last executing test programs: 1m3.694714849s ago: executing program 1 (id=1546): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x804810, &(0x7f0000000a00)={[], [{@smackfshat={'smackfshat', 0x3d, 'ext4\x00HR\xcc|\xfb\xdd\xaf\xa2\x9a\x9a\xdc(\xec+\x9cuJHz\xf4\xb8\xc2\x8e\xde\xb8f\xefQ\xbf\x18\xa0W\x16m\xf5\xc0+\xc0\xfd\xfc7'}}, {@audit}]}, 0x26, 0x77f, &(0x7f0000000b00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000"/19, @ANYRES32=r3, @ANYBLOB="000000000000000008000500", @ANYBLOB], 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x3, &(0x7f0000000280)) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2100) 1m2.585849284s ago: executing program 1 (id=1564): socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c00000000000000000000000700000044150512"], 0x30}, 0x40880) 1m2.541399044s ago: executing program 1 (id=1567): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) 1m2.335001247s ago: executing program 1 (id=1570): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000400)={[{@fat=@nfs}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8no}, {@fat=@quiet}, {@uni_xlateno}, {@fat=@check_strict}, {@fat=@nfs_stale_rw}, {@numtail}, {@uni_xlateno}, {@utf8}, {@uni_xlate}]}, 0x0, 0x275, &(0x7f0000000a00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 1m0.617480359s ago: executing program 1 (id=1576): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 59.173730058s ago: executing program 1 (id=1590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x2}) 58.561069556s ago: executing program 32 (id=1590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x2}) 8.304971613s ago: executing program 5 (id=2094): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 7.818736659s ago: executing program 4 (id=2105): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 7.621345762s ago: executing program 4 (id=2106): landlock_restrict_self(0xffffffffffffffff, 0x3) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x577, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000400)={[{@resuid}, {@barrier_val={'barrier', 0x3d, 0x83fc}}, {@noblock_validity}, {@discard}, {@data_ordered}, {@grpid}, {@nodiscard}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x18c1c04, 0x0, 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) readlinkat(r0, &(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000180)=""/205, 0xcd) 5.906126224s ago: executing program 4 (id=2113): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a020102000000000000000e0816de8b6e010000000100"], 0x1d) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.990278086s ago: executing program 3 (id=2116): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 4.940485887s ago: executing program 4 (id=2117): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000000c0)}) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001680)="f31552c51ef8205abfa9f8ff810b310cabf01c94d4ce91d436423cf90c15d97c1217cc21e800e1a7c1ffe6b70eb4e86ad3d217ad07e656cdbdf756ca5078", 0x3e) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x82, &(0x7f00000008c0)=ANY=[], 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140), 0x14) 4.938664747s ago: executing program 5 (id=2118): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'wlan1\x00', 0x400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32], 0x20}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4.871150957s ago: executing program 0 (id=2120): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRESOCT], 0x1, 0x1282, &(0x7f0000002880)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0xfefc, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff89) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 4.825212238s ago: executing program 3 (id=2121): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) 4.732703659s ago: executing program 3 (id=2123): landlock_restrict_self(0xffffffffffffffff, 0x3) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x577, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$exfat(0x0, &(0x7f00000004c0)='./file1\x00', 0x804000, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x18c1c04, 0x0, 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) readlinkat(r0, &(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000180)=""/205, 0xcd) 3.275717838s ago: executing program 0 (id=2124): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") setrlimit(0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0xff7d) r2 = io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0x23cf, 0x0, 0xfffffffc}) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@deltaction={0x114, 0x31, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff1}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc7}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000540)) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x52, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa060000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="508080129078bc31ce47"], 