909] bond0: (slave bond_slave_0): Releasing backup interface [ 202.596503][ T7912] loop4: detected capacity change from 0 to 256 [ 202.656628][ T7909] bond0: (slave bond_slave_1): Releasing backup interface [ 202.710348][ T7912] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 202.780430][ T7909] team0: Port device team_slave_0 removed [ 202.799963][ T7912] xt_CT: No such helper "pptp" [ 202.821452][ T7909] team0: Port device team_slave_1 removed [ 202.827933][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.830093][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.842044][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.846346][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.869923][ T7911] device vlan0 entered promiscuous mode [ 202.940529][ T7911] team0: Port device vlan0 added [ 203.072859][ T4102] Bluetooth: hci0: command 0x0419 tx timeout [ 203.101758][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.104138][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.124334][ T7709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.337181][ T7939] udc-core: couldn't find an available UDC or it's busy [ 203.347664][ T7939] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 203.593595][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.596447][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.660012][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.663350][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.667994][ T7709] device veth0_vlan entered promiscuous mode [ 203.680365][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.686117][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.707240][ T7709] device veth1_vlan entered promiscuous mode [ 203.735675][ T7958] fuse: Bad value for 'fd' [ 203.755845][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 203.758329][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 203.767604][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.771835][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.801277][ T7709] device veth0_macvtap entered promiscuous mode [ 203.821923][ T7709] device veth1_macvtap entered promiscuous mode [ 203.864167][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.866972][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.881535][ T7709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.892293][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.895123][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.899104][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.920013][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.985472][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.988199][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.994754][ T7709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.000189][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.011683][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.043818][ T7709] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.053319][ T7709] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.077431][ T7709] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.092669][ T7709] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.264981][ T7758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.267402][ T7758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.274747][ T7758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.327587][ T7758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.329856][ T7758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.337026][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.547550][ T7981] udc-core: couldn't find an available UDC or it's busy [ 204.549321][ T7981] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 205.273935][ T8002] loop6: detected capacity change from 0 to 256 [ 205.386229][ T8002] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 205.389718][ T8002] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 205.415610][ T8002] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 205.417436][ T8002] UDF-fs: Scanning with blocksize 512 failed [ 205.428832][ T8002] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 205.440077][ T8002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.941889][ T8030] loop6: detected capacity change from 0 to 2048 [ 206.052585][ T8030] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.512001][ T8055] loop6: detected capacity change from 0 to 256 [ 207.853164][ T8063] fuse: Bad value for 'fd' [ 207.991030][ T8073] loop6: detected capacity change from 0 to 512 [ 208.029852][ T8073] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 208.143581][ T8073] EXT4-fs (loop6): 1 truncate cleaned up [ 208.145162][ T8073] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.270255][ T8073] EXT4-fs warning (device loop6): verify_group_input:147: Cannot add at group 31 (only 1 groups) [ 208.365806][ T8089] devtmpfs: Too few inodes for current use [ 208.557015][ T8099] fuse: Bad value for 'fd' [ 210.156680][ T8148] udc-core: couldn't find an available UDC or it's busy [ 210.163340][ T8148] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 210.871316][ T8173] loop5: detected capacity change from 0 to 512 [ 210.930786][ T8173] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 210.973222][ T8173] EXT4-fs (loop5): 1 truncate cleaned up [ 210.974821][ T8173] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.025097][ T8173] EXT4-fs warning (device loop5): verify_group_input:147: Cannot add at group 31 (only 1 groups) [ 211.440598][ T8185] loop5: detected capacity change from 0 to 2048 [ 211.679613][ T8185] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.774198][ T8185] fs-verity: sha256 using