last executing test programs: 9.063668019s ago: executing program 1 (id=667): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="000c0101000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.537810944s ago: executing program 1 (id=734): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000140)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x111491, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2014c7f, 0x0) 8.161353916s ago: executing program 1 (id=737): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB="00e0c6e4d9182ec69e599fd4d32ba9c5146fbc43a33914b2b1a5ce8843b193dc82dbc512b6fabfe6fbdd2a8bdeeda78e17b18f1b6e80c81cd67046e6a85e7160112d613e4c6dcab2404d58291ec130b9fd2785ce8dd5538f70998f2d50005813ba6c65cd3c25a8e730e1cd7b11cf7f6cc0fba6b670c64374abd09518ffba0c5eb2e602b1a64ac897fce7fae33878c0e57398a4cc6ce9bee1d70bef22f10c7776c2f5077cb1de63832b1bab15c6caf549a1cd58106494d92d1159033b2e27eceae339414a62aca9cf6a00c07e2a181dd9668a64b5eefc8e5ebc6564442a8d"], 0x1, 0x14fe, &(0x7f0000001580)="$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") io_submit(0x0, 0x0, &(0x7f0000000880)) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {0xc003}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {}, {0x870}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8a}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 7.203633018s ago: executing program 1 (id=746): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2800) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6(0xa, 0x2, 0x7) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r1, r1, 0x0, 0x9) 4.037694197s ago: executing program 0 (id=781): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) r2 = getpgid(0x0) rt_tgsigqueueinfo(r1, r2, 0x1e, &(0x7f0000000300)={0x35, 0x7f, 0x101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) msgget(0x0, 0x40) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x101100, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) semtimedop(0x0, &(0x7f0000005740)=[{}, {0x3, 0x8}], 0x1f4, 0x0) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 2.288703745s ago: executing program 0 (id=786): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fchdir(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40305829, &(0x7f0000000240)) 2.108356321s ago: executing program 0 (id=791): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x25, 0x0, 0x3ffffe) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x48c4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, 0x0, @in6=@private1}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001c000100"], 0x14}, 0x1, 0x0, 0x0, 0x1010}, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r2, 0x0, 0x4049) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) r5 = socket$inet6_udplite(0x11, 0x2, 0x88) syz_genetlink_get_family_id$ethtool(0x0, r1) getsockopt$bt_BT_SECURITY(r5, 0x107, 0x17, 0x0, 0x20000000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) copy_file_range(r3, 0x0, r4, &(0x7f0000000180)=0x68, 0x9, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f00000000c0)={[{@dioread_lock}, {@noload}, {@nogrpid}, {@errors_remount}, {@data_err_ignore, 0x0}, {@usrjquota}, {@nodiscard}, {@grpquota}, {@errors_continue}, {@noacl}, {@noauto_da_alloc}, {@auto_da_alloc}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '\xc7\x00'}}], 0x2c}, 0x2, 0x4f6, &(0x7f0000000700)="$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") 1.965616293s ago: executing program 4 (id=796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0) 1.841929623s ago: executing program 4 (id=797): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/2219], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) 1.793590837s ago: executing program 3 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x1], &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x0, 0x2, 0x9, 0x5}, {0x1, 0x2, 0xf, 0x7}, {0x3, 0x5, 0xe, 0xa}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0xfffffffb, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000006900000000000001000000940fa7c7326ae0367600000007070000b28a4533503319"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_DESTROY(r3, &(0x7f0000000100), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) socket$netlink(0x10, 0x3, 0x0) 1.05230253s ago: executing program 2 (id=800): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a0000020000000000000000000000764d2a8944cc4dbbc622556820c241e88e713fe1319651450862713e92e94ca6dc3b3d6d31fbe34fb7"], 0x10}}, 0x0) 997.670995ms ago: executing program 0 (id=801): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fchdir(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40305829, &(0x7f0000000240)) 959.583999ms ago: executing program 2 (id=802): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) 899.328194ms ago: executing program 3 (id=803): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 873.245156ms ago: executing program 3 (id=804): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0107000000feff00000006241a00000008241c04000c86ff09058103400000ff000904010000020d00000904010102"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xffff, 0xfffd, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setreuid(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0xc0105500) 842.653419ms ago: executing program 2 (id=805): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 812.331901ms ago: executing program 0 (id=806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0) 706.7692ms ago: executing program 2 (id=807): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCDISCONN(r2, 0x7439) 705.52351ms ago: executing program 0 (id=808): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) r2 = getpgid(0x0) rt_tgsigqueueinfo(r1, r2, 0x1e, &(0x7f0000000300)={0x35, 0x7f, 0x101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) msgget(0x0, 0x40) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x101100, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) semtimedop(0x0, &(0x7f0000005740)=[{}, {0x3, 0x8}], 0x1f4, 0x0) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 704.15775ms ago: executing program 4 (id=809): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2080062, &(0x7f00000003c0)={[{@prjquota}, {@debug}], [{@obj_role={'obj_role', 0x3d, ')\xc6\x8b\xfb(^'}}, {@dont_measure}]}, 0x6, 0x50d, &(0x7f0000008340)="$eJzs3c9vI1cdAPDvOHabdANOC4dSiXZpt0oRrJM0/RFxKF0J6KkSotyzIXGiKE68Spx2E62oV/wBBbQCJE6cuCDxByDB/gkIaSW47Rm0gix74IKMZmxvEscOCevEbPz5SC/z5j3PfL/PP+d5RnEAQ+tyRLwfESMR8XpEFFvtuVaJerOkt3u4d2sxLUk0Gh/9PYmk1da5z0utzVLf+yDiB8nRuFs7u2sLlUp583Dz7tXV9YWV8kp5Y3Z25p25d+fenps+4UiS/HG94xHx3rce/eyzX3/nvd9//ZP7839744dpWtdb/d3G0Q/NoRditN1QP4sog5M+b/LZCAEAeBpciYgXIuLViPhqFGMkjj2MBgAAAJ5CjW+OP9uuAgAAABdTLrs2NsmVsut98zEeuVyp1LyG94vxXK5S3ap9bbm6vbHUvIZ2Igq55dVKebp1rfBEFJJ0fSar76+/2bE+GxHPR8Sd4li6nvUBAAAA5+PSofl/xKNic/4PAAAAXDBOxgMAAMDFd8L5/x/OOg8AAADg7Dj/DwAAABfadz/8MC2Nh3u3st8BWPp4Z3ut+vHVpfLWWml9e7G0WN28UVqpVlcq5dJIe6vev/ZcqVZvvBUb2zenavmt2tTWzu78enV7ozaf/a73fPmFcxoXAAAAsO/5V+7+JYmI+jfGspJ6ptXXe5YPDJkk39Fw/SsDygToi5HTbnB5+2wSAc5d52c6MDzM8YGks6HjwGA0a/nsJ0c2/OPpYznmAACAwZj8kvP/MKxyg04AGJgfDzoBYGDyDvNhaBVOfwUgcMF88F/6R3t1nPj8f6NxqoQAAIC+G28u6tE6FzgeuVyp9Pi0YLK8WilPR8TnI+LPxcKz6frMAPMFAAAAAAAAAAAAAAAAAAAAAAAAgKdRo5FEAwAAALjQInJ/TSIiLZPFK+Od3w88k/yrmC0j4pNffvTzmwu12uZM2v6Px+21X7Ta3xzENxgAAAAwjArH9rbn6e15PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD008O9W4vtcp5xH1yLsZjoFj8fo9lyNAoR8dw/k8gf2C6JiJE+xK/fjogXu8VP0rRiopVFZ/xcRIwNOP6lPsSHYXb3WkS83+31l4vL2bL76y/fKk/qwbXsRd41fvv9b6TH+9/nThjjpXu/neps+9FoK/7tiJfy3d9/2vGTHvFf6xWwcHj1+vd3d3vdtPGriMmunz/JoVhTtfUbU1s7u1dX1xdWyivljdnZmXfm3p17e256anm1Um797Rrjp1/+Xf1Oj/gPbuey5cH47XFONDP8tNf4r/QaVId/37u594VmtXA0fsQbr3V//F/Mlt3v//Q58XrrcyDtn2zX6836QS//5k8v98otjb/U4/5vPv7FRq/xn9CRMe/79OR7AQD6Zmtnd22hUilvnkPl1bf6t8PknHJW6VEZ/f9I47wr336yzaO82T4cfpL93E8rjaQP40rnDFlirSP6A6kCAAAXzP58YNCZAAAAAAAAAAAAAAAAAAAAwPD6n/552Cun26ozZn0wQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONZ/AgAA///0I8e2") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 518.715306ms ago: executing program 2 (id=810): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "78ae0b", 0x44, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x2, 0x2, 0x1, 0x0, 0x7, 0x1a}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0xd, 0x1, 0x0, 0x1, 0x3}, 0x2, {0x7d70, 0x1, 0x2, 0x9, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 461.799391ms ago: executing program 4 (id=811): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a0000020000000000000000000000764d2a8944cc4dbbc622556820c241e88e713fe1319651450862713e92e94ca6dc3b3d6d31fbe34fb7"], 0x10}}, 0x0) 417.921215ms ago: executing program 2 (id=812): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x1], &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x0, 0x2, 0x9, 0x5}, {0x1, 0x2, 0xf, 0x7}, {0x3, 0x5, 0xe, 0xa}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0xfffffffb, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000006900000000000001000000940fa7c7326ae0367600000007070000b28a4533503319"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_DESTROY(r3, &(0x7f0000000100), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) socket$netlink(0x10, 0x3, 0x0) 411.196105ms ago: executing program 1 (id=747): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000140)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x111491, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2014c7f, 0x0) 400.894856ms ago: executing program 4 (id=813): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 338.609871ms ago: executing program 4 (id=814): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2218050, &(0x7f00000001c0)=ANY=[], 0x1, 0x1522, &(0x7f0000002380)="$eJzs3Au4TtX2MPAx5pyLTS5vkvsacyze5DJJklwScqkkSUjuCUmSJKnEJrckJCHXneQeck87bff7JfeknSNJkpCQZH7PzunT7Xydc/6dT/+zx+951rPnWGuNucba433f9a71PHt/2XVojUY1q9ZnZvh36J8GePFHIgAkAMAAAMgOAAEAlMlRJkfa9kwaE/+tg4j/kAbTL3cF4nKS/qdv0v/0Tfqfvkn/0zfpf/om/U/fpP/pm/RfiHRtZt4rZUm/izz//19O/U+S5fr/3wfxt6v+0b7S//82+l/aW/qfbmT4vZXS//Ti9y8B0v/0TfqfngWXuwBxmcn7P32T/guRrv3pz5TXn/1X9g/+IzXI8k8vQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHE/wdn/SUGAH4aX+66hBBCCCGEEEII8efxb1/uCoQQQgghhBBCCPGfh6BAg4EAMkBGSIBMkBmugCyQFbJBdojBlZADroKccDXkgtyQB/JCPsgPBSAEAgsMERSEQhCHa6AwXAtFoCgUg+LgoASUhOugFFwPpeEGKAM3Qlm4CcpBeagAFeFmqAS3QGWoAlXhVqgG1aEG1ITb4Ha4A2rBnVAb7oI6cDfUhXugHtwL9aEBNIT7oBHcD42hCTSFZtAcWkDLP8hPyv57+c9Cd3gOekBPSIRe0Buehz7QF/pBfxgAL8BAeBEGwUswGIbAUHgZhsErMBxehREwEkbBazAaxsBYGAfjYQIkweswEd6ASfDm/VlhCkyFaTAdZsBMeAtmwWyYA2/DXJgH8yEp00JYBIvhHVgC70IyvAdL4X1IgWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFD2AbbIcdsBN2wW7YAx/CXvgI9sHHkIqf/Iv5Z36ZD90QEFChQoMGM2AGTMAEzIyZMQtmwWyYDWMYwxyYA3NiTsyFuTAP5sF8mA8LYAEkJGRkLIgFMY5xLIyFsQgWwWJYDB06LIklsRRej6WxNJbBMlgWy2I5LI/lsSJWxEpYCStjZayKVbEaVsMaWANvw9vwDqyFtbA21sY6WAfrYl2sh/WwPtbHhtgQG2EjbIyNsSk2xebYHFtiS2yFrbA1tsa22BbbYTtsj+2xA3bAjtgRO2En7IydsQt2wa7YFbvh0/g0PovP4nP4HPbEaqoX9sbe2Af7YD/sj/3xBRyIL+KL+BIOxiE4FF/Gl/EVHI6ncQSOxFE4CiupMTgWxyGrCZiESZgRJuIknISTcQpOwWk4HWfgTJyJs3A2zsa3cS7Ow3m4ABfgIlyMi3EJvovJmIxL8Qym4DJcjitwJa7ClbgG1+IaXI8bcD1uwk24BbfgB/gBbsftuBN34m7cjR/ih/gRfoSDMRVTcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOJ7Ak3gCT+EpPI1n8CwAnMNzeB7P4wW8kPbmV2mMMiqDyqASVILKrDKrLCqLyqayqZiKqRwqh8qpcqpcKpfKo/KofCqfKqAKKFKkWEWqoCqo4iquCqvCqogqooqpYsopp0qqkqqUKqVKq9KqjLrxbFl1kyqnyqs2rqKqqCqptq6yqqKqqqqqmqquaqiaqqa6Xd2uaqlaqraqreqoOqquukfVU72wHzZQaZ1ppIZgYzUUm6pmqrlqoV7BB1QrNRxbqzaqrXpIjcQR2F61ch3Uo6qjGoud1ONqHD6huqgJ2FU9pbqpp9Uz6lnVXbV2PVRPNRl7qd5qGvZRfVU/1V/NwuoqrWM11EtqsBqihqqX1SJ8RQ1Xr6oRaqQapV5To9UYNVaNU+PVBJWkXlcT1RtqknpTTVZT1FQ1TU1XM9RM9ZaapWarOeptNVfNU/PVArVQLVKL1TtqiXpXJav31FL1vkpRy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVR+obWq72qF2ql1qt9qjPlR71Udqn/pYpapP1H71N3VAfaoOqs/UIfW5Oqy+UEfUl+qo+kodU1+r4+qEOqm+UafUt+q0OqPOqu/UOfW9Oq9+UBeUV6BRK6210YHOoDPqBJ1JZ9ZX6Cw6q86ms+uYvlLn0FfpnPpqnUvn1nlMXp1P59cFdKhJW8060gV1IR3X1+jC+lpdRBfVxXRx7XQJXVJfp0vp63VpfYMuo2/UZfVNupwuryt40DfrSvoWXVlX0VX1rbqarq5r6Jr6Nn27vkPX0nfq2vouXUffrevqe3Q9fa+urxvohvo+3UjfrxvrJrqpbqab6xa6pX5At9IP6ta6jW6rH9Lt9MO6vX5Ed9CP6o76Md1JP6476yd0F/2k7qqf0t10FQD4QV/QXvfQPXWi7qV76+d1H91X99P99QD9gh6oX9SD9Et6sB6ih+qX9TD9ih6uX9Uj9Eg9Sr+mR+sxeqwep8frCTpJv64n6jf0JP2mnqyn6Kl6mp6uZ+h+aTOBuniJ/YP8N34nf9CPR9+it+oP9Da9Xe/QO/UuvVvv0Xv0Xr1X79P7dKpO1fv1fn1AH9AH9UF9SB/Sh/VhfUQf0Uf1UX1MH9PH9Qn9nf5Gn9Lf6tP6jD6jv9Pn9Dl9Xl/8HYBBo4w2xgQmg8loEkwmk9lcYbKYrCabyW5i5kqTw1xlcpqrTS6T2+QxeU0+k98UMKEhYw2byBQ0hUzcXGMKm2tNEVPUFDPFjTMlTElz3f84/4/qa2lamlamlWltWpu2pq1pZ9qZ9qa96WA6mI6mo+lkOpnOprPpYrqYrqar6Wa6mWfMM6a76W56mB4m0SSa3uZ508f0Nf1MfzPAvGAGmoFmkBlkBpvBZqgZaoaZYWa4GW5GmBFmlBllRpvRZqwZa8ab8SbJZzcTzUQzyUwyk81kM3VAdjPdTDczzUwzy8wyc8wcM9fMNfPNfLPQLDSLzWKzxCwxySbZLDVLTYpZZpaZFWaFWWVWmTVmjVln1pkNZoPZZDaZFLPVbDXbzDazw+wwu8wus8fsMXvNXrPP7DOpJtXsN/vNAXPAHDQHzSFzyBw2h80Rc8QcNUfNMXPMHDfHzUlz0pwyp8xpc9qcNWfNOXPOnDfnzQVzIe1rX6ACFZjABBmCDEFCkBBkDjIHWYIsQbYgWxALYkGOIEeQM7g6yBXkDvIEeYN8Qf6gQBAGFNiAgygoGBQK4sE1QeHg2qBIUDQoFhQPXFAiKBlcF5QKrg9KBzcEZYIbg7LBTUG5oHxQIagY3BxUCm4JKgdVgqrBrUG1oHpQI6gZ3BbcHtwR1AruDGoHdwV1gruDusE9Qb3g3qB+0CBoGNwXNAruDxoHTYKmQbOgedAiaPmnzu/96dwPuh5hzzAx7BX2Dp8P+4R9w35h/3BA+EI4MHwxHBS+FA4Oh4RDw5fDYeEr4fDw1XBEODIcFb4Wjg7HhGPDceH4cEKYFL4eTgzfCCeFb4aTwynh1GBaOD2cEc4M3wpnhbPDOeHb4dxwXjg/XBAuDBeFiBc/KpLD98Kl4fthSrgsXB6uCFeGq8LV4ZpwbbguXB9uCDeGm8oMvLhruC3cHu4Id4a7wt3hnvDDcG/4Ubgv/DhMDT8J94d/Cw+En4YHw8/CQ+Hn4eHwi/BI+GV4NPwqPBZ+HR4PT2SC8JvwVPhteDo8E54NvwvPhd+H58MfwguhT/tyn3Z5J0OGMlAGSqAEykyZKQtloWyUjWIUoxyUg3JSTspFuSgP5aF8lI8KUAFKw8RUkApSnOJUmApTESpCxagYOXJUkkpSKSpFpak0laEyVJbKUjmyVIEq0M10M91Ct1AVqkK30q1UnapTTapJiLdTLapFtak21aE6VJfqUj2qR/WpPjWkhtSIGlFjakxNqSk1p+bUklpSK2pFrak1taW21I7aUXtqTx2oA3WkjtSJOlFn6kxdqAt1pa7UjbrRM/QMdafu1IN6UCIlUm/qTX2oD/WjfjSABtBAGkiDaBANpsE0lIbSMBpGw2k4jaCRNIpeo9E0hsbSOBpPEyiJkmgiTaRJNIkm02SaSlNpOk2nmTSTZtEsmkNzaC7Npfk0nxbSQlpMi2kJLaFkSqaltJRSKIWW03JaSStpNa2mtbSW1tN62kgbaTNtpq20lbbRNtpBO2gX7aI9tIf20l7aR/solVJpP+2nA3SADtJBOkSH6DAdpiN0hI7SUTpGx+g4HaeTdJJO0Sk6TafpLJ2lc/Q9nacf6AJ5SrCZbGZ7hc1is9psNrv9dZzH5rX5bH5bwIY2l839i5istUVsUVvMFrfOlrAl7XW/icvZ8raCrWhvtpXsLbayLWczwc/j2+0dtpa909a2d9ma9rZfxHXs3bauvd/Ws01sfdvMNrQtbCN7v21sm9imtpltblvYdvZh294+YjvYR21H+9hv4iX2XbvWrrPr7Qa7135kz9rv7BH7pT1nv7c9bE87wL5gB9oX7SD7kh1sh/wyBrCj7Gt2tB1jx9pxdryd8Jt4qp1mp9sZdqZ9y86ys38TL7bv2Lk22c63C+xCu+jHOK2mZPueXWrftyl2mV1uV9iVdpVdbdf831pX2E12s91i99gP7Ta73e6wO+0uu/vHOO089tmPbar9xB62X9gD9lN70B61h+znP8Zp53fUfmWP2a/tcXvCnrTf2FP2W3vanvnx/NPO/Rv7g71gvQVGVqzZcMAZOCMncCbOzFdwFs7K2Tg7x/hKzsFXcU6+mnNxbs7DeTkf5+cCHDKxZeaIC3IhjvM1XJiv5SJclItxcXZcgkvydVyKr+fSfAOX4Ru5LN/E5bg8V+CKfDNX4lu4MlfhqnwrV+Pq2++4+GnHd3AtvpNr811ch+/munwP1+N7uT434IZ8Hzfi+7kxN+Gm3IybcwtuyQ9wK36QW3MbbssPcTt+mNvzI9yBH+WO/Bh34se5Mz/BXfhJ7spPcTd+mp/hZ7k7P8c9uCcnci/uzc9zH+7L/bg/D+AXeCC/yIP4JR7MQ3gov8zMr/BwfpVH8Egexa/xaB7DY3kcj+cJnMSv80R+gyfxmzyZp/BUnsbTeQbP5Ld4Fs/mOfw2z+V5PJ8X8EJexIv5HV7C73Iyv8dL+X1O4WW8nFfwSl7Fq3kNr+V1vJ438EbexJt5C2/lD3gbb+cdvJN38W7ewx/yXv6I9/HHnMqf8H7+Gx/gT/kgf8aH+HM+zF/wEf6Sj/JXfIy/5uN8gk/yN3yKv+XTfIbP8nd8jr/n8/wDX2DPEGGkIh2ZKIgyRBmjhChTlDm6IsoSZY2yRdmjWHRllCO6KsoZXR3linJHeaK8Ub4of1QgCiOKbMRRFBWMCkXx6JqocHRtVCQqGhWLikcuKhGVjK6LSkXXR6WjG6Iy0Y1R2eimqFxUPqoQVYxujipFt0SVoypR1ejWqFpUPaoR1Yxui26P7ohqRXdGtaO7otLR3VHd6J6oXnRvVD9qEDWM7osaRfdHjaMmUdOoWdQ8ahG1jB6IWkUPRq2jNlHb6KGoXfRw1D56JOoQPRp1jB67tL1ocPH19avtiVGvSP/9CdmdemF8UXxx/J34kvi78eT4e/Gl8ffjKfFl8eXxFfGV8VXx1fE18bXxdfH18Q3xjfFN8c3xLXHva2YEh2k3wmBc4DK4jC7BZXKZ3RUui8vqsrnsLuaudDncVS6nu9rlcrldHpfX5XP5XQEXOnLWsYtcQVfIxd01rrC71hVxRV0xV9w5V8KVdC1cS9fStXIPutaujWvrHnIPuYfdw+4R94h71HV0j7lO7nHX2T3hurgn3ZPuKdfNPe2ecc+67u4518P1dIku0fV2vV0f18f1c/3cADfADXQD3SA3yA12g91QN9QNc8PccDfcjXAj3Cg3yo12o91YN9aNd+NdkktyE91EN8lNcpPdZDfVTXXT3XQ30810s9wsN8fNcXPdXDffzXcL3UK32C12S9wSl+yS3VK31KW4FLfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va3zW1zO9wOt8vtcnvcHrfX7XX73D6X6lLdfrffHXAH3EH3mTvkPneH3RfuiPvSHXVfuWPua3fcnXAn3TfulPvWnXZn3Fn3nTvnvnfn3Q/ugvMuKfZ6bGLsjdik2JuxybEpsamxabHpsRmxmbG3YrNis2NzYm/H5sbmxebHFsQWxhbFFsfeiS2JvRtLjr0XWxp7P5YSWxZbHlsRWxlbFfM+/7bIF/SFfNxf4wv7a30RX9QX88W98yV8SX+dL+Wv96X9Db6Mv9GX9Tf5cr68r+Cb+Ka+mW/uW/iW/gHfyj/oW/s2vq1/yLfzD/v2/hHfwT/qO/rHfCf/uO/sn/Bd/JO+q39q3t9fnr67f8738D19ou/le/vnfR/f1/fz/f0A/4If6F/0g/xLfrAf4of6l/0w/4of7l/1I/xIP8q/5kf7MX6sH+fH+wk+yb/uJ/o3/CT/pp/sp/ipfpqf7mf4mf4tP8vP9nP8236un+fn+wV+oV/kF/t3/BL/rk/27/ml/n2f4pf55X6FX+lX+dV+jV/r1/n1foPf6Df5zX6L3+ozwja/3e/wO/0uv9vv8R/6vf4jv89/7FP9J36//5s/4D/1B/1n/pD/3B/2X/gj/kt/1H/lj/mv/XF/wp/03/hT/lt/2p/xZ/13/pz/3p/3P/gL8jdrQgghhBD/lMQ/2N7rd9apvy8GAHoDQNbteQ/9fHvafdPGXBfHfdXejjEAeLRn1wY/LQ0aJCb+dNwUDUGhBQAQu5SfAS7Fy6AtPAwdoA2U+t36+qoKyL+aP/jZ9rT54zcCZAbI9NO6BPgx/tX81/+D+Zu88+v5f11/fAFAkUKXctIO9FN8af7S/2D+3e3+YP5MnyYBtP5ZTha4FF+avyQ8CI9Bh1/sKYQQQgghhBBCXNRXnev2R/e3affn+cylnIxwKf6j+/M/UPnPOAchhBBCCCGEEEL8vz3x9DOPPNChQ5vO/82DjH+NMv4CAwSAv0AZMvjrDy73J5MQQgghhBDiz3bpS//lrkQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhEi//v3/EKb+6Z1/fjx9+U5VCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEuGz+TwAAAP//ksFLPw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x100001) 