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="f80000000101015bfcffff00000000000a00000944001980080002000200000008000200b00000000800010080000000080002002008000008000200080a0000080002000200000008000100020000000800020004080000080008400000a71d9800018014000180080001000000000008000200ac14141b060003400000000006000340000200002c0001801400030000000000000000000000000000000000140004"], 0xf8}}, 0x8004) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000001b80)={[{@orlov}, {@jqfmt_vfsv0}, {@user_xattr}, {@resuid}, {@auto_da_alloc}, {@dioread_nolock}, {@barrier}]}, 0xff, 0x4a9, &(0x7f00000016c0)="$eJzs3M9vFFUcAPDvbFug/GpFREHQVTQSf7RQUDl4UKOJB01MvOCxtgUrCzW0JkIaLcbg0ZB4Nx5J/Au8eTHqwZh41cSjISHamFA81czsDGy32x+7tPTHfj7Jdt7rm91535l5s2/m7UwAbauc/kkidkbE7xHRU83OnaFcncxMTw7dmp4cSmJ29p2/k2y+m9OTQ8Wsxft25JkjpYjS50m8nMxf7vjFS2cHK5WRC3m+f+Lch/3jFy89N3pu8MzImZHzAydPnjh+7MUXBp5fkTjTuG4e+GTs4P433r361tCpq+/99G1arX2HOrLy2jiWdKtBQA2U07X2z2ymvuzJZiq/AeyqSSeda1gRmpLu/enm6sraf090xJ2N1xOvf7amlQNWVfrdtHXh4qlZYBNLYq1rAKyN4os+Pf8tXveo67Eu3HglYkuenpmeHJq5HX9nlPL/d63i8ssRcWrqv6/TVzR7HQIAoAVZ3+bZ7jxX2/8rxb5sWh3r2J2PofRGxH0RsSci7o+IvRHxQEQ274MR8VD1zbM9y1x+uS4/v/9Tut6wzisk7f+9VNP3m6mJP5/0duS5XVn8Xcnp0crI0XydHImuradHK4sOCH3/2m9fLlRW2/9LX+nyi75gXoHrnXUX6IYHJwZXaiXcuBxxoLNR/MntkYA0uP0RcaC5j95dJEafvnYwovGg0NLxL2IFxplmv4l4qrr9p6Iu/kKy+Phk/7aojBztL/aK+X7+9crbeXJLfVmr8Xe3HvIc6fbfPnf/z0su59Oef5PqeG1XVCojF8abX8aVP75Y8Jymxf2/ODWLX96vTj8enJi4cCxiS/Jmli9WdPb/gTvvLfLF/Gn8Rw43bv978vek8T8cEQcj4lBEPBIRj+Z1fywiHo+Iw4vE/+OrT3ywSPxJJNHM9u9YpKxpafzDDY9/t/f/3qR2vL6FRMfZH75b6AC5vO1/IqayY21VdvxbwnIreJerDwAAADaEUkTsjKTUV02Xd0ap1NdX/Q3/3theqoyNTzxzeuyj88PVewR6o6tUXOnqqbkeeiyZyj+xmh/IrxUX5cfz68ZfdXRn+b6hscrwGscO7W7H3PYfRftP/bWiVxqBdcn9WtC+6tt/aY3qAdx7y/n+dy4Am1OD9r9Svy8D1jnn/9C+GrX/T+vy+v+wOc1v/382eGQdsBnp/0P70v6hfWn/0JaWexd/8TyFlh8CMCdR3CzQ+udsW/oO/2t5le+uqquQKK/KJxdbaDUr312zMqO0LlZmmyTSFnNvF9rgYTUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb0P8BAAD//2Pr2v0=") socket$inet6(0xa, 0x2, 0x0) 3.275476148s ago: executing program 5 (id=2125): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) socket(0xa, 0x3, 0x87) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000", 0x9, 0xfffffffffffffffd) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r1, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x24}}, 0x8000) 2.993560432s ago: executing program 4 (id=2126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) pipe2$9p(&(0x7f0000001900), 0x0) 2.267148931s ago: executing program 3 (id=2127): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000000c0)}) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x82, &(0x7f00000008c0)=ANY=[], 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140), 0x14) 2.217778892s ago: executing program 5 (id=2128): syz_read_part_table(0x105c, &(0x7f0000000000)="$eJzsz8FtwjAYBeDXunESVW1X6K2HcuXIEiD2YQXW4MQQ7AVyQlYADt8nS7+f/WTJ4bne87VJhuOc/s5Z/5au63NN+iTlXttekvxPaZhWGVoln8s7HxnbeEub/XK6+y5dbZtSV0kOY/KT1PmyZn965FcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FXdAgAA//9ACAf9") 2.152533533s ago: executing program 2 (id=2130): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x201d, 0x3, 0x1, 0x6b38}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 1.871926446s ago: executing program 2 (id=2131): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1.744653508s ago: executing program 2 (id=2132): socket(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x98}, 0x1, 0xba01}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x80) socket$rds(0x15, 0x5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @remote, 0x9ed}}, 0x24) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYBLOB="080002"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) 1.519284881s ago: executing program 0 (id=2133): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x51e, &(0x7f0000000700)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[], 0x835, 0x0) 1.477643311s ago: executing program 2 (id=2134): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'wlan1\x00', 0x400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32], 0x20}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.391750032s ago: executing program 5 (id=2135): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRESOCT], 0x1, 0x1282, &(0x7f0000002880)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0xfefc, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff89) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 1.391143542s ago: executing program 0 (id=2145): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) ppoll(&(0x7f0000000180)=[{r0, 0x1d4}], 0x1, 0x0, 0x0, 0x0) 1.324946293s ago: executing program 0 (id=2136): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000000c0)}) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001680)="f31552c51ef8205abfa9f8ff810b310cabf01c94d4ce91d436423cf90c15d97c1217cc21e800e1a7c1ffe6b70eb4e86ad3d217ad07e656cdbdf756ca5078", 0x3e) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x82, &(0x7f00000008c0)=ANY=[], 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140), 0x14) 1.245603604s ago: executing program 2 (id=2137): landlock_restrict_self(0xffffffffffffffff, 0x3) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x577, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$exfat(0x0, &(0x7f00000004c0)='./file1\x00', 0x804000, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x18c1c04, 0x0, 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) readlinkat(r0, &(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000180)=""/205, 0xcd) 705.075721ms ago: executing program 3 (id=2138): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000900)='d', 0x1}], 0x1}}], 0x1, 0x8010) 252.612657ms ago: executing program 3 (id=2139): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) socket(0xa, 0x3, 0x87) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000", 0x9, 0xfffffffffffffffd) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r1, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x24}}, 0x8000) 251.733607ms ago: executing program 0 (id=2150): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000000c0)}) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x82, &(0x7f00000008c0)=ANY=[], 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140), 0x14) 112.632919ms ago: executing program 5 (id=2140): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000780)='./bus\x00', 0x20008c0, &(0x7f0000000200)=ANY=[@ANYBLOB='allow_utime=00000000000000000000377,shortname=lower,shortname=winnt,uni_xlate=0,check=strict,uni_xlate=0,iocharset=iso8859-9,dmask=0100000L000000000000000,utf8=0,shortname=wortname=mixed,uni_xlate=0,shortname=mixed,uni_xlAte=1,\x00\x00\x00\x00\x00\x00\x00\x00'], 0x80, 0x364, &(0x7f0000000400)="$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") sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f00000005c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 112.427499ms ago: executing program 2 (id=2141): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) 0s ago: executing program 4 (id=2142): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) kernel console output (not intermixed with test programs): 1/-22, size -334-24 line 2917 [ 138.176923][ T3606] Bluetooth: hci4: command 0x0411 tx timeout [ 138.203407][ T4428] binder: undelivered TRANSACTION_ERROR: 29201 [ 138.261971][ T6039] batman_adv: batadv0: Adding interface: dummy0 [ 138.272769][ T6039] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.312838][ T6039] batman_adv: batadv0: Interface activated: dummy0 [ 138.354792][ T6044] batadv0: mtu less than device minimum [ 138.379913][ T6044] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.387343][ T6044] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.394424][ T6044] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.401508][ T6044] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.408676][ T6044] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.415750][ T6044] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.422730][ T6044] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.429774][ T6044] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.436781][ T6044] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.682580][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.673444][ T6058] udc-core: couldn't find an available UDC or it's busy [ 139.675533][ T6058] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.759460][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 140.761969][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 140.782971][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 140.788583][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 140.830683][ T6082] device bridge_slave_0 left promiscuous mode [ 140.833848][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.844544][ T6086] loop1: detected capacity change from 0 to 128 [ 140.896002][ T6082] device bridge_slave_1 left promiscuous mode [ 140.905419][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.966394][ T6082] bond0: (slave bond_slave_0): Releasing backup interface [ 141.024990][ T6082] bond0: (slave bond_slave_1): Releasing backup interface [ 141.124338][ T6082] team0: Port device team_slave_0 removed [ 141.131534][ T6082] team0: Port device team_slave_1 removed [ 141.137121][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.151250][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.155529][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 