implementation "sha256-ce" [ 211.843732][ T8197] fs-verity: sha512 using implementation "sha512-arm64" [ 212.054361][ T8209] loop4: detected capacity change from 0 to 164 [ 212.104349][ T8211] loop5: detected capacity change from 0 to 256 [ 212.279119][ T8217] udc-core: couldn't find an available UDC or it's busy [ 212.281285][ T8217] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 212.287568][ T8211] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 212.336418][ T8220] udc-core: couldn't find an available UDC or it's busy [ 212.338254][ T8220] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 214.386396][ T8244] loop4: detected capacity change from 0 to 256 [ 214.465981][ T8244] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 214.805816][ T8258] loop5: detected capacity change from 0 to 2048 [ 214.925123][ T8258] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.493419][ T8267] loop4: detected capacity change from 0 to 512 [ 215.598094][ T8267] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 215.813685][ T8267] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 215.819932][ T8267] Quota error (device loop4): write_blk: dquota write failed [ 215.824629][ T8267] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 215.827068][ T8267] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.1453: Failed to acquire dquot type 1 [ 216.245577][ T8285] fuse: Bad value for 'fd' [ 216.382555][ T8286] loop5: detected capacity change from 0 to 1024 [ 221.334466][ T8381] loop6: detected capacity change from 0 to 1024 [ 221.395113][ T8385] loop4: detected capacity change from 0 to 128 [ 221.469328][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'. [ 221.496628][ T8388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.530359][ T4272] hfsplus: b-tree write err: -5, ino 8 [ 221.671929][ T8393] loop4: detected capacity change from 0 to 512 [ 221.826859][ T8398] loop6: detected capacity change from 0 to 512 [ 221.846025][ T8393] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 221.863960][ T8398] EXT4-fs (loop6): Unrecognized mount option "fowner>00000000000000060929" or missing value [ 224.064097][ T8414] loop6: detected capacity change from 0 to 8192 [ 224.136744][ T8414] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿ" or missing value [ 225.321641][ T8456] loop5: detected capacity change from 0 to 256 [ 225.356290][ T8456] exfat: Deprecated parameter 'utf8' [ 225.357701][ T8456] exfat: Deprecated parameter 'namecase' [ 225.359131][ T8456] exfat: Deprecated parameter 'utf8' [ 225.416138][ T8456] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 225.440148][ T8456] attempt to access beyond end of device [ 225.440148][ T8456] loop5: rw=0, want=34359738489, limit=256 [ 225.798558][ T8476] device batadv_slave_0 entered promiscuous mode [ 226.869068][ T8494] loop5: detected capacity change from 0 to 256 [ 227.088102][ T8501] loop4: detected capacity change from 0 to 128 [ 227.157849][ T8501] EXT4-fs (loop4): Test dummy encryption mode enabled [ 227.204696][ T8501] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 228.095635][ T8520] fuse: Bad value for 'fd' [ 228.241281][ T8530] loop4: detected capacity change from 0 to 1024 [ 228.510910][ T8530] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 228.517201][ T8530] EXT4-fs (loop4): orphan cleanup on readonly fs [ 228.539539][ T8530] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 228.843145][ T8530] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 229.303906][ T8530] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.1535: Freeing blocks not in datazone - block = 0, count = 4096 [ 229.342299][ T8530] EXT4-fs (loop4): Remounting filesystem read-only [ 229.344093][ T8530] EXT4-fs (loop4): 1 orphan inode deleted [ 229.345625][ T8530] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000003139,stripe=0x0000000000000008,errors=remount-ro,init_itable=0x0000000000000679,. Quota mode: writeback. [ 230.663695][ T8584] loop4: detected capacity change from 0 to 256 [ 230.705067][ T8584] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 230.719028][ T8584] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 230.724440][ T8584] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 230.736811][ T8584] UDF-fs: Scanning with blocksize 512 failed [ 230.744102][ T8584] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 230.759073][ T8584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.870855][ T8594] udc-core: couldn't find an available UDC or it's busy [ 230.881376][ T8594] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.119235][ T8626] fuse: Bad value for 'fd' [ 232.978589][ T8635] udc-core: couldn't find an available UDC or it's busy [ 232.980401][ T8635] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 233.053987][ T8638] udc-core: couldn't find an available UDC or it's busy [ 233.055769][ T8638] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 233.536941][ T8668] mmap: syz.1.1572 (8668) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 233.749085][ T8674] loop6: detected capacity change from 0 to 2048 [ 233.996466][ T8674] EXT4-fs (loop6): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 239.841011][ T8802] loop5: detected capacity change from 0 to 512 [ 239.983883][ T8802] EXT4-fs (loop5): Mount option "delalloc" incompatible with ext3 [ 240.033373][ T8809] mmap: syz.1.1615 (8809): VmData 49250304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 240.180160][ T8813] device wireguard0 entered promiscuous mode [ 240.340952][ T8818] loop5: detected capacity change from 0 to 512 [ 240.450353][ T8823] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1617'. [ 241.146061][ T8818] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 242.495750][ T8825] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 245.188023][ T8871] xt_bpf: check failed: parse error [ 247.393336][ T8885] loop5: detected capacity change from 0 to 2048 [ 247.480082][ T26] audit: type=1326 audit(247.436:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8886 comm="syz.4.1641" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff89f23968 code=0x0 [ 247.490638][ T8885] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,. Quota mode: none. [ 247.567002][ T8900] loop4: detected capacity change from 0 to 512 [ 247.652055][ T8900] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #17: comm syz.4.1644: iget: bogus i_mode (0) [ 247.655696][ T8900] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1644: couldn't read orphan inode 17 (err -117) [ 247.732333][ T8900] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.837302][ T8906] loop5: detected capacity change from 0 to 1024 [ 248.829699][ T8919] loop4: detected capacity change from 0 to 256 [ 248.874506][ T8924] fuse: Bad value for 'fd' [ 249.048692][ T8937] loop5: detected capacity change from 0 to 256 [ 249.177689][ T8941] loop4: detected capacity change from 0 to 512 [ 249.240760][ T8941] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.1661: corrupted in-inode xattr [ 249.247027][ T8941] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1661: couldn't read orphan inode 15 (err -117) [ 249.276899][ T8941] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000400000,dioread_lock,,errors=continue. Quota mode: writeback. [ 249.489305][ T8950] loop5: detected capacity change from 0 to 1024 [ 250.342316][ T8950] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.496586][ T8962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.537143][ T8965] 9pnet: Insufficient options for proto=fd [ 251.552326][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.946272][ T8987] loop5: detected capacity change from 0 to 1024 [ 252.181934][ T8993] udc-core: couldn't find an available UDC or it's busy [ 252.186397][ T8993] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 252.392094][ T8993] udc-core: couldn't find an available UDC or it's busy [ 252.395996][ T8993] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 252.432268][ T4072] Bluetooth: hci0: command 0x1407 tx timeout [ 253.152259][ T344] wlan1: Trigger new scan to find an IBSS to join [ 254.876662][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.878436][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.072454][ T4585] wlan1: Trigger new scan to find an IBSS to join [ 255.302103][ T9056] loop5: detected capacity change from 0 to 128 [ 255.315243][ T9056] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 256.051787][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 256.104973][ T9056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.207198][ T9026] chnl_net:caif_netlink_parms(): no params data found [ 256.384804][ T9026] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.389972][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.402676][ T9026] device bridge_slave_0 entered promiscuous mode [ 256.411822][ T9026] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.430779][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.441802][ T9026] device bridge_slave_1 entered promiscuous mode [ 256.530521][ T9026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.535466][ T9026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.611740][ T9026] team0: Port device team_slave_0 added [ 256.640639][ T9026] team0: Port device team_slave_1 added [ 256.700577][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.725967][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.754065][ T9026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.806450][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.808467][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.030006][ T9026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.555552][ T9026] device hsr_slave_0 entered promiscuous mode [ 257.612687][ T9026] device hsr_slave_1 entered promiscuous mode [ 257.660178][ T9026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.662335][ T9026] Cannot create hsr debugfs directory [ 257.848517][ T9092] netlink: 'syz.1.1716': attribute type 16 has an invalid length. [ 257.850666][ T9092] netlink: 'syz.1.1716': attribute type 17 has an invalid length. [ 257.913190][ T9092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.967607][ T9026] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 258.015717][ T9026] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 258.034682][ T9026] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 258.112471][ T4205] wlan1: Trigger new scan to find an IBSS to join [ 258.210520][ T4073] Bluetooth: hci5: command 0x041b tx timeout [ 258.226317][ T9026] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 259.055246][ T136] wlan1: Creating new IBSS network, BSSID 96:5c:38:94:2d:27 [ 259.057491][ T9026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.066302][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.068876][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.075896][ T4585] wlan1: Trigger new scan to find an IBSS to join [ 259.092208][ T9026] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.126926][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.137077][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.141842][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.143839][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.344870][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.363331][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.374053][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.383629][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.385552][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.387813][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.632263][ T4071] Bluetooth: hci0: command 0x0401 tx timeout [ 259.913948][ T9026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.921041][ T9026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.960139][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.963250][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.687814][ T4072] Bluetooth: hci5: command 0x040f tx timeout [ 260.767669][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.785076][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.808848][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.814045][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.821581][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.837558][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.850841][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.873966][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.895191][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1735'. [ 260.908090][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.942909][ T344] wlan1: Creating new IBSS network, BSSID 96:16:b6:8b:46:75 [ 261.155406][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.157583][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.186584][ T9026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.752358][ T4102] Bluetooth: hci5: command 0x0419 tx timeout [ 262.919517][ T9181] loop5: detected capacity change from 0 to 512 [ 262.939629][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.946824][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.011748][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.016069][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.025591][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.028795][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.039976][ T9026] device veth0_vlan entered promiscuous mode [ 263.057885][ T9026] device veth1_vlan entered promiscuous mode [ 263.069459][ T9192] loop4: detected capacity change from 0 to 512 [ 263.071926][ T9181] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 263.081600][ T9188] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1748'. [ 263.114772][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.117462][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.151442][ T9192] EXT4-fs (loop4): 1 orphan inode deleted [ 263.153334][ T9192] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 263.184002][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.186943][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.192067][ T9026] device veth0_macvtap entered promiscuous mode [ 263.198255][ T9192] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.1749: deleted inode referenced: 16 [ 263.198549][ T9026] device veth1_macvtap entered promiscuous mode [ 263.213896][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.217278][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.219873][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.224379][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.229050][ T9026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.235494][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.238425][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.240943][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.243952][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.247872][ T9026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.250206][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.253359][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.255926][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.258643][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.261423][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.323259][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.366964][ T9026] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.369432][ T9026] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.371859][ T9026] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.427037][ T9026] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.513117][ T9207] udc-core: couldn't find an available UDC or it's busy [ 263.545053][ T9207] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 263.584804][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.587178][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.592547][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.621006][ T9209] loop4: detected capacity change from 0 to 512 [ 263.665098][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.667674][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.677678][ T7758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 263.725818][ T9209] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 263.902475][ T9213] loop7: detected capacity change from 0 to 512 [ 263.970110][ T9213] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 264.165008][ T9220] loop4: detected capacity change from 0 to 1024 [ 264.586549][ T9233] loop5: detected capacity change from 0 to 1024 [ 264.764059][ T9242] udc-core: couldn't find an available UDC or it's busy [ 264.775896][ T9242] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 266.502133][ T9288] loop5: detected capacity change from 0 to 1024 [ 266.836794][ T9288] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,noauto_da_alloc,debug_want_extra_isize=0x000000000000007c,nouid32,noinit_itable,grpquota,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 268.101905][ T9326] loop4: detected capacity change from 0 to 1024 [ 268.804599][ T9329] loop7: detected capacity change from 0 to 764 [ 268.853462][ T9326] EXT4-fs (loop4): Test dummy encryption mode enabled [ 268.855191][ T9326] EXT4-fs (loop4): inline encryption not supported [ 268.864616][ T9331] futex_wake_op: syz.5.1803 tries to shift op by -1; fix this program [ 268.964491][ T9331] loop5: detected capacity change from 0 to 256 [ 268.970868][ T9326] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 270.217243][ T9349] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1807'. [ 270.291376][ T9355] device batadv_slave_0 entered promiscuous mode [ 270.310557][ T9356] udc-core: couldn't find an available UDC or it's busy [ 270.339475][ T9356] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 270.358401][ T9355] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 270.495997][ T9364] loop5: detected capacity change from 0 to 256 [ 271.534560][ T9376] loop7: detected capacity change from 0 to 1024 [ 271.702504][ T9376] EXT4-fs (loop7): Ignoring removed oldalloc option [ 271.783078][ T9376] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000009,norecovery,debug_want_extra_isize=0x0000000000000080,oldalloc,nodelalloc,usrquota,auto_da_alloc=0x0000000000000056,,errors=continue. Quota mode: writeback. [ 272.983706][ T9402] loop7: detected capacity change from 0 to 16 [ 273.534153][ T9402] erofs: (device loop7): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 273.827976][ T9409] loop7: detected capacity change from 0 to 512 [ 274.013226][ T9409] EXT4-fs (loop7): mounted filesystem without journal. Opts: data_err=abort,inode_readahead_blks=0x0000000000000002,minixdf,,errors=continue. Quota mode: writeback. [ 274.232535][ T9417] loop7: detected capacity change from 0 to 512 [ 274.331833][ T9417] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 274.489583][ T9429] binder: BINDER_SET_CONTEXT_MGR already set [ 274.491703][ T9429] binder: 9428:9429 ioctl 4018620d 20000040 returned -16 [ 274.522363][ T9429] binder: tried to use weak ref as strong ref [ 274.524910][ T9429] binder: 9428:9429 Acquire 1 refcount change on invalid ref 0 ret -22 [ 274.535591][ T9429] binder: 9428:9429 got transaction to invalid handle, 1 [ 274.537651][ T9429] binder: 9428:9429 transaction failed 29201/-22, size 112-24 line 2917 [ 274.580518][ T4070] binder: undelivered TRANSACTION_ERROR: 29201 [ 274.617195][ T9434] loop4: detected capacity change from 0 to 8 [ 274.645945][ T9434] SQUASHFS error: zlib decompression failed, data probably corrupt [ 274.680288][ T9434] SQUASHFS error: Failed to read block 0x9b: -5 [ 274.694119][ T9434] SQUASHFS error: Unable to read metadata cache entry [99] [ 274.696093][ T9434] SQUASHFS error: Unable to read inode 0x127 [ 274.803131][ T9434] loop4: detected capacity change from 0 to 128 [ 274.895695][ T9434] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 274.905196][ T9434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.353371][ T26] audit: type=1400 audit(275.266:103): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9431 comm="syz.4.1839" [ 276.116030][ T9452] udc-core: couldn't find an available UDC or it's busy [ 276.117966][ T9452] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 277.109620][ T9464] loop7: detected capacity change from 0 to 512 [ 277.146343][ T9464] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 277.200377][ T9464] EXT4-fs (loop7): 1 truncate cleaned up [ 277.201937][ T9464] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.395304][ T9506] loop5: detected capacity change from 0 to 512 [ 278.395992][ T9504] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1864'. [ 278.399478][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1864'. [ 278.402068][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1864'. [ 278.424908][ T9501] loop4: detected capacity change from 0 to 1024 [ 278.461981][ T9506] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 278.527304][ T9506] EXT4-fs (loop5): 1 truncate cleaned up [ 278.528901][ T9506] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.546540][ T9506] EXT4-fs (loop5): Online resizing not supported with sparse_super2 [ 278.548010][ T4585] hfsplus: b-tree write err: -5, ino 4 [ 278.734150][ T9523] syz.4.1876 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 278.783537][ T9523] loop4: detected capacity change from 0 to 16 [ 278.826042][ T9523] erofs: (device loop4): mounted with root inode @ nid 36. [ 281.055606][ T7758] wlan1: Trigger new scan to find an IBSS to join [ 281.137143][ T9576] loop4: detected capacity change from 0 to 256 [ 281.182877][ T9576] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 281.217387][ T9583] udc-core: couldn't find an available UDC or it's busy [ 281.232649][ T9583] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 281.457365][ T9595] loop5: detected capacity change from 0 to 512 [ 281.502472][ T9595] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #2: comm syz.5.1904: corrupted xattr block 255 [ 281.509705][ T9595] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 281.512119][ T9595] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 281.521203][ T9595] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #2: comm syz.5.1904: corrupted xattr block 255 [ 281.685167][ T26] audit: type=1326 audit(281.646:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.5.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 281.694297][ T26] audit: type=1326 audit(281.646:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.5.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 281.708110][ T26] audit: type=1326 audit(281.656:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.5.