217.623952ms ago: executing program 3 (id=815): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fchdir(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40305829, &(0x7f0000000240)) 174.307175ms ago: executing program 3 (id=816): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="140004006e696376663000000000000800000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0xa094}, 0x0) 44.512206ms ago: executing program 3 (id=817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x453, 0x2, 0x70bd2b, 0x25dfdbfb, "4893f8"}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) 0s ago: executing program 1 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0) kernel console output (not intermixed with test programs): 61.386341][ T4350] process 'syz.2.86' launched '/dev/fd/4/./file0' with NULL argv: empty string added [ 61.422412][ T4345] udc-core: couldn't find an available UDC or it's busy [ 61.424203][ T4345] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.426508][ T4339] device syzkaller0 entered promiscuous mode [ 62.445912][ T4076] Bluetooth: hci5: command 0x040f tx timeout [ 62.539501][ T4307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.573842][ T4307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.223966][ T4307] team0: Port device team_slave_0 added [ 64.253864][ T4307] team0: Port device team_slave_1 added [ 64.381439][ T4377] loop1: detected capacity change from 0 to 2048 [ 64.412832][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.414644][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.420891][ T4307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.463118][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.465051][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.491408][ T4307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.525122][ T4074] Bluetooth: hci5: command 0x0419 tx timeout [ 64.659764][ T4377] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.705413][ T4307] device hsr_slave_0 entered promiscuous mode [ 64.762789][ T4307] device hsr_slave_1 entered promiscuous mode [ 64.802223][ T4307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.804414][ T4307] Cannot create hsr debugfs directory [ 68.845957][ T4076] Bluetooth: hci5: command 0x0405 tx timeout [ 68.983219][ T4405] loop2: detected capacity change from 0 to 1024 [ 70.045768][ T4405] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.102: casefold flag without casefold feature [ 70.047473][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.055078][ T4405] EXT4-fs (loop2): get root inode failed [ 70.056915][ T1959] cfg80211: failed to load regulatory.db [ 70.059214][ T4405] EXT4-fs (loop2): mount failed [ 70.300636][ T4307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.217626][ T4415] capability: warning: `syz.2.102' uses deprecated v2 capabilities in a way that may be insecure [ 71.236030][ T4415] loop2: detected capacity change from 0 to 1764 [ 71.366143][ T4307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.420859][ T4427] loop0: detected capacity change from 0 to 8 [ 72.560971][ T4432] loop2: detected capacity change from 0 to 128 [ 72.709799][ T4307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.720152][ T4432] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.949790][ T4307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.121793][ T4454] loop2: detected capacity change from 0 to 512 [ 74.125938][ T4452] loop1: detected capacity change from 0 to 256 [ 74.163515][ T4452] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.164555][ T4454] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 74.164555][ T4454] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 74.164555][ T4454] [ 74.175640][ T4452] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.192200][ T4454] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.234080][ T4307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.762316][ T4454] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 79.794918][ T4307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.850996][ T4463] loop1: detected capacity change from 0 to 512 [ 79.858266][ T4465] loop0: detected capacity change from 0 to 256 [ 79.875139][ T4307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.889111][ T4465] exfat: Deprecated parameter 'namecase' [ 79.903215][ T4463] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 79.909153][ T4465] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 79.923092][ T4463] EXT4-fs (loop1): Remounting filesystem read-only [ 79.925194][ T4463] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.118: invalid indirect mapped block 1 (level 1) [ 79.939443][ T4463] EXT4-fs (loop1): 1 truncate cleaned up [ 79.940943][ T4463] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,sysvgroups,. Quota mode: none. [ 79.953538][ T4469] loop4: detected capacity change from 0 to 16 [ 79.964847][ T4307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.092833][ T4465] exFAT-fs (loop0): hint_cluster is invalid (1) [ 80.121650][ T4469] erofs: (device loop4): mounted with root inode @ nid 36. [ 81.877181][ T4465] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 81.879918][ T4465] exFAT-fs (loop0): error, failed to bmap (inode : 00000000de3c86ca iblock : 0, err : -5) [ 82.103420][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.154729][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.158665][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.173566][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.207495][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.210243][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.213002][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.214908][ T4243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.246335][ T4489] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 82.249640][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.250469][ T4488] loop1: detected capacity change from 0 to 512 [ 82.255294][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.273227][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.290737][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.292737][ T4243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.321024][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.324311][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.337697][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.357547][ T4488] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.369033][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.418674][ T4307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.421475][ T4307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.585038][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.587940][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.591171][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.623598][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.631703][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.644327][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.654007][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.663069][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.957810][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.959985][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.012557][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.057339][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.061221][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.122725][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.125459][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.128653][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.144797][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.169203][ T4307] device veth0_vlan entered promiscuous mode [ 83.178382][ T4503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 83.203358][ T4307] device veth1_vlan entered promiscuous mode [ 83.263042][ T4508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.131'. [ 83.265761][ T4506] loop1: detected capacity change from 0 to 512 [ 83.290230][ T4307] device veth0_macvtap entered promiscuous mode [ 83.302979][ T4506] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 83.320309][ T4506] EXT4-fs (loop1): 1 truncate cleaned up [ 83.323401][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.326214][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.328871][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.347865][ T4307] device veth1_macvtap entered promiscuous mode [ 83.366695][ T4506] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 83.482471][ T4506] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.130: Logical block already allocated [ 83.499538][ T4506] EXT4-fs (loop1): Remounting filesystem read-only [ 83.522831][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.525729][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.528330][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.530826][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.581726][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.589128][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.608704][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.621904][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.628957][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.744926][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.152176][ T4017] Bluetooth: hci3: command 0x0409 tx timeout [ 85.233243][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.381633][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.390939][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.399469][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.425696][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.428591][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.431175][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.481868][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.488578][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.508731][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.520424][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.532194][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.535030][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.539569][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.546854][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.564159][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.567041][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.609620][ T4307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.627609][ T4307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.629880][ T4307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.646673][ T4307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.984098][ T4530] loop0: detected capacity change from 0 to 2048 [ 86.026210][ T4374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.028477][ T4374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.031302][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.079729][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.081935][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.085636][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.091335][ T4497] chnl_net:caif_netlink_parms(): no params data found [ 86.142288][ T4530] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 86.218081][ T4530] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,lazytime,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,min_batch_time=0x0000000000000005,bsddf,,errors=continue. Quota mode: none. [ 86.309748][ T4541] loop3: detected capacity change from 0 to 128 [ 86.323859][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.329939][ T4542] EXT4-fs (loop0): shut down requested (1) [ 86.334018][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.345429][ T4497] device bridge_slave_0 entered promiscuous mode [ 86.379871][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.399273][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.420132][ T4497] device bridge_slave_1 entered promiscuous mode [ 86.422864][ T4541] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.476409][ T4497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.481095][ T4497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.507338][ T4497] team0: Port device team_slave_0 added [ 86.510527][ T4497] team0: Port device team_slave_1 added [ 86.538519][ T4497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.540515][ T4497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.621562][ T4497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.641893][ T4497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.652164][ T4497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.658908][ T4497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.257704][ T4077] Bluetooth: hci3: command 0x041b tx timeout [ 87.484928][ T4497] device hsr_slave_0 entered promiscuous mode [ 87.507117][ T4556] loop2: detected capacity change from 0 to 1024 [ 87.522857][ T4497] device hsr_slave_1 entered promiscuous mode [ 87.542229][ T4497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.544256][ T4497] Cannot create hsr debugfs directory [ 87.599030][ T4556] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 88.882859][ T4497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.982017][ C0] sched: RT throttling activated [ 89.160592][ T4497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.299337][ T4497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.312219][ T4477] Bluetooth: hci3: command 0x040f tx timeout [ 89.405178][ T4497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.771957][ T4578] loop0: detected capacity change from 0 to 512 [ 89.833285][ T4578] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 89.860272][ T4578] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 89.887135][ T4578] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 89.892831][ T4578] System zones: 0-1, 15-15, 18-18, 34-34 [ 89.895596][ T4578] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.931160][ T4578] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 89.951297][ T4578] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 89.974788][ T4578] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 90.321481][ T4578] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.145: bg 0: block 40: padding at end of block bitmap is not set [ 90.331451][ T4578] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 90.354809][ T4578] EXT4-fs (loop0): 1 truncate cleaned up [ 90.356404][ T4578] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 91.290088][ T4497] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.506696][ T4108] Bluetooth: hci3: command 0x0419 tx timeout [ 91.995305][ T4497] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.988516][ T4592] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 93.382599][ T4497] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.431608][ T4603] udc-core: couldn't find an available UDC or it's busy [ 93.434555][ T4603] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.474363][ T4497] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.605440][ T4607] loop0: detected capacity change from 0 to 256 [ 93.673733][ T4607] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 93.729339][ T4600] netlink: 244 bytes leftover after parsing attributes in process `syz.1.150'. [ 94.973391][ T4613] netlink: 52 bytes leftover after parsing attributes in process `syz.3.154'. [ 95.270541][ T4615] loop2: detected capacity change from 0 to 1024 [ 95.336231][ T4497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.365374][ T4497] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.385773][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.389124][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.409689][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.412799][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.422519][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.424497][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.452106][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.455759][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.468168][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.547043][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.549026][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.553734][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.560603][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.594239][ T4615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.596435][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.600178][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.764525][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.773844][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.782357][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.791939][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.797434][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.806364][ T4497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.809602][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.000065][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.109422][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.354712][ T4639] loop1: detected capacity change from 0 to 128 [ 99.728113][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.730468][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.774621][ T4497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.944484][ T26] audit: type=1326 audit(100.050:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa2c59a8 code=0x7ffc0000 [ 100.996556][ T26] audit: type=1326 audit(100.050:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa2c59a8 code=0x7ffc0000 [ 101.026078][ T26] audit: type=1326 audit(100.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffaa2c3e24 code=0x7ffc0000 [ 101.122066][ T26] audit: type=1326 audit(100.210:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa2c59a8 code=0x7ffc0000 [ 101.128001][ T26] audit: type=1326 audit(100.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa2c59a8 code=0x7ffc0000 [ 101.151278][ T26] audit: type=1326 audit(100.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=11 compat=0 ip=0xffffaa2c59a8 code=0x7ffc0000 [ 101.213798][ T26] audit: type=1326 audit(100.260:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa2c59a8 code=0x7ffc0000 [ 101.261114][ T26] audit: type=1326 audit(100.260:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa2c59a8 code=0x7ffc0000 [ 102.213070][ T26] audit: type=1326 audit(100.290:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffaa2c59a8 code=0x7ffc0000 [ 102.589865][ T26] audit: type=1326 audit(100.290:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa2c59a8 code=0x7ffc0000 [ 103.970914][ T4696] input: syz0 as /devices/virtual/input/input3 [ 104.108446][ T4695] fuse: Bad value for 'fd' [ 104.113792][ T4695] loop2: detected capacity change from 0 to 256 [ 104.230369][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.233782][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.241556][ T4704] device bridge_slave_1 left promiscuous mode [ 104.250059][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.530944][ T4704] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 104.557176][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.568964][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.572372][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.576043][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.631878][ T4497] device veth0_vlan entered promiscuous mode [ 104.649367][ T4497] device veth1_vlan entered promiscuous mode [ 104.716538][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.719145][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.721626][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.732699][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.945905][ T4709] loop1: detected capacity change from 0 to 128 [ 105.992510][ T4497] device veth0_macvtap entered promiscuous mode [ 106.001485][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.962458][ T4722] netlink: 52 bytes leftover after parsing attributes in process `syz.3.188'. [ 106.980240][ T4497] device veth1_macvtap entered promiscuous mode [ 106.991576][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.192638][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.195566][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.201877][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.224519][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.235041][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.252734][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.267740][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.278262][ T4709] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.289290][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.305664][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.339741][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.343410][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.354959][ T4497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.577432][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.580394][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.585852][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.588679][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.591049][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.598850][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.601353][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.608497][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.611370][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.620491][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.628209][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.630800][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.637406][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.640072][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.223063][ T4497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.236732][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.239484][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.285610][ T4497] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.287993][ T4497] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.290190][ T4497] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.302287][ T4497] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.345299][ T4742] capability: warning: `syz.3.192' uses 32-bit capabilities (legacy support in use) [ 108.574969][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.577833][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.653976][ T4751] input: syz0 as /devices/virtual/input/input4 [ 108.778748][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.852741][ T4748] loop3: detected capacity change from 0 to 2048 [ 110.003477][ T4089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.077022][ T4089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.117084][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.132172][ T4748] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.164927][ T4748] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,errors=remount-ro,jqfmt=vfsv0,stripe=0x000000000004ffff,usrjquota=,bsdgroups,norecovery,. Quota mode: none. [ 110.204776][ T4748] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.195: bg 0: block 2: invalid block bitmap [ 110.209591][ T4748] EXT4-fs (loop3): Remounting filesystem read-only [ 110.241399][ T4771] loop1: detected capacity change from 0 to 1024 [ 110.344195][ T4570] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.380330][ T4771] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.201: casefold flag without casefold feature [ 110.391272][ T4771] EXT4-fs (loop1): get root inode failed [ 110.392943][ T4771] EXT4-fs (loop1): mount failed [ 111.969577][ T682] device hsr_slave_0 left promiscuous mode [ 112.265420][ T682] device hsr_slave_1 left promiscuous mode [ 112.714022][ T4800] xt_hashlimit: max too large, truncated to 1048576 [ 113.924098][ T682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.926357][ T682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.969506][ T682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.971724][ T682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.990119][ T682] device bridge_slave_1 left promiscuous mode [ 113.992904][ T682] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.003201][ T4570] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 114.006648][ T4570] usb 1-1: can't read configurations, error -71 [ 114.035789][ T682] device bridge_slave_0 left promiscuous mode [ 114.037663][ T682] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.089263][ T4815] loop3: detected capacity change from 0 to 128 [ 114.332504][ T682] device veth1_macvtap left promiscuous mode [ 114.339102][ T4822] loop3: detected capacity change from 0 to 512 [ 114.339874][ T682] device veth0_macvtap left promiscuous mode [ 114.342862][ T682] device veth1_vlan left promiscuous mode [ 114.344549][ T682] device veth0_vlan left promiscuous mode [ 114.417067][ T4823] binder: 4817:4823 tried to acquire reference to desc 0, got 1 instead [ 114.442859][ T4823] binder: 4817:4823 got transaction with invalid parent offset or type [ 114.445832][ T4823] binder: 4817:4823 transaction failed 29201/-22, size 96-24 line 3286 [ 115.253874][ T4780] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.280881][ T4822] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.217: casefold flag without casefold feature [ 115.286584][ T4822] EXT4-fs (loop3): get root inode failed [ 115.288099][ T4822] EXT4-fs (loop3): mount failed [ 115.511121][ T4077] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.401850][ T4077] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.420277][ T4829] udc-core: couldn't find an available UDC or it's busy [ 116.427312][ T4829] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 116.478862][ T682] team0 (unregistering): Port device team_slave_1 removed [ 116.522943][ T682] team0 (unregistering): Port device team_slave_0 removed [ 116.550485][ T682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.730491][ T682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.050732][ T682] bond0 (unregistering): Released all slaves [ 117.438488][ T4842] loop1: detected capacity change from 0 to 2048 [ 117.620499][ T4842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.674738][ T4867] xt_SECMARK: invalid mode: 0 [ 126.323550][ T4890] loop1: detected capacity change from 0 to 256 [ 126.410564][ T4890] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 126.423581][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 126.493294][ T4890] exFAT-fs (loop1): hint_cluster is invalid (1) [ 126.495053][ T4890] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 126.506767][ T4897] loop2: detected capacity change from 0 to 128 [ 126.513378][ T4890] exFAT-fs (loop1): Filesystem has been set read-only [ 126.515112][ T4890] exFAT-fs (loop1): error, failed to bmap (inode : 000000003ea17771 iblock : 9, err : -5) [ 126.517780][ T4890] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 126.529308][ T4890] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 126.534622][ T4890] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 126.536965][ T4890] exFAT-fs (loop1): error, failed to bmap (inode : 000000003ea17771 iblock : 0, err : -5) [ 126.570429][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 126.570441][ T26] audit: type=1326 audit(126.530:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cfde9a8 code=0x7ffc0000 [ 126.581211][ T26] audit: type=1326 audit(126.540:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff9cfde9a8 code=0x7ffc0000 [ 126.586816][ T26] audit: type=1326 audit(126.540:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cfde9a8 code=0x7ffc0000 [ 126.593501][ T26] audit: type=1326 audit(126.540:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9cfde9a8 code=0x7ffc0000 [ 126.599521][ T26] audit: type=1326 audit(126.540:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cfde9a8 code=0x7ffc0000 [ 126.601854][ T4897] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 126.605087][ T26] audit: type=1326 audit(126.540:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff9cfde9a8 code=0x7ffc0000 [ 126.610307][ T4903] loop3: detected capacity change from 0 to 512 [ 126.631018][ T26] audit: type=1326 audit(126.540:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cfde9a8 code=0x7ffc0000 [ 127.235208][ T26] audit: type=1326 audit(126.540:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff9cfde9a8 code=0x7ffc0000 [ 127.298891][ T26] audit: type=1326 audit(126.540:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cfde9a8 code=0x7ffc0000 [ 127.512120][ T26] audit: type=1326 