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 281.714547][ T26] audit: type=1326 audit(281.656:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.5.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 281.720490][ T26] audit: type=1326 audit(281.656:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.5.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 281.726337][ T26] audit: type=1326 audit(281.656:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.5.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff82d87490 code=0x7ffc0000 [ 281.732135][ T26] audit: type=1326 audit(281.656:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.5.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 281.738807][ T26] audit: type=1326 audit(281.656:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.5.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 281.744932][ T26] audit: type=1326 audit(281.656:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.5.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 281.750906][ T26] audit: type=1326 audit(281.656:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.5.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=113 compat=0 ip=0xffff82d87968 code=0x7ffc0000 [ 282.892058][ T9622] udc-core: couldn't find an available UDC or it's busy [ 282.894224][ T9622] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 282.929108][ T9622] loop7: detected capacity change from 0 to 256 [ 284.112336][ T9446] wlan1: Trigger new scan to find an IBSS to join [ 285.150169][ T9665] udc-core: couldn't find an available UDC or it's busy [ 285.152143][ T9665] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 285.390945][ T9684] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1941'. [ 285.404157][ T9] wlan1: Creating new IBSS network, BSSID e2:9d:b4:9f:30:4b [ 285.723817][ T9711] loop7: detected capacity change from 0 to 256 [ 285.753007][ T9711] exfat: Deprecated parameter 'namecase' [ 285.754535][ T9711] exfat: Unknown parameter 'sys_tz' [ 285.837179][ T9719] loop5: detected capacity change from 0 to 2048 [ 285.876608][ T9724] input: syz0 as /devices/virtual/input/input6 [ 285.909252][ T9719] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 285.921373][ T9719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.982980][ T9730] udc-core: couldn't find an available UDC or it's busy [ 285.984853][ T9730] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 286.139836][ T9739] loop5: detected capacity change from 0 to 512 [ 286.248889][ T9739] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 286.251885][ T9739] EXT4-fs (loop5): orphan cleanup on readonly fs [ 286.261460][ T9739] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 286.288644][ T9739] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 286.301684][ T9739] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1965: bg 0: block 40: padding at end of block bitmap is not set [ 286.315884][ T9739] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 286.324897][ T9739] EXT4-fs (loop5): 1 truncate cleaned up [ 286.326570][ T9739] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,quota,nodiscard,,errors=continue. Quota mode: writeback. [ 287.692870][ T9766] udc-core: couldn't find an available UDC or it's busy [ 287.722374][ T9766] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 287.948897][ T9776] binder: 9775:9776 tried to acquire reference to desc 0, got 1 instead [ 287.976168][ T9776] binder: 9775:9776 transaction failed 29201/-22, size 0-31 line 3059 [ 287.978934][ T1961] binder: undelivered TRANSACTION_ERROR: 29201 [ 288.079925][ T9786] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1985'. [ 288.089137][ T9785] loop5: detected capacity change from 0 to 2048 [ 288.116172][ T9788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.387351][ T9793] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.400358][ T9785] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.152947][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.335494][ T4585] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 289.341556][ T9801] loop4: detected capacity change from 0 to 16 [ 289.409602][ T9801] erofs: (device loop4): mounted with root inode @ nid 36. [ 289.413311][ T9805] loop7: detected capacity change from 0 to 256 [ 289.454790][ T9805] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xd68b4c4a, utbl_chksum : 0xe619d30d) [ 290.895405][ T9835] udc-core: couldn't find an available UDC or it's busy [ 291.048977][ T148] tipc: Left network mode [ 291.286461][ T9835] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 292.779061][ T9863] loop5: detected capacity change from 0 to 8 [ 292.796371][ T9867] loop7: detected capacity change from 0 to 256 [ 292.871878][ T9867] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 292.906533][ T9863] SQUASHFS error: zlib decompression failed, data probably corrupt [ 292.908987][ T9863] SQUASHFS error: Failed to read block 0x4de: -5 [ 292.911232][ T9863] SQUASHFS error: Failed to read block 0x4e2: -5 [ 292.912313][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 292.969007][ T9863] SQUASHFS error: Failed to read block 0x9ca: -5 [ 292.970877][ T9863] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 292.972947][ T9863] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 292.974847][ T9863] SQUASHFS error: Failed to read block 0x535f2: -5 [ 292.988853][ T9836] chnl_net:caif_netlink_parms(): no params data found [ 293.253481][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.255474][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.261850][ T9836] device bridge_slave_0 entered promiscuous mode [ 293.271304][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.273932][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.284182][ T9836] device bridge_slave_1 entered promiscuous mode [ 293.400469][ T9836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.413808][ T9836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.473784][ T9836] team0: Port device team_slave_0 added [ 293.481072][ T9836] team0: Port device team_slave_1 added [ 293.552593][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.559017][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.589097][ T9836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.612683][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.621715][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.647358][ T9836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.515221][ T9836] device hsr_slave_0 entered promiscuous mode [ 294.620369][ T9836] device hsr_slave_1 entered promiscuous mode [ 294.672700][ T9836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.674915][ T9836] Cannot create hsr debugfs directory [ 295.062852][ T4073] Bluetooth: hci4: command 0x041b tx timeout [ 296.359605][ T9952] loop5: detected capacity change from 0 to 256 [ 296.661369][ T9952] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x3eebdab2, utbl_chksum : 0xe619d30d) [ 296.818321][ T148] device hsr_slave_0 left promiscuous mode [ 296.853524][ T148] device hsr_slave_1 left promiscuous mode [ 296.912740][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.915321][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.917756][ T148] device bridge_slave_1 left promiscuous mode [ 296.919543][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.953672][ T148] device bridge_slave_0 left promiscuous mode [ 296.955400][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.078507][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 297.379657][ T148] team0 (unregistering): Port device team_slave_1 removed [ 297.427801][ T148] team0 (unregistering): Port device team_slave_0 removed [ 297.459967][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.506838][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.610937][ T148] bond0 (unregistering): (slave team0): Releasing backup interface [ 297.720029][ T148] bond0 (unregistering): Released all slaves [ 297.873778][ T9836] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 297.914365][ T9836] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 297.960894][ T9836] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 298.024809][ T9836] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 298.269089][ T9836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.292949][T10028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.294910][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.298241][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.333758][ T9836] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.344567][T10034] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.354113][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.358291][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.363367][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.365370][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.386028][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.393488][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.397415][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.404080][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.405995][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.422630][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.428004][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.430958][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.456157][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.480465][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.487815][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.495176][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.505091][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.520712][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.527040][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.534973][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.543322][ T9836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.780297][ T9446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.782639][ T9446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.798674][ T9836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.108778][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 299.111559][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.153357][ T4073] Bluetooth: hci4: command 0x0419 tx timeout [ 299.165902][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.168717][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.176479][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.179987][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.197508][ T9836] device veth0_vlan entered promiscuous mode [ 299.223187][ T9836] device veth1_vlan entered promiscuous mode [ 299.873518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 299.999887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 300.084686][ T4073] Bluetooth: hci2: command 0x2016 tx timeout [ 300.129769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 300.133389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.143150][ T4038] Bluetooth: Unexpected continuation frame (len 16) [ 300.154811][ T9836] device veth0_macvtap entered promiscuous mode [ 300.171317][T10097] loop7: detected capacity change from 0 to 256 [ 300.200053][ T9836] device veth1_macvtap entered promiscuous mode [ 