audit(126.560:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cfde9a8 code=0x7ffc0000 [ 127.519060][ T4897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.761005][ T4903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.244: inode #1: comm syz.3.244: iget: illegal inode # [ 127.772875][ T4912] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 127.785360][ T4903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.244: error while reading EA inode 1 err=-117 [ 127.794112][ T4903] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 127.797242][ T4903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.244: inode #1: comm syz.3.244: iget: illegal inode # [ 128.802998][ T4903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.244: error while reading EA inode 1 err=-117 [ 128.828882][ T4903] EXT4-fs (loop3): 1 orphan inode deleted [ 128.830489][ T4903] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,nobarrier,usrjquota=,,errors=continue. Quota mode: none. [ 128.977818][ T4903] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000008' [ 130.536247][ T4945] udc-core: couldn't find an available UDC or it's busy [ 130.538223][ T4945] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.570665][ T4945] udc-core: couldn't find an available UDC or it's busy [ 130.573770][ T4945] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.767442][ T4949] xt_SECMARK: invalid mode: 0 [ 131.489202][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.633531][ T4955] loop2: detected capacity change from 0 to 128 [ 131.642668][ T4955] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 131.664148][ T4955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.774581][ T4970] loop4: detected capacity change from 0 to 8 [ 131.787570][ T4971] loop0: detected capacity change from 0 to 512 [ 132.293282][ T4971] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.327302][ T4988] loop2: detected capacity change from 0 to 16 [ 132.405167][ T4988] erofs: (device loop2): mounted with root inode @ nid 36. [ 132.410517][ T4971] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #12: block 32: comm syz.0.263: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 132.870906][ T4990] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 132.874924][ T4990] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 132.877470][ T4990] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 132.880597][ T4990] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 132.884682][ T4990] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 132.887238][ T4990] erofs: (device loop2): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 132.891556][ T4990] attempt to access beyond end of device [ 132.891556][ T4990] loop2: rw=524288, want=6536, limit=16 [ 132.895178][ T4990] attempt to access beyond end of device [ 132.895178][ T4990] loop2: rw=524288, want=34359736344, limit=16 [ 132.898596][ T4990] attempt to access beyond end of device [ 132.898596][ T4990] loop2: rw=524288, want=736, limit=16 [ 132.901972][ T4990] attempt to access beyond end of device [ 132.901972][ T4990] loop2: rw=524288, want=536576872, limit=16 [ 132.905730][ T4990] attempt to access beyond end of device [ 132.905730][ T4990] loop2: rw=524288, want=24, limit=16 [ 132.909502][ T4990] attempt to access beyond end of device [ 132.909502][ T4990] loop2: rw=524288, want=13478624040, limit=16 [ 135.099322][ T5029] loop0: detected capacity change from 0 to 1024 [ 135.136978][ T5031] loop1: detected capacity change from 0 to 2048 [ 135.163511][ T5031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.307574][ T5029] EXT4-fs error (device loop0): ext4_fill_super:4840: inode #2: comm syz.0.284: casefold flag without casefold feature [ 135.311576][ T5029] EXT4-fs (loop0): get root inode failed [ 135.314799][ T5029] EXT4-fs (loop0): mount failed [ 137.563372][ T5078] loop4: detected capacity change from 0 to 128 [ 137.580427][ T5079] Zero length message leads to an empty skb [ 137.660047][ T5078] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.713488][ T5086] loop2: detected capacity change from 0 to 512 [ 137.778681][ T5086] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 137.817262][ T5090] loop0: detected capacity change from 0 to 1024 [ 137.819902][ T5086] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 137.822481][ T5086] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 137.824662][ T5086] System zones: 0-1, 15-15, 18-18, 34-34 [ 137.826812][ T5086] EXT4-fs (loop2): orphan cleanup on readonly fs [ 137.828486][ T5086] __quota_error: 31 callbacks suppressed [ 137.828497][ T5086] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 137.852636][ T5086] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 137.856339][ T5086] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 137.864762][ T5086] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.301: bg 0: block 40: padding at end of block bitmap is not set [ 137.872441][ T5086] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 137.874989][ T5086] EXT4-fs (loop2): 1 truncate cleaned up [ 137.876340][ T5086] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 138.092626][ T5090] EXT4-fs error (device loop0): ext4_fill_super:4840: inode #2: comm syz.0.304: casefold flag without casefold feature [ 138.096653][ T5090] EXT4-fs (loop0): get root inode failed [ 138.098395][ T5090] EXT4-fs (loop0): mount failed [ 140.360718][ T5138] loop0: detected capacity change from 0 to 512 [ 140.406732][ T5138] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 140.455019][ T5138] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 140.457226][ T5138] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 140.462578][ T5138] System zones: 0-1, 15-15, 18-18, 34-34 [ 140.466411][ T5138] EXT4-fs (loop0): orphan cleanup on readonly fs [ 140.473246][ T5135] chnl_net:caif_netlink_parms(): no params data found [ 140.490507][ T5138] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 140.512156][ T5138] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 140.516447][ T5138] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 140.533576][ T5138] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.320: bg 0: block 40: padding at end of block bitmap is not set [ 140.561050][ T5138] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 140.586614][ T5138] EXT4-fs (loop0): 1 truncate cleaned up [ 140.588147][ T5138] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 140.678160][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.693639][ T5135] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.712222][ T5135] device bridge_slave_0 entered promiscuous mode [ 140.726557][ T5165] loop1: detected capacity change from 0 to 1024 [ 140.737947][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.752258][ T5135] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.770281][ T5135] device bridge_slave_1 entered promiscuous mode [ 140.829671][ T5135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.677701][ T5135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.732216][ T5165] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.327: casefold flag without casefold feature [ 141.752603][ T5165] EXT4-fs (loop1): get root inode failed [ 141.770735][ T5165] EXT4-fs (loop1): mount failed [ 141.866874][ T5135] team0: Port device team_slave_0 added [ 141.881270][ T5135] team0: Port device team_slave_1 added [ 141.934386][ T5135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.936325][ T5135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.015039][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 142.022075][ T5135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.026645][ T5135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.028591][ T5135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.054798][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 142.070757][ T5135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.854240][ T21] Bluetooth: hci6: command 0x0409 tx timeout [ 143.065259][ T5202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'. [ 143.163938][ T5135] device hsr_slave_0 entered promiscuous mode [ 143.200381][ T5213] loop1: detected capacity change from 0 to 512 [ 143.222448][ T5135] device hsr_slave_1 entered promiscuous mode [ 143.302177][ T5135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.305182][ T5135] Cannot create hsr debugfs directory [ 143.337615][ T5213] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 143.416237][ T5213] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 143.418639][ T5213] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 143.420805][ T5213] System zones: 0-1, 15-15, 18-18, 34-34 [ 143.425120][ T5213] EXT4-fs (loop1): orphan cleanup on readonly fs [ 144.324495][ T5213] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 144.327036][ T5213] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 144.330925][ T5213] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 144.339433][ T5213] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.341: bg 0: block 40: padding at end of block bitmap is not set [ 144.352349][ T5213] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 144.356626][ T5221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.343'. [ 144.375200][ T5213] EXT4-fs (loop1): 1 truncate cleaned up [ 144.376772][ T5213] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 144.510628][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 145.885457][ T4780] Bluetooth: hci6: command 0x041b tx timeout [ 147.654701][ T5135] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.764445][ T5135] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.777589][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 147.889373][ T5135] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.031550][ T21] Bluetooth: hci6: command 0x040f tx timeout [ 149.034235][ T5135] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.105876][ T5278] bond0: up delay (65535) is not a multiple of miimon (8196), value rounded to 57372 ms [ 149.144356][ T5278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 149.344923][ T5135] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 149.383907][ T5135] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 149.415970][ T5135] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 149.458871][ T5135] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 149.915357][ T5324] netlink: 52 bytes leftover after parsing attributes in process `syz.0.374'. [ 150.113565][ T1534] Bluetooth: hci6: command 0x0419 tx timeout [ 150.719607][ T5327] syz.0.381 uses obsolete (PF_INET,SOCK_PACKET) [ 150.740982][ T5135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.785177][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.788011][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.833331][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 150.948537][ T5135] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.980523][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.983492][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.993710][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.995579][ T4243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.012887][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.021561][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.048271][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.050148][ T4243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.070035][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.123096][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.125886][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.128656][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.143081][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.157681][ T5353] loop1: detected capacity change from 0 to 512 [ 151.173615][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.183925][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.370797][ T5360] netlink: 'syz.0.392': attribute type 10 has an invalid length. [ 151.374852][ T5353] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 151.972578][ T5365] netlink: 52 bytes leftover after parsing attributes in process `syz.4.391'. [ 153.078044][ T5353] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 153.239279][ T5353] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 153.572850][ T5353] System zones: 0-1, 15-15, 18-18, 34-34 [ 153.575168][ T5353] EXT4-fs (loop1): orphan cleanup on readonly fs [ 153.576894][ T5353] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 153.579378][ T5353] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 153.598259][ T5353] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 153.611327][ T5353] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.390: bg 0: block 40: padding at end of block bitmap is not set [ 153.636772][ T5353] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 153.649327][ T5353] EXT4-fs (loop1): 1 truncate cleaned up [ 153.660713][ T5353] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 153.885428][ T5360] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 153.904724][ T5135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.909215][ T5135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.920732][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.924722][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.927498][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.006607][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.195362][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.231460][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.669983][ T5135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.702889][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.704877][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.976940][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.979935][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.127751][ T5417] netlink: 52 bytes leftover after parsing attributes in process `syz.0.403'. [ 156.525758][ T5135] device veth0_vlan entered promiscuous mode [ 156.571693][ T5418] loop1: detected capacity change from 0 to 1024 [ 156.577517][ T5135] device veth1_vlan entered promiscuous mode [ 156.651844][ T5135] device veth0_macvtap entered promiscuous mode [ 156.661914][ T5135] device veth1_macvtap entered promiscuous mode [ 156.690977][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.697467][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.699946][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.710755][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.717052][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.720059][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.729059][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.731933][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.737591][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.740119][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.749117][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.751611][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.758635][ T5135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.771037][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.773835][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.779124][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.781788][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.791206][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.796616][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.805878][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.809228][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.811811][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.814762][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.817212][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.819886][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.823562][ T5135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.828264][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.831108][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.860866][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.867096][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.876030][ T5418] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.407: casefold flag without casefold feature [ 156.879643][ T5418] EXT4-fs (loop1): get root inode failed [ 156.881332][ T5418] EXT4-fs (loop1): mount failed [ 156.881518][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.885710][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.888527][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.891327][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.895144][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.897861][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.900941][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.904401][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.907050][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.910769][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.954162][ T5406] device syzkaller0 entered promiscuous mode [ 156.965413][ T5135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.967717][ T5135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.970019][ T5135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.973624][ T5135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.031369][ T5434] loop0: detected capacity change from 0 to 512 [ 157.039437][ T5434] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 157.144399][ T5434] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 157.146592][ T5434] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 157.148815][ T5434] System zones: 0-1, 15-15, 18-18, 34-34 [ 157.151139][ T5434] EXT4-fs (loop0): orphan cleanup on readonly fs [ 157.162424][ T5434] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 157.166794][ T5434] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 157.170833][ T5434] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 157.180437][ T5434] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.411: bg 0: block 40: padding at end of block bitmap is not set [ 157.187415][ T5434] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 157.190313][ T5434] EXT4-fs (loop0): 1 truncate cleaned up [ 157.191912][ T5434] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 157.748585][ T4516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.750854][ T4516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.935474][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.266917][ T682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.269127][ T682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.274727][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.972570][ T5457] netlink: 52 bytes leftover after parsing attributes in process `syz.4.417'. [ 159.519603][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 160.861620][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 160.883820][ T5482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.885842][ T5482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.890970][ T5482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.900326][ T5482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.957942][ T5484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.424'. [ 161.619767][ T5505] netlink: 52 bytes leftover after parsing attributes in process `syz.3.431'. [ 163.794616][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 164.457886][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 164.471701][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 164.520589][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 165.068611][ T4570] Bluetooth: hci2: command 0x0406 tx timeout [ 165.120026][ T5536] tipc: Started in network mode [ 165.121665][ T5536] tipc: Node identity ffffffff, cluster identity 4711 [ 165.137945][ T5536] tipc: Node number set to 4294967295 [ 165.239199][ T5548] syz.1.450 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 165.632127][ T5561] netlink: 52 bytes leftover after parsing attributes in process `syz.2.452'. [ 167.615718][ T26] audit: type=1326 audit(167.580:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.2.454" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf229a8 code=0x0 [ 167.851256][ T5577] loop3: detected capacity change from 0 to 8 [ 169.642525][ T5577] SQUASHFS error: Failed to read block 0x738: -5 [ 169.644172][ T5577] SQUASHFS error: Unable to read metadata cache entry [736] [ 170.347857][ T5611] netlink: 52 bytes leftover after parsing attributes in process `syz.3.464'. [ 170.857998][ T5614] loop1: detected capacity change from 0 to 128 [ 170.934012][ T5614] EXT4-fs (loop1): Ignoring removed nobh option [ 170.986983][ T5614] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 172.187059][ T5647] loop3: detected capacity change from 0 to 2048 [ 172.192664][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 172.394305][ T5652] netlink: 52 bytes leftover after parsing attributes in process `syz.2.481'. [ 172.961022][ T5666] loop2: detected capacity change from 0 to 512 [ 172.973843][ T5647] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 173.043891][ T5666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 173.062689][ T5666] System zones: 1-12 [ 173.064567][ T5666] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #11: comm syz.2.485: iget: bogus i_mode (0) [ 173.086171][ T5666] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.485: couldn't read orphan inode 11 (err -117) [ 173.097398][ T5666] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.198320][ T5679] loop1: detected capacity change from 0 to 256 [ 173.229248][ T5678] loop0: detected capacity change from 0 to 512 [ 173.286531][ T5679] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 173.298686][ T5679] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 173.313795][ T5678] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 173.921370][ T5678] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.490: corrupted in-inode xattr [ 173.931855][ T5678] EXT4-fs (loop0): Remounting filesystem read-only [ 173.940456][ T5678] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.490: couldn't read orphan inode 15 (err -117) [ 173.977964][ T5678] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpid,norecovery,. Quota mode: none. [ 174.102672][ T5692] udc-core: couldn't find an available UDC or it's busy [ 174.104720][ T5692] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 174.278878][ T5690] netlink: 52 bytes leftover after parsing attributes in process `syz.4.495'. [ 174.312245][ T5562] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.363724][ T5701] loop1: detected capacity change from 0 to 2048 [ 174.406970][ T5701] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.438917][ T5707] binder: 5705:5707 tried to acquire reference to desc 0, got 1 instead [ 174.458714][ T4076] binder: release 5705:5707 transaction 10 out, still active [ 174.466453][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.484818][ T4076] binder: undelivered TRANSACTION_COMPLETE [ 174.537896][ T3603] binder: send failed reply for transaction 10, target dead [ 176.312144][ T5562] usb 1-1: unable to read config index 0 descriptor/all [ 176.314046][ T5562] usb 1-1: can't read configurations, error -71 [ 176.490290][ T5732] device syzkaller0 entered promiscuous mode [ 176.784653][ T5746] netlink: 52 bytes leftover after parsing attributes in process `syz.1.512'. [ 177.066595][ T5762] loop1: detected capacity change from 0 to 256 [ 178.043719][ T5762] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 178.055343][ T5762] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 178.243435][ T4073] Bluetooth: hci6: command 0x0407 tx timeout [ 179.178399][ T5785] netlink: 52 bytes leftover after parsing attributes in process `syz.3.529'. [ 179.180713][ T5786] loop0: detected capacity change from 0 to 512 [ 179.237146][ T5786] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 179.286497][ T5786] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 179.288642][ T5786] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 179.290733][ T5786] System zones: 0-1, 15-15, 18-18, 34-34 [ 179.294709][ T5786] EXT4-fs (loop0): orphan cleanup on readonly fs [ 179.296276][ T5786] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 179.298572][ T5786] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 179.322142][ T5786] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 179.324326][ T5780] device syzkaller0 entered promiscuous mode [ 179.326131][ T5786] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.527: bg 0: block 40: padding at end of block bitmap is not set [ 179.338480][ T5786] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 179.341232][ T5786] EXT4-fs (loop0): 1 truncate cleaned up [ 179.346182][ T5786] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 179.513641][ T4073] Bluetooth: hci5: command 0x0406 tx timeout [ 179.522324][ T5798] loop3: detected capacity change from 0 to 1024 [ 181.437085][ T5798] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.531: casefold flag without casefold feature [ 181.441507][ T5798] EXT4-fs (loop3): get root inode failed [ 181.444038][ T5798] EXT4-fs (loop3): mount failed [ 183.363759][ T5834] netlink: 52 bytes leftover after parsing attributes in process `syz.0.540'. [ 184.105790][ T5852] loop2: detected capacity change from 0 to 512 [ 184.170324][ T5840] device syzkaller0 entered promiscuous mode [ 184.356310][ T5852] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.304903][ T5866] loop0: detected capacity change from 0 to 1024 [ 185.326267][ T5868] loop1: detected capacity change from 0 to 512 [ 185.487502][ T5870] loop3: detected capacity change from 0 to 1024 [ 185.579504][ T5870] EXT4-fs (loop3): Ignoring removed orlov option [ 186.158644][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 186.161103][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.555'. [ 186.166426][ T5868] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.182495][ T5868] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 186.185139][ T5868] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.554: invalid indirect mapped block 2683928664 (level 1) [ 186.192674][ T5868] EXT4-fs (loop1): Remounting filesystem read-only [ 186.194495][ T5868] EXT4-fs (loop1): 1 truncate cleaned up [ 186.196604][ T5868] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 186.250509][ T5870] EXT4-fs (loop3): Test dummy encryption mode enabled [ 186.254719][ T5870] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 186.257837][ T5870] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 186.734638][ T5866] EXT4-fs error (device loop0): ext4_fill_super:4840: inode #2: comm syz.0.553: casefold flag without casefold feature [ 186.851729][ T5866] EXT4-fs (loop0): get root inode failed [ 186.853705][ T5866] EXT4-fs (loop0): mount failed [ 186.903283][ T5870] EXT4-fs (loop3): invalid journal inode [ 186.904795][ T5870] EXT4-fs (loop3): can't get journal size [ 187.147118][ T5870] EXT4-fs (loop3): mounted filesystem without journal. Opts: data=writeback,norecovery,orlov,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 187.177012][ T5887] netlink: 52 bytes leftover after parsing attributes in process `syz.1.557'. [ 187.410785][ T5896] loop4: detected capacity change from 0 to 128 [ 187.509861][ T5896] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 187.516277][ T5896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.565755][ T5908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.566'. [ 187.630077][ T5913] netlink: 52 bytes leftover after parsing attributes in process `syz.2.569'. [ 187.683715][ T5910] device syzkaller0 entered promiscuous mode [ 187.759210][ T5925] loop2: detected capacity change from 0 to 1024 [ 187.856430][ T5925] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.572: casefold flag without casefold feature [ 187.887616][ T5925] EXT4-fs (loop2): get root inode failed [ 187.889339][ T5925] EXT4-fs (loop2): mount failed [ 188.068433][ T5940] netlink: 45 bytes leftover after parsing attributes in process `syz.4.575'. [ 189.003349][ T5562] Bluetooth: hci0: command 0x0401 tx timeout [ 189.163158][ T5952] loop2: detected capacity change from 0 to 1024 [ 189.183095][ T5959] netlink: 52 bytes leftover after parsing attributes in process `syz.3.582'. [ 189.357457][ T5952] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.377930][ T5968] loop3: detected capacity change from 0 to 512 [ 189.382146][ T5968] EXT4-fs (loop3): Ignoring removed orlov option [ 189.842224][ T5968] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 190.097004][ T5979] loop1: detected capacity change from 0 to 2048 [ 190.202526][ T5979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.303965][ T5987] loop2: detected capacity change from 0 to 1024 [ 190.340967][ T5987] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.587: casefold flag without casefold feature [ 190.356232][ T5995] netlink: 52 bytes leftover after parsing attributes in process `syz.3.595'. [ 191.258721][ T5987] EXT4-fs (loop2): get root inode failed [ 191.260259][ T5987] EXT4-fs (loop2): mount failed [ 191.369472][ T6003] input: syz0 as /devices/virtual/input/input5 [ 191.487783][ T6017] loop4: detected capacity change from 0 to 512 [ 191.549399][ T6017] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 191.560295][ T6001] device syzkaller0 entered promiscuous mode [ 191.816786][ T6029] loop4: detected capacity change from 0 to 512 [ 191.907946][ T6029] EXT4-fs (loop4): orphan cleanup on readonly fs [ 191.910515][ T6029] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 191.918316][ T6038] netlink: 52 bytes leftover after parsing attributes in process `syz.1.608'. [ 191.920949][ T6029] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 191.957622][ T6029] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.603: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 191.979496][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 191.993077][ T6029] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.603: couldn't read orphan inode 13 (err -117) [ 192.009497][ T6029] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.052857][ T6029] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 192.242660][ T6050] loop4: detected capacity change from 0 to 128 [ 192.262595][ T6053] loop1: detected capacity change from 0 to 512 [ 192.330080][ T6055] loop3: detected capacity change from 0 to 1024 [ 192.372918][ T6053] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 192.465087][ T6053] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.613: corrupted in-inode xattr [ 192.468728][ T6053] EXT4-fs (loop1): Remounting filesystem read-only [ 192.470553][ T6053] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.613: couldn't read orphan inode 15 (err -117) [ 192.474620][ T6053] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpid,norecovery,. Quota mode: none. [ 192.489384][ T6053] udc-core: couldn't find an available UDC or it's busy [ 192.491199][ T6053] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 192.611461][ T26] audit: type=1326 audit(192.550:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff872f29a8 code=0x7ffc0000 [ 192.762233][ T6062] No such timeout policy "syz1" [ 193.797287][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.876784][ T26] audit: type=1326 audit(192.550:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff872f29a8 code=0x7ffc0000 [ 193.921282][ T26] audit: type=1326 audit(192.550:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff872f0e24 code=0x7ffc0000 [ 193.946578][ T26] audit: type=1326 audit(192.550:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff872f29a8 code=0x7ffc0000 [ 193.980405][ T26] audit: type=1326 audit(192.550:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff872f29a8 code=0x7ffc0000 [ 194.012112][ T26] audit: type=1326 audit(192.550:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=11 compat=0 ip=0xffff872f29a8 code=0x7ffc0000 [ 194.042154][ T26] audit: type=1326 audit(192.550:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff872f29a8 code=0x7ffc0000 [ 194.048985][ T6066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.616'. [ 194.081982][ T26] audit: type=1326 audit(192.550:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff872f29a8 code=0x7ffc0000 [ 194.087909][ T26] audit: type=1326 audit(192.550:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff872f29a8 code=0x7ffc0000 [ 194.130903][ T26] audit: type=1326 audit(192.550:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff872f29a8 code=0x7ffc0000 [ 194.294914][ T6072] loop3: detected capacity change from 0 to 2048 [ 194.301474][ T6072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.411139][ T6070] device syzkaller0 entered promiscuous mode [ 194.548626][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.621'. [ 195.750590][ T6110] loop1: detected capacity change from 0 to 512 [ 196.527507][ T6110] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 197.243325][ T6126] futex_wake_op: syz.4.637 tries to shift op by 36; fix this program [ 197.944265][ T6131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.639'. [ 198.014979][ T6133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.059671][ T6128] device syzkaller0 entered promiscuous mode [ 198.063536][ T6133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.079978][ T6133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.275823][ T6164] xt_hashlimit: max too large, truncated to 1048576 [ 202.158848][ T6159] loop1: detected capacity change from 0 to 4096 [ 202.461208][ T6171] input: syz0 as /devices/virtual/input/input7 [ 203.330672][ T6176] loop2: detected capacity change from 0 to 2048 [ 203.351398][ T6159] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.405204][ T6176] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 203.419411][ T6176] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.434660][ T6159] EXT4-fs (loop1): shut down requested (2) [ 203.486683][ T6159] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 203.769438][ T6189] device syzkaller0 entered promiscuous mode [ 205.885844][ T6210] udc-core: couldn't find an available UDC or it's busy [ 205.887846][ T6210] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 206.595605][ T6211] chnl_net:caif_netlink_parms(): no params data found [ 206.631018][ T6222] loop4: detected capacity change from 0 to 512 [ 206.702302][ T3603] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 206.719144][ T6222] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.669: casefold flag without casefold feature [ 206.743097][ T6222] EXT4-fs (loop4): get root inode failed [ 206.744558][ T6222] EXT4-fs (loop4): mount failed [ 206.783558][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.785553][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.790447][ T6211] device bridge_slave_0 entered promiscuous mode [ 206.797750][ T6232] loop2: detected capacity change from 0 to 512 [ 206.829532][ T6211] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.831465][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.836373][ T6211] device bridge_slave_1 entered promiscuous mode [ 206.910981][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 206.916136][ T13] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.924532][ T6232] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 206.934912][ T6222] udc-core: couldn't find an available UDC or it's busy [ 206.936755][ T6222] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 206.952342][ T3603] usb 1-1: Using ep0 maxpacket: 16 [ 206.971840][ T6211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.979488][ T6211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.185582][ T6211] team0: Port device team_slave_0 added [ 207.190587][ T6211] team0: Port device team_slave_1 added [ 207.363010][ T3603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.371694][ T3603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.431125][ T3603] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.757154][ T3603] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 207.915150][ T3603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.041106][ T4076] Bluetooth: hci0: command 0x0409 tx timeout [ 208.052921][ T3603] usb 1-1: config 0 descriptor?? [ 208.087653][ T6240] loop2: detected capacity change from 0 to 2048 [ 208.095644][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.107178][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.126238][ T6240] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 208.136563][ T6211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.140595][ T6240] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.156656][ T6223] chnl_net:caif_netlink_parms(): no params data found [ 208.167441][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.174832][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.191936][ T6211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.326264][ T6240] netlink: 92 bytes leftover after parsing attributes in process `syz.2.672'. [ 208.434333][ T6211] device hsr_slave_0 entered promiscuous mode [ 208.472417][ T6211] device hsr_slave_1 entered promiscuous mode [ 208.512101][ T6211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.514994][ T6211] Cannot create hsr debugfs directory [ 208.516882][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.520151][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.529422][ T6223] device bridge_slave_0 entered promiscuous mode [ 208.538722][ T3603] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 208.552461][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.555154][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.983593][ T4073] Bluetooth: hci7: command 0x0409 tx timeout [ 209.387002][ T6223] device bridge_slave_1 entered promiscuous mode [ 209.465320][ T3603] microsoft 0003:045E:07DA.0003: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 209.468377][ T3603] microsoft 0003:045E:07DA.0003: no inputs found [ 209.470103][ T3603] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 209.476017][ T3603] usb 1-1: USB disconnect, device number 7 [ 209.722751][ T136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.116793][ T25] Bluetooth: hci0: command 0x041b tx timeout [ 211.190760][ T6223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.222529][ T6223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.299987][ T136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.324322][ T6256] device syzkaller0 entered promiscuous mode [ 211.337898][ T6223] team0: Port device team_slave_0 added [ 211.381782][ T6223] team0: Port device team_slave_1 added [ 211.392147][ T25] Bluetooth: hci7: command 0x041b tx timeout [ 211.414442][ T136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.430980][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.442264][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.459430][ T6223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.467213][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.469025][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.486543][ T6223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.532173][ T4075] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 211.550548][ T136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.061478][ T6273] binder: 6268:6273 tried to acquire reference to desc 0, got 1 instead [ 212.233464][ T6273] binder: 6268:6273 got transaction with invalid parent offset or type [ 212.235821][ T6273] binder: 6268:6273 transaction failed 29201/-22, size 96-24 line 3286 [ 212.778794][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.807228][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 212.847324][ T6277] loop2: detected capacity change from 0 to 1024 [ 212.854386][ T6223] device hsr_slave_0 entered promiscuous mode [ 212.862268][ T4075] usb 1-1: Using ep0 maxpacket: 16 [ 212.882828][ T6223] device hsr_slave_1 entered promiscuous mode [ 212.914098][ T6277] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.680: casefold flag without casefold feature [ 212.918298][ T6277] EXT4-fs (loop2): get root inode failed [ 212.919862][ T6277] EXT4-fs (loop2): mount failed [ 212.927934][ T6223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.929777][ T6223] Cannot create hsr debugfs directory [ 212.982344][ T4075] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.985041][ T4075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.987954][ T4075] usb 1-1: New USB device found, idVendor=05ff, idProduct=030a, bcdDevice= 0.00 [ 212.991615][ T4075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.008822][ T4075] usb 1-1: config 0 descriptor?? [ 213.286373][ T6211] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.438844][ T6211] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.472158][ T4072] Bluetooth: hci7: command 0x040f tx timeout [ 213.492811][ T4075] hid (null): global environment stack underflow [ 213.494577][ T4075] hid (null): global environment stack underflow [ 213.496292][ T4075] hid (null): report_id 0 is invalid [ 213.498031][ T4075] hid (null): global environment stack underflow [ 213.514066][ T4075] hid-generic 0003:05FF:030A.0004: unknown main item tag 0xd [ 213.518276][ T4075] hid-generic 0003:05FF:030A.0004: unexpected long global item [ 213.522856][ T4075] hid-generic: probe of 0003:05FF:030A.0004 failed with error -22 [ 213.567223][ T6211] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.599418][ T6305] device syzkaller0 entered promiscuous mode [ 213.697509][ T4075] usb 1-1: USB disconnect, device number 8 [ 213.707835][ T6211] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.424304][ T6348] loop4: detected capacity change from 0 to 1024 [ 214.433459][ T6211] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 214.484640][ T6211] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.537657][ T6348] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.693: casefold flag without casefold feature [ 214.541882][ T6348] EXT4-fs (loop4): get root inode failed [ 214.543569][ T6348] EXT4-fs (loop4): mount failed [ 214.572644][ T6211] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.624142][ T6211] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 214.736556][ T6357] device syzkaller0 entered promiscuous mode [ 214.768602][ T6223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.784471][ T6223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.832596][ T4075] Bluetooth: hci0: command 0x0419 tx timeout [ 214.933421][ T6223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.984036][ T6223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.048807][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 215.048822][ T26] audit: type=1107 audit(215.010:119): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''P' [ 215.291746][ T6211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.328535][ T6223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.333978][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.336722][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.343413][ T6211] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.356979][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.359889][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.365848][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.368166][ T6154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.393320][ T6223] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.400684][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.406292][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.416657][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.421317][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.428546][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.434410][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.436365][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.440867][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.448385][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.481718][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.493115][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.499151][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.501133][ T6154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.509377][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.516217][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.519033][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.521662][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.524379][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.526117][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.528457][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.531264][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.534136][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.536917][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.539280][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.560304][ T21] Bluetooth: hci7: command 0x0419 tx timeout [ 215.702275][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.706529][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.709425][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.731232][ T6211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.745415][ T6211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.949841][ T6392] xt_SECMARK: invalid mode: 0 [ 216.783441][ T6399] loop2: detected capacity change from 0 to 1024 [ 216.825832][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.829610][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.834802][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.846673][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.862367][ T6399] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.704: casefold flag without casefold feature [ 216.866061][ T6399] EXT4-fs (loop2): get root inode failed [ 216.867598][ T6399] EXT4-fs (loop2): mount failed [ 216.880738][ T136] device hsr_slave_0 left promiscuous mode [ 216.926393][ T136] device hsr_slave_1 left promiscuous mode [ 216.993151][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.995386][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.999350][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.001344][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.010210][ T136] device bridge_slave_1 left promiscuous mode [ 217.017263][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.198093][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.852319][ T136] device veth1_macvtap left promiscuous mode [ 217.853929][ T136] device veth0_macvtap left promiscuous mode [ 217.855562][ T136] device veth1_vlan left promiscuous mode [ 217.857111][ T136] device veth0_vlan left promiscuous mode [ 218.114442][ T6441] loop4: detected capacity change from 0 to 512 [ 218.157744][ T6441] EXT4-fs (loop4): 1 truncate cleaned up [ 218.159330][ T6441] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.234662][ T136] team0 (unregistering): Port device team_slave_1 removed [ 218.245549][ T136] team0 (unregistering): Port device team_slave_0 removed [ 218.255066][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.289897][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.442979][ T136] bond0 (unregistering): Released all slaves [ 218.537981][ T6223] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.540625][ T6223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.549185][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.552358][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.555806][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.558638][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.561210][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.565347][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.568214][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.571061][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.597553][ T6417] device syzkaller0 entered promiscuous mode [ 218.749890][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.752229][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.798148][ T6211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.848468][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.851282][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.901261][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.905859][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.908710][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.922525][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.939797][ T6211] device veth0_vlan entered promiscuous mode [ 218.994035][ T6211] device veth1_vlan entered promiscuous mode [ 219.037211][ T6223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.070819][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.082325][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 219.088667][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.091134][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.121385][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.130014][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.210572][ T6211] device veth0_macvtap entered promiscuous mode [ 219.214393][ T6477] loop4: detected capacity change from 0 to 8 [ 219.217381][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.608869][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.020484][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.056759][ T6477] SQUASHFS error: lzo decompression failed, data probably corrupt [ 220.058945][ T6477] SQUASHFS error: Failed to read block 0x91: -5 [ 220.060603][ T6477] SQUASHFS error: Unable to read metadata cache entry [8f] [ 220.071274][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.103223][ T6223] device veth0_vlan entered promiscuous mode [ 220.107134][ T6211] device veth1_macvtap entered promiscuous mode [ 220.118382][ T6477] SQUASHFS error: Unable to read inode 0x11f [ 220.136259][ T6223] device veth1_vlan entered promiscuous mode [ 220.151317][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.160902][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.163668][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.176407][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 220.178987][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.181513][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.238461][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.241267][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.262428][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.265275][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.267939][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.270737][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.311319][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.315844][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.318679][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.321460][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.334647][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.363304][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.366115][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.373857][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.381329][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.394014][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.396791][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.421894][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.425403][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.427952][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.430684][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.464332][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.467139][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.501208][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.518197][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.521088][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.524312][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.529904][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.544995][ T6211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.547333][ T6211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.549546][ T6211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.551793][ T6211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.596238][ T6223] device veth0_macvtap entered promiscuous mode [ 220.625393][ T6223] device veth1_macvtap entered promiscuous mode [ 220.666948][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.671684][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.681482][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.688375][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.691006][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.699982][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.706739][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.709498][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.711926][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.721555][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.728198][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.731237][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.740888][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.756951][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.759873][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.764319][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.767324][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.773028][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.776321][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.778899][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.781716][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.785550][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.788480][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.791245][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.795055][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.797703][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.800591][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.803661][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.806215][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.810883][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.834456][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.837614][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.849917][ T6223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.854339][ T6223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.857399][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.859746][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.873085][ T6223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.875729][ T6223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.888529][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.906496][ T6509] loop4: detected capacity change from 0 to 512 [ 220.933141][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.947672][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.952142][ T6509] EXT4-fs (loop4): Unrecognized mount option "func=FILE_CHECK" or missing value [ 220.976258][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.183635][ T4517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.186056][ T4517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.214466][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.217142][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.194181][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.196825][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 222.497350][ T6530] udc-core: couldn't find an available UDC or it's busy [ 222.499216][ T6530] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 222.786502][ T6536] device syzkaller0 entered promiscuous mode [ 223.066392][ T6546] loop0: detected capacity change from 0 to 2048 [ 223.155917][ T6548] loop1: detected capacity change from 0 to 4096 [ 223.202661][ T6546] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.271762][ T6548] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.302674][ T6548] EXT4-fs (loop1): shut down requested (2) [ 223.328666][ T6548] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 223.472080][ T4780] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 223.832366][ T4780] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 223.835016][ T4780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.843544][ T4780] usb 1-1: config 0 descriptor?? [ 223.883546][ T4780] cp210x 1-1:0.0: cp210x converter detected [ 224.041229][ T6574] loop4: detected capacity change from 0 to 256 [ 224.542391][ T4780] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 224.545187][ T4780] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 224.555493][ T4780] usb 1-1: cp210x converter now attached to ttyUSB0 [ 224.569707][ T4780] usb 1-1: USB disconnect, device number 9 [ 224.586256][ T4780] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 224.590206][ T4780] cp210x 1-1:0.0: device disconnected [ 224.789427][ T6579] chnl_net:caif_netlink_parms(): no params data found [ 224.868237][ T6593] device syzkaller0 entered promiscuous mode [ 224.906265][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.909507][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.928789][ T6579] device bridge_slave_0 entered promiscuous mode [ 225.102893][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.103690][ T6611] loop4: detected capacity change from 0 to 8 [ 225.104950][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.109971][ T6579] device bridge_slave_1 entered promiscuous mode [ 225.172434][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.178557][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.242470][ T6579] team0: Port device team_slave_0 added [ 225.249168][ T6579] team0: Port device team_slave_1 added [ 225.279215][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.281158][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.339211][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.369733][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.371610][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.418610][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.625788][ T6579] device hsr_slave_0 entered promiscuous mode [ 225.662815][ T6579] device hsr_slave_1 entered promiscuous mode [ 225.781870][ T6627] loop4: detected capacity change from 0 to 512 [ 225.817496][ T6630] loop2: detected capacity change from 0 to 256 [ 225.822361][ T13] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 225.830194][ T6579] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.870399][ T6627] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 225.871339][ T6630] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 225.912267][ T6579] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.981195][ T6579] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.166485][ T6579] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.241351][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.245414][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.248292][ T13] usb 1-1: New USB device found, idVendor=05ac, idProduct=0062, bcdDevice= 0.00 [ 226.257042][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.269172][ T13] usb 1-1: config 0 descriptor?? [ 226.375205][ T6641] device syzkaller0 entered promiscuous mode [ 226.523042][ T4076] Bluetooth: hci7: command 0x0409 tx timeout [ 226.550120][ T6579] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.605825][ T6579] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.661068][ T6579] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.719682][ T6579] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.745468][ T13] hid-generic 0003:05AC:0062.0005: unbalanced delimiter at end of report description [ 226.749772][ T13] hid-generic: probe of 0003:05AC:0062.0005 failed with error -22 [ 226.919585][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.949118][ T13] usb 1-1: USB disconnect, device number 10 [ 226.956991][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.959575][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.970518][ T6579] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.977817][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.980833][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.983733][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.985776][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.000404][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.013469][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.016995][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.019821][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.021834][ T4243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.039261][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.058001][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.065993][ T6663] loop4: detected capacity change from 0 to 1024 [ 227.070176][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.086278][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.091349][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.106655][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.111794][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.136470][ T6579] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.139238][ T6579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.169806][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.177060][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.189775][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.198357][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.406921][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.533284][ T6673] device syzkaller0 entered promiscuous mode [ 228.786898][ T4105] Bluetooth: hci7: command 0x041b tx timeout [ 229.321466][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.324667][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.351002][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.405447][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.408943][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.493863][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.496672][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.503135][ T6579] device veth0_vlan entered promiscuous mode [ 229.516129][ T6579] device veth1_vlan entered promiscuous mode [ 229.530380][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.533516][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.534946][ T6714] loop0: detected capacity change from 0 to 512 [ 229.540443][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.573344][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.575937][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.578690][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.643606][ T6579] device veth0_macvtap entered promiscuous mode [ 229.659697][ T6714] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 229.679574][ T6579] device veth1_macvtap entered promiscuous mode [ 229.693880][ T6714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e128, mo2=0002] [ 229.706428][ T6714] System zones: 1-12 [ 229.714231][ T6714] EXT4-fs (loop0): orphan cleanup on readonly fs [ 230.039067][ T6714] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.791: invalid indirect mapped block 12 (level 1) [ 230.063045][ T6714] EXT4-fs (loop0): Remounting filesystem read-only [ 230.064993][ T6714] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.791: invalid indirect mapped block 2 (level 2) [ 230.090299][ T6714] EXT4-fs (loop0): 1 truncate cleaned up [ 230.101270][ T6714] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noload,nogrpid,errors=remount-ro,data_err=ignore. Quota mode: none. [ 230.201083][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.204968][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.209260][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.225324][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.239472][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.256250][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.269676][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.294581][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.310786][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.327867][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.342300][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.358947][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.372991][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.381720][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.399169][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.485802][ T6726] device syzkaller0 entered promiscuous mode [ 230.489668][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.496784][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 230.503708][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.520808][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.708800][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.711684][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.716524][ T6743] udc-core: couldn't find an available UDC or it's busy [ 230.720432][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.730317][ T6743] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 230.733375][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.736087][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.740309][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.744145][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.746944][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.749568][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.760607][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.767466][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.770205][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.773575][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.776384][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.780200][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.786017][ T6579] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.788267][ T6579] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.790468][ T6579] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.802295][ T6579] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.809855][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.815614][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.843261][ T4105] Bluetooth: hci7: command 0x040f tx timeout [ 230.899778][ T6751] loop4: detected capacity change from 0 to 512 [ 230.978197][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.980438][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.991562][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.000683][ T6751] netlink: 566 bytes leftover after parsing attributes in process `syz.4.809'. [ 231.076066][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.079843][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.098887][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 231.238431][ T6766] loop4: detected capacity change from 0 to 256 [ 231.349652][ T6762] loop1: detected capacity change from 0 to 4096 [ 231.401969][ T6766] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 231.428330][ T6766] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 231.457666][ T6762] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.468102][ T6762] EXT4-fs (loop1): shut down requested (2) [ 231.494263][ T6762] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 231.609985][ T26] audit: type=1107 audit(231.570:120): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H“ø' [ 231.625465][ T6579] [ 231.626174][ T6579] ====================================================== [ 231.628131][ T6579] WARNING: possible circular locking dependency detected [ 231.630106][ T6579] 5.15.167-syzkaller #0 Not tainted [ 231.631548][ T6579] ------------------------------------------------------ [ 231.633515][ T6579] syz-executor/6579 is trying to acquire lock: [ 231.635183][ T6579] ffff0000c8d77120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_del+0xf0/0x4cc [ 231.637926][ T6579] [ 231.637926][ T6579] but task is already holding lock: [ 231.639866][ T6579] ffff800016d361a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 231.642483][ T6579] [ 231.642483][ T6579] which lock already depends on the new lock. [ 231.642483][ T6579] [ 231.645242][ T6579] [ 231.645242][ T6579] the existing dependency chain (in reverse order) is: [ 231.647670][ T6579] [ 231.647670][ T6579] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 231.649676][ T6579] __mutex_lock_common+0x194/0x2154 [ 231.651175][ T6579] mutex_lock_nested+0xa4/0xf8 [ 231.652615][ T6579] hci_remote_features_evt+0x480/0x940 [ 231.654140][ T6579] hci_event_packet+0x5ec/0x12b4 [ 231.655558][ T6579] hci_rx_work+0x1c0/0x7c4 [ 231.656842][ T6579] process_one_work+0x790/0x11b8 [ 231.658272][ T6579] worker_thread+0x910/0x1034 [ 231.659640][ T6579] kthread+0x37c/0x45c [ 231.660930][ T6579] ret_from_fork+0x10/0x20 [ 231.662269][ T6579] [ 231.662269][ T6579] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 231.664243][ T6579] __mutex_lock_common+0x194/0x2154 [ 231.665733][ T6579] mutex_lock_nested+0xa4/0xf8 [ 231.667148][ T6579] sco_sock_connect+0x170/0x848 [ 231.668517][ T6579] __sys_connect+0x268/0x290 [ 231.669885][ T6579] __arm64_sys_connect+0x7c/0x94 [ 231.671268][ T6579] invoke_syscall+0x98/0x2b8 [ 231.672628][ T6579] el0_svc_common+0x138/0x258 [ 231.674000][ T6579] do_el0_svc+0x58/0x14c [ 231.675218][ T6579] el0_svc+0x7c/0x1f0 [ 231.676446][ T6579] el0t_64_sync_handler+0x84/0xe4 [ 231.677966][ T6579] el0t_64_sync+0x1a0/0x1a4 [ 231.679303][ T6579] [ 231.679303][ T6579] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 231.681742][ T6579] __lock_acquire+0x32d4/0x7638 [ 231.683261][ T6579] lock_acquire+0x240/0x77c [ 231.684605][ T6579] lock_sock_nested+0xec/0x1ec [ 231.686030][ T6579] sco_conn_del+0xf0/0x4cc [ 231.687420][ T6579] sco_disconn_cfm+0x8c/0xdc [ 231.688705][ T6579] hci_conn_hash_flush+0x104/0x220 [ 231.690247][ T6579] hci_dev_do_close+0x7e4/0x1060 [ 231.691675][ T6579] hci_unregister_dev+0x248/0x4d4 [ 231.693183][ T6579] vhci_release+0x74/0xc4 [ 231.694423][ T6579] __fput+0x1c4/0x800 [ 231.695613][ T6579] ____fput+0x20/0x30 [ 231.696769][ T6579] task_work_run+0x130/0x1e4 [ 231.698151][ T6579] do_exit+0x670/0x20bc [ 231.699399][ T6579] do_group_exit+0x110/0x268 [ 231.700751][ T6579] __wake_up_parent+0x0/0x60 [ 231.702125][ T6579] invoke_syscall+0x98/0x2b8 [ 231.703519][ T6579] el0_svc_common+0x138/0x258 [ 231.704856][ T6579] do_el0_svc+0x58/0x14c [ 231.706143][ T6579] el0_svc+0x7c/0x1f0 [ 231.707416][ T6579] el0t_64_sync_handler+0x84/0xe4 [ 231.708873][ T6579] el0t_64_sync+0x1a0/0x1a4 [ 231.710283][ T6579] [ 231.710283][ T6579] other info that might help us debug this: [ 231.710283][ T6579] [ 231.712867][ T6579] Chain exists of: [ 231.712867][ T6579] sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock [ 231.712867][ T6579] [ 231.716558][ T6579] Possible unsafe locking scenario: [ 231.716558][ T6579] [ 231.718532][ T6579] CPU0 CPU1 [ 231.719982][ T6579] ---- ---- [ 231.721556][ T6579] lock(hci_cb_list_lock); [ 231.722689][ T6579] lock(&hdev->lock); [ 231.724548][ T6579] lock(hci_cb_list_lock); [ 231.726486][ T6579] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 231.728063][ T6579] [ 231.728063][ T6579] *** DEADLOCK *** [ 231.728063][ T6579] [ 231.730404][ T6579] 3 locks held by syz-executor/6579: [ 231.731861][ T6579] #0: ffff0000eddccff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060 [ 231.734620][ T6579] #1: ffff0000eddcc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x338/0x1060 [ 231.737167][ T6579] #2: ffff800016d361a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 231.739974][ T6579] [ 231.739974][ T6579] stack backtrace: [ 231.741529][ T6579] CPU: 0 PID: 6579 Comm: syz-executor Not tainted 5.15.167-syzkaller #0 [ 231.743809][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 231.746520][ T6579] Call trace: [ 231.747422][ T6579] dump_backtrace+0x0/0x530 [ 231.748580][ T6579] show_stack+0x2c/0x3c [ 231.749769][ T6579] dump_stack_lvl+0x108/0x170 [ 231.751004][ T6579] dump_stack+0x1c/0x58 [ 231.752076][ T6579] print_circular_bug+0x150/0x1b8 [ 231.753407][ T6579] check_noncircular+0x2cc/0x378 [ 231.754785][ T6579] __lock_acquire+0x32d4/0x7638 [ 231.756150][ T6579] lock_acquire+0x240/0x77c [ 231.757287][ T6579] lock_sock_nested+0xec/0x1ec [ 231.758597][ T6579] sco_conn_del+0xf0/0x4cc [ 231.759849][ T6579] sco_disconn_cfm+0x8c/0xdc [ 231.761070][ T6579] hci_conn_hash_flush+0x104/0x220 [ 231.762588][ T6579] hci_dev_do_close+0x7e4/0x1060 [ 231.764045][ T6579] hci_unregister_dev+0x248/0x4d4 [ 231.765450][ T6579] vhci_release+0x74/0xc4 [ 231.766663][ T6579] __fput+0x1c4/0x800 [ 231.767842][ T6579] ____fput+0x20/0x30 [ 231.768888][ T6579] task_work_run+0x130/0x1e4 [ 231.770209][ T6579] do_exit+0x670/0x20bc [ 231.771303][ T6579] do_group_exit+0x110/0x268 [ 231.772534][ T6579] __wake_up_parent+0x0/0x60 [ 231.773811][ T6579] invoke_syscall+0x98/0x2b8 [ 231.775083][ T6579] el0_svc_common+0x138/0x258 [ 231.776391][ T6579] do_el0_svc+0x58/0x14c [ 231.777588][ T6579] el0_svc+0x7c/0x1f0 [ 231.778669][ T6579] el0t_64_sync_handler+0x84/0xe4 [ 231.779928][ T6579] el0t_64_sync+0x1a0/0x1a4 [ 232.174737][ T136] device hsr_slave_0 left promiscuous mode [ 232.222392][ T136] device hsr_slave_1 left promiscuous mode [ 232.282213][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.284303][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.286921][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.288941][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.291618][ T136] device bridge_slave_1 left promiscuous mode [ 232.295329][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.353889][ T136] device bridge_slave_0 left promiscuous mode [ 232.355768][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.472221][ T136] device veth1_macvtap left promiscuous mode [ 232.474029][ T136] device veth0_macvtap left promiscuous mode [ 232.475705][ T136] device veth1_vlan left promiscuous mode [ 232.477300][ T136] device veth0_vlan left promiscuous mode [ 232.621881][ T136] team0 (unregistering): Port device team_slave_1 removed [ 232.631001][ T136] team0 (unregistering): Port device team_slave_0 removed [ 232.638467][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.667415][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.767732][ T136] bond0 (unregistering): Released all slaves [ 235.127566][ T4516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.306589][ T4516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.359330][ T4516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.416430][ T4516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.858245][ T4516] device hsr_slave_0 left promiscuous mode [ 236.882265][ T4516] device hsr_slave_1 left promiscuous mode [ 236.952132][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.954319][ T4516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.956800][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.958906][ T4516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.961248][ T4516] device bridge_slave_1 left promiscuous mode [ 236.963318][ T4516] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.002822][ T4516] device bridge_slave_0 left promiscuous mode [ 237.004612][ T4516] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.122243][ T4516] device veth1_macvtap left promiscuous mode [ 237.123855][ T4516] device veth0_macvtap left promiscuous mode [ 237.125517][ T4516] device veth1_vlan left promiscuous mode [ 237.127046][ T4516] device veth0_vlan left promiscuous mode [ 237.272332][ T4516] team0 (unregistering): Port device team_slave_1 removed [ 237.278523][ T4516] team0 (unregistering): Port device team_slave_0 removed [ 237.285517][ T4516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.337931][ T4516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.447655][ T4516] bond0 (unregistering): Released all slaves