300.226730][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.229581][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.232681][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.242326][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.244998][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.248630][T10097] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 300.255050][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.259287][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.270834][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 300.282926][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.286620][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 300.289560][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.375151][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.378053][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.383026][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.396090][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.406698][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.432737][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.451678][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.486691][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.492629][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.522006][ T9836] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.533495][ T9836] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.535781][ T9836] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.538113][ T9836] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.774120][ T9446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.776546][ T9446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.811453][T10122] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2093'. [ 300.828232][T10120] loop5: detected capacity change from 0 to 128 [ 300.847141][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 300.859425][ T9446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.861680][ T9446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.867523][ T9446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 301.081758][T10137] loop8: detected capacity change from 0 to 512 [ 301.180068][T10137] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:163: inode #12: comm syz.8.2011: inline data xattr refers to an external xattr inode [ 301.187835][T10137] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.2011: couldn't read orphan inode 12 (err -117) [ 301.201813][T10137] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,nouid32,min_batch_time=0x000000007fffffff,lazytime,prjquota,sysvgroups,lazytime,errors=continue,nogrpid,data_err=abort,,errors=continue. Quota mode: writeback. [ 301.259554][T10148] loop7: detected capacity change from 0 to 1024 [ 301.587097][T10167] udc-core: couldn't find an available UDC or it's busy [ 301.588955][T10167] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 301.595300][T10168] loop5: detected capacity change from 0 to 128 [ 302.467495][T10198] loop7: detected capacity change from 0 to 128 [ 302.687407][T10208] loop8: detected capacity change from 0 to 256 [ 302.775941][T10208] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 302.978497][T10223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2122'. [ 302.981492][T10223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2122'. [ 303.012924][T10220] capability: warning: `syz.2.2121' uses 32-bit capabilities (legacy support in use) [ 303.195894][T10226] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 303.210145][T10229] loop8: detected capacity change from 0 to 256 [ 303.342052][T10235] netlink: 'syz.1.2127': attribute type 4 has an invalid length. [ 303.396276][T10229] loop8: detected capacity change from 0 to 128 [ 303.403305][T10238] netlink: 'syz.1.2127': attribute type 4 has an invalid length. [ 304.198815][ T4038] [ 304.199432][ T4038] ===================================== [ 304.200845][ T4038] WARNING: bad unlock balance detected! [ 304.202351][ T4038] 5.15.177-syzkaller #0 Not tainted [ 304.203742][ T4038] ------------------------------------- [ 304.205216][ T4038] kworker/u5:6/4038 is trying to release lock (&chan->lock) at: [ 304.207288][ T4038] [] l2cap_recv_frame+0xf60/0x6c28 [ 304.209076][ T4038] but there are no more locks to release! [ 304.210557][ T4038] [ 304.210557][ T4038] other info that might help us debug this: [ 304.212667][ T4038] 2 locks held by kworker/u5:6/4038: [ 304.214095][ T4038] #0: ffff0000dc7d7138 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 304.216860][ T4038] #1: ffff80001fb97c00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 304.218633][T10275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2136'. [ 304.219951][ T4038] [ 304.219951][ T4038] stack backtrace: [ 304.219959][ T4038] CPU: 0 PID: 4038 Comm: kworker/u5:6 Not tainted 5.15.177-syzkaller #0 [ 304.225936][ T4038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 304.228688][ T4038] Workqueue: hci4 hci_rx_work [ 304.229906][ T4038] Call trace: [ 304.230749][ T4038] dump_backtrace+0x0/0x530 [ 304.231990][ T4038] show_stack+0x2c/0x3c [ 304.233043][ T4038] dump_stack_lvl+0x108/0x170 [ 304.234309][ T4038] dump_stack+0x1c/0x58 [ 304.235463][ T4038] print_unlock_imbalance_bug+0x250/0x2a4 [ 304.236971][ T4038] lock_release+0x4b8/0xa1c [ 304.238240][ T4038] __mutex_unlock_slowpath+0xe0/0x6d4 [ 304.239646][ T4038] mutex_unlock+0x8c/0xe0 [ 304.240784][ T4038] l2cap_recv_frame+0xf60/0x6c28 [ 304.242042][ T4038] l2cap_recv_acldata+0x4f4/0x163c [ 304.243369][ T4038] hci_rx_work+0x3a8/0x830 [ 304.244503][ T4038] process_one_work+0x790/0x11b8 [ 304.245827][ T4038] worker_thread+0x910/0x1034 [ 304.247057][ T4038] kthread+0x37c/0x45c [ 304.248124][ T4038] ret_from_fork+0x10/0x20