141.158259][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 141.350270][ T6096] netlink: 36 bytes leftover after parsing attributes in process `syz.0.741'. [ 141.733193][ T4428] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 141.961994][ T6113] netlink: 48 bytes leftover after parsing attributes in process `syz.4.748'. [ 142.011021][ T6119] loop4: detected capacity change from 0 to 128 [ 142.672918][ T4428] usb 1-1: config 1 interface 0 has no altsetting 0 [ 143.020685][ T6132] team0 speed is unknown, defaulting to 1000 [ 143.022568][ T6132] team0 speed is unknown, defaulting to 1000 [ 143.034416][ T6132] team0 speed is unknown, defaulting to 1000 [ 143.038370][ T6132] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.054863][ T6132] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 143.102043][ T6132] team0 speed is unknown, defaulting to 1000 [ 143.113997][ T6132] team0 speed is unknown, defaulting to 1000 [ 143.124136][ T6132] team0 speed is unknown, defaulting to 1000 [ 143.139750][ T6132] team0 speed is unknown, defaulting to 1000 [ 143.163463][ T6132] team0 speed is unknown, defaulting to 1000 [ 143.165765][ T6132] team0 speed is unknown, defaulting to 1000 [ 143.175668][ T6132] team0 speed is unknown, defaulting to 1000 [ 143.177639][ T4428] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 143.178942][ T6132] team0 speed is unknown, defaulting to 1000 [ 143.180547][ T4428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.184173][ T4428] usb 1-1: Product: syz [ 143.194413][ T4428] usb 1-1: Manufacturer: syz [ 143.195669][ T4428] usb 1-1: SerialNumber: syz [ 143.684753][ T6148] tipc: Started in network mode [ 143.697491][ T6148] tipc: Node identity 4, cluster identity 4711 [ 143.705824][ T6148] tipc: Node number set to 4 [ 143.812634][ T6153] loop4: detected capacity change from 0 to 128 [ 143.944404][ T4428] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 144.143046][ T6164] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 144.217722][ T6164] bond1: (slave gretap1): making interface the new active one [ 144.220832][ T6164] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 144.364115][ T6179] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.776'. [ 145.242416][ T6196] 8021q: VLANs not supported on ip6tnl0 [ 145.409453][ T4074] usb 1-1: USB disconnect, device number 6 [ 145.413104][ T4074] usblp0: removed [ 145.481327][ T6207] binder: 6205:6207 ioctl 4018620d 0 returned -22 [ 145.490664][ T6207] binder: tried to use weak ref as strong ref [ 145.498017][ T6207] binder: 6205:6207 Acquire 1 refcount change on invalid ref 0 ret -22 [ 145.506387][ T6207] binder: 6205:6207 got transaction to invalid handle, 1 [ 145.513104][ T6207] binder: 6205:6207 transaction failed 29201/-22, size -334-24 line 2917 [ 145.523974][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.610115][ T6215] device batadv_slave_0 entered promiscuous mode [ 145.725495][ T6222] udc-core: couldn't find an available UDC or it's busy [ 145.727540][ T6222] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 145.875651][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 146.004937][ T6237] binder: 6235:6237 ioctl 4018620d 0 returned -22 [ 146.007104][ T6237] binder: tried to use weak ref as strong ref [ 146.008791][ T6237] binder: 6235:6237 Acquire 1 refcount change on invalid ref 0 ret -22 [ 146.025145][ T6237] binder: 6235:6237 got transaction to invalid handle, 1 [ 146.032227][ T6237] binder: 6235:6237 transaction failed 29201/-22, size -334-24 line 2917 [ 146.043099][ T4074] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.232803][ T6251] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.236171][ T6251] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 146.241140][ T6251] tipc: Started in network mode [ 146.242615][ T6251] tipc: Node identity 4, cluster identity 4711 [ 146.245026][ T6251] tipc: Node number set to 4 [ 146.672673][ T6269] binder: 6268:6269 ioctl 4018620d 0 returned -22 [ 146.675356][ T6269] binder: tried to use weak ref as strong ref [ 146.677271][ T6269] binder: 6268:6269 Acquire 1 refcount change on invalid ref 0 ret -22 [ 146.679957][ T6269] binder: 6268:6269 got transaction to invalid handle, 1 [ 146.682018][ T6269] binder: 6268:6269 transaction failed 29201/-22, size -334-24 line 2917 [ 146.685063][ T3608] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.977794][ T6277] netlink: 92 bytes leftover after parsing attributes in process `syz.4.817'. [ 147.061751][ T6277] netlink: 'syz.4.817': attribute type 13 has an invalid length. [ 147.086574][ T6277] netlink: 'syz.4.817': attribute type 17 has an invalid length. [ 147.291674][ T6288] udc-core: couldn't find an available UDC or it's busy [ 147.294307][ T6288] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 147.319257][ T6277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.330335][ T6277] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.373273][ T6277] net_ratelimit: 10 callbacks suppressed [ 147.373280][ T6277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.379870][ T7] team0 speed is unknown, defaulting to 1000 [ 147.540797][ T6294] loop4: detected capacity change from 0 to 2048 [ 147.610581][ T6294] EXT4-fs (loop4): Unrecognized mount option "smackfshat=ext4" or missing value [ 147.730766][ T6300] binder: 6299:6300 ioctl c0306201 0 returned -14 [ 147.739322][ T6300] binder: 6299:6300 got transaction to invalid handle, 1 [ 147.741285][ T6300] binder: 6299:6300 transaction failed 29201/-22, size -334-24 line 2917 [ 147.744779][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.022079][ T6311] netlink: 'syz.1.831': attribute type 1 has an invalid length. [ 148.140120][ T6311] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 148.190161][ T4269] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 148.205117][ T6311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.305038][ T4123] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 148.360232][ T6314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.378863][ T6319] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.834'. [ 148.453887][ T6314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.509910][ T6327] binder: 6326:6327 ioctl c0306201 0 returned -14 [ 148.512328][ T6327] binder: 6326:6327 got transaction to invalid handle, 1 [ 148.519020][ T6327] binder: 6326:6327 transaction failed 29201/-22, size -334-24 line 2917 [ 148.522046][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.570740][ T6314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.622231][ T6334] loop2: detected capacity change from 0 to 1024 [ 148.678097][ T6314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.689610][ T6334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.883755][ T6314] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.912320][ T6314] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.951264][ T6314] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.966837][ T6314] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.188946][ T6358] binder: 6357:6358 ioctl c0306201 0 returned -14 [ 149.191272][ T6358] binder: 6357:6358 got transaction to invalid handle, 1 [ 149.209374][ T6358] binder: 6357:6358 transaction failed 29201/-22, size -334-24 line 2917 [ 149.212609][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.822796][ T6372] netlink: 'syz.4.855': attribute type 10 has an invalid length. [ 149.829632][ T6372] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 149.938959][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 151.321429][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 151.408165][ T6395] loop2: detected capacity change from 0 to 2048 [ 151.486174][ T6395] EXT4-fs (loop2): Unrecognized mount option "smackfshat=ext4" or missing value [ 151.588880][ T6401] netlink: 'syz.0.867': attribute type 10 has an invalid length. [ 151.727249][ T6401] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.811354][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 152.503002][ T3608] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.506589][ T6428] device batadv_slave_1 entered promiscuous mode [ 152.509509][ T6427] device batadv_slave_1 left promiscuous mode [ 152.742787][ T3608] usb 1-1: Using ep0 maxpacket: 8 [ 152.862968][ T3608] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.024063][ T3608] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 1.01 [ 153.026701][ T3608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.028844][ T3608] usb 1-1: Product: syz [ 153.029902][ T3608] usb 1-1: Manufacturer: syz [ 153.031161][ T3608] usb 1-1: SerialNumber: syz [ 153.057555][ T3608] usb 1-1: config 0 descriptor?? [ 153.214519][ T3608] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 153.309923][ T4019] udevd[4019]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.324001][ T4428] usb 1-1: USB disconnect, device number 7 [ 153.611479][ T6471] binder: 6470:6471 BC_FREE_BUFFER u0000000000000000 no match [ 153.716600][ T6478] loop2: detected capacity change from 0 to 2048 [ 153.825546][ T26] audit: type=1326 audit(153.810:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d22728 code=0x7ffc0000 [ 153.836926][ T26] audit: type=1326 audit(153.820:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff98d20c54 code=0x7ffc0000 [ 153.852769][ T26] audit: type=1326 audit(153.830:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d22728 code=0x7ffc0000 [ 153.859309][ T26] audit: type=1326 audit(153.830:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=23 compat=0 ip=0xffff98d22728 code=0x7ffc0000 [ 153.864224][ T6478] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.865375][ T26] audit: type=1326 audit(153.830:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d22728 code=0x7ffc0000 [ 154.009179][ T6499] loop0: detected capacity change from 0 to 1024 [ 154.076995][ T6499] EXT4-fs (loop0): Ignoring removed orlov option [ 154.078985][ T6499] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 154.696308][ T6499] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 155.923528][ T6536] udc-core: couldn't find an available UDC or it's busy [ 155.925585][ T6536] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 156.023602][ T6540] xt_limit: Overflow, try lower: 687865856/40 [ 156.145390][ T6546] loop0: detected capacity change from 0 to 2048 [ 156.178805][ T6550] loop4: detected capacity change from 0 to 1024 [ 156.234264][ T6550] EXT4-fs (loop4): Ignoring removed orlov option [ 156.235939][ T6550] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 156.238841][ T6546] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.318202][ T6550] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 156.629706][ T6565] udc-core: couldn't find an available UDC or it's busy [ 156.631706][ T6565] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 156.700914][ T6570] binder: 6569:6570 tried to acquire reference to desc 0, got 1 instead [ 156.722096][ T6570] binder: 6569:6570 ioctl c0306201 0 returned -14 [ 156.922540][ T6585] loop0: detected capacity change from 0 to 1024 [ 156.959330][ T6588] loop2: detected capacity change from 0 to 512 [ 157.106349][ T6588] EXT4-fs (loop2): Ignoring removed oldalloc option [ 157.108326][ T6588] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.140757][ T6588] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #11: comm syz.2.939: iget: bad extended attribute block 65792 [ 157.145742][ T6588] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.939: couldn't read orphan inode 11 (err -117) [ 157.159152][ T6588] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 157.172010][ T6594] loop4: detected capacity change from 0 to 512 [ 157.218143][ T6596] loop0: detected capacity change from 0 to 1024 [ 157.237989][ T6594] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.377639][ T4123] hfsplus: b-tree write err: -5, ino 4 [ 157.386367][ T6604] loop4: detected capacity change from 0 to 128 [ 157.390447][ T6602] binder: 6601:6602 tried to acquire reference to desc 0, got 1 instead [ 157.398857][ T6602] binder: 6601:6602 ioctl c0306201 0 returned -14 [ 157.442801][ T6604] FAT-fs (loop4): bogus logical sector size 0 [ 157.444588][ T6604] FAT-fs (loop4): Can't find a valid FAT filesystem [ 157.558029][ T6615] loop0: detected capacity change from 0 to 1024 [ 157.566585][ T6617] loop1: detected capacity change from 0 to 512 [ 157.610677][ T6621] udc-core: couldn't find an available UDC or it's busy [ 157.612608][ T6621] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 157.614941][ T6615] EXT4-fs (loop0): Ignoring removed orlov option [ 157.616673][ T6615] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 157.649058][ T6615] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 157.660273][ T6617] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 157.670594][ T6617] fscrypt (loop1, inode 15): Error -61 getting encryption context [ 157.710248][ T6629] udc-core: couldn't find an available UDC or it's busy [ 157.712201][ T6629] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 158.014332][ T6632] loop1: detected capacity change from 0 to 512 [ 158.089707][ T6632] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.257659][ T6639] binder: 6638:6639 tried to acquire reference to desc 0, got 1 instead [ 159.350555][ T6652] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.965' sets config #9 [ 159.385367][ T6656] IPv6: NLM_F_REPLACE set, but no existing node found! [ 159.472011][ T6660] loop4: detected capacity change from 0 to 256 [ 159.568181][ T6666] loop2: detected capacity change from 0 to 512 [ 159.594863][ T6660] exfat: Deprecated parameter 'utf8' [ 159.596440][ T6660] exfat: Deprecated parameter 'utf8' [ 159.619547][ T6660] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 159.654211][ T6666] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 159.657268][ T6666] EXT4-fs (loop2): Test dummy encryption mode enabled [ 159.668190][ T6670] binder: BINDER_SET_CONTEXT_MGR already set [ 159.669881][ T6670] binder: 6669:6670 ioctl 4018620d 20000040 returned -16 [ 159.675577][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 159.686610][ T6666] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.970: inode #13: comm syz.2.970: iget: illegal inode # [ 159.693111][ T6666] EXT4-fs (loop2): Remounting filesystem read-only [ 159.695096][ T6666] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.970: couldn't read orphan inode 13 (err -117) [ 160.241357][ T6666] EXT4-fs (loop2): Remounting filesystem read-only [ 160.453056][ T6666] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,i_version,noblock_validity,abort,mblk_io_submit,data_err=ignore,max_dir_size_kb=0x0000000000000000,errors=remount-ro,test_dummy_encryption,bsdgroups,. Quota mode: writeback. [ 160.465936][ T6666] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.970: deleted inode referenced: 15 [ 160.472338][ T6670] binder: tried to use weak ref as strong ref [ 160.474140][ T6670] binder: 6669:6670 Acquire 1 refcount change on invalid ref 0 ret -22 [ 160.547888][ T6666] EXT4-fs (loop2): Remounting filesystem read-only [ 160.642315][ T6677] loop0: detected capacity change from 0 to 1024 [ 160.732917][ T6677] EXT4-fs (loop0): Ignoring removed orlov option [ 160.734731][ T6677] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 162.254592][ T6677] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 162.618180][ T6701] netlink: 61 bytes leftover after parsing attributes in process `syz.4.981'. [ 162.623183][ T26] audit: type=1326 audit(162.610:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.1.980" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d22728 code=0x0 [ 162.648361][ T6703] udc-core: couldn't find an available UDC or it's busy [ 162.652861][ T6703] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 162.901051][ T6708] binder: 6707:6708 tried to acquire reference to desc 0, got 1 instead [ 162.987477][ T6714] loop0: detected capacity change from 0 to 256 [ 163.077029][ T6714] FAT-fs (loop0): Directory bread(block 64) failed [ 163.079008][ T6714] FAT-fs (loop0): Directory bread(block 65) failed [ 163.081450][ T6714] FAT-fs (loop0): Directory bread(block 66) failed [ 163.092867][ T6714] FAT-fs (loop0): Directory bread(block 67) failed [ 163.095024][ T6714] FAT-fs (loop0): Directory bread(block 68) failed [ 163.096868][ T6714] FAT-fs (loop0): Directory bread(block 69) failed [ 163.100698][ T6714] FAT-fs (loop0): Directory bread(block 70) failed [ 163.102559][ T6714] FAT-fs (loop0): Directory bread(block 71) failed [ 163.105210][ T6714] FAT-fs (loop0): Directory bread(block 72) failed [ 163.107060][ T6714] FAT-fs (loop0): Directory bread(block 73) failed [ 163.189965][ T6721] cgroup: noprefix used incorrectly [ 163.228988][ T6723] udc-core: couldn't find an available UDC or it's busy [ 163.234584][ T6723] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 163.305668][ T6727] loop4: detected capacity change from 0 to 1024 [ 163.360284][ T6731] fuse: blksize only supported for fuseblk [ 163.386902][ T6727] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.401757][ T6727] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.993: bg 0: block 393: padding at end of block bitmap is not set [ 163.424588][ T6727] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28 [ 163.431151][ T6727] EXT4-fs (loop4): This should not happen!! Data will be lost [ 163.431151][ T6727] [ 163.446674][ T6727] EXT4-fs (loop4): Total free blocks count 0 [ 163.448419][ T6727] EXT4-fs (loop4): Free/Dirty block details [ 163.450032][ T6727] EXT4-fs (loop4): free_blocks=0 [ 163.452080][ T6727] EXT4-fs (loop4): dirty_blocks=16 [ 163.453759][ T6727] EXT4-fs (loop4): Block reservation details [ 163.455539][ T6727] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 163.505283][ T6723] udc-core: couldn't find an available UDC or it's busy [ 163.507197][ T6723] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 163.526942][ T6742] loop1: detected capacity change from 0 to 1024 [ 163.529827][ T6742] hfsplus: creator requires a 4 character value [ 163.532344][ T6742] hfsplus: unable to parse mount options [ 163.645050][ T6752] loop4: detected capacity change from 0 to 256 [ 163.654684][ T6752] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.657736][ T6752] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 163.685010][ T6752] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 163.698285][ T6757] udc-core: couldn't find an available UDC or it's busy [ 163.700248][ T6757] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 163.893923][ T6761] loop0: detected capacity change from 0 to 8192 [ 163.913105][ T26] audit: type=1326 audit(163.890:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb38b9728 code=0x7ffc0000 [ 164.097203][ T26] audit: type=1326 audit(163.900:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb38b9728 code=0x7ffc0000 [ 164.242857][ T3608] Bluetooth: hci0: command 0x0406 tx timeout [ 164.247026][ T3608] Bluetooth: hci1: command 0x0406 tx timeout [ 164.572847][ T26] audit: type=1326 audit(164.550:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb39bd7fc code=0x7ffc0000 [ 164.610854][ T26] audit: type=1326 audit(164.550:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb39bd7fc code=0x7ffc0000 [ 164.670399][ T26] audit: type=1326 audit(164.550:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb39bd7fc code=0x7ffc0000 [ 164.691741][ T4072] Bluetooth: hci2: command 0x0406 tx timeout [ 164.693704][ T4072] Bluetooth: hci3: command 0x0406 tx timeout [ 164.713994][ T26] audit: type=1326 audit(164.550:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb39bd7fc code=0x7ffc0000 [ 164.719928][ T26] audit: type=1326 audit(164.550:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb39bd7fc code=0x7ffc0000 [ 164.727245][ T26] audit: type=1326 audit(164.550:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb39bd7fc code=0x7ffc0000 [ 164.733303][ T26] audit: type=1326 audit(164.550:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb39bd7fc code=0x7ffc0000 [ 164.791865][ T6770] loop4: detected capacity change from 0 to 512 [ 164.869458][ T6770] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 164.912455][ T6779] loop1: detected capacity change from 0 to 512 [ 164.916775][ T6770] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.1009: invalid block [ 164.922645][ T6770] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1009: invalid indirect mapped block 10 (level 1) [ 164.935927][ T6770] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1009: invalid indirect mapped block 8 (level 1) [ 164.970597][ T6770] EXT4-fs (loop4): 1 truncate cleaned up [ 164.972135][ T6770] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 165.020394][ T6779] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 165.053651][ T6777] loop0: detected capacity change from 0 to 1024 [ 165.062012][ T6779] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,bsddf,commit=0x0000000000000000,mblk_io_submit,barrier=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 165.219806][ T6782] loop2: detected capacity change from 0 to 512 [ 165.257271][ T6786] udc-core: couldn't find an available UDC or it's busy [ 165.259112][ T6786] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 165.328830][ T6788] loop4: detected capacity change from 0 to 256 [ 165.359368][ T6788] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd94015fb, utbl_chksum : 0xe619d30d) [ 166.030494][ T6794] loop2: detected capacity change from 0 to 8192 [ 166.377485][ T6808] loop1: detected capacity change from 0 to 128 [ 166.878675][ T6808] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.171575][ T4110] hfsplus: b-tree write err: -5, ino 4 [ 167.230469][ T6822] netlink: 'syz.1.1028': attribute type 10 has an invalid length. [ 167.325501][ T6822] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 167.992207][ T3608] Bluetooth: hci4: command 0x0405 tx timeout [ 168.214255][ T6854] loop1: detected capacity change from 0 to 512 [ 168.305184][ T6854] EXT4-fs (loop1): Unrecognized mount option "=" or missing value [ 168.319465][ T6855] loop4: detected capacity change from 0 to 8192 [ 168.341323][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'. [ 169.322902][ T6881] udc-core: couldn't find an available UDC or it's busy [ 169.338576][ T6881] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 170.348505][ T6893] loop4: detected capacity change from 0 to 512 [ 170.386969][ T6893] EXT4-fs (loop4): Test dummy encryption mode enabled [ 170.389030][ T6893] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.490214][ T6893] EXT4-fs (loop4): 1 truncate cleaned up [ 170.491819][ T6893] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 173.026362][ T6941] udc-core: couldn't find an available UDC or it's busy [ 173.039638][ T6941] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 173.063265][ T6941] udc-core: couldn't find an available UDC or it's busy [ 173.065167][ T6941] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 173.080680][ T6943] udc-core: couldn't find an available UDC or it's busy [ 173.082573][ T6943] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 173.117394][ T6945] binder: 6944:6945 tried to acquire reference to desc 0, got 1 instead [ 173.120888][ T6945] binder: 6944:6945 got transaction with invalid data ptr [ 173.132903][ T6945] binder: 6944:6945 transaction failed 29201/-14, size 0-24 line 3186 [ 173.136034][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 176.296719][ T6992] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 176.456488][ T6997] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 176.459161][ T6997] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 177.667427][ T7015] loop2: detected capacity change from 0 to 1024 [ 178.095076][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1105'. [ 178.243396][ T7033] udc-core: couldn't find an available UDC or it's busy [ 178.245258][ T7033] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 179.809098][ T7048] loop2: detected capacity change from 0 to 512 [ 180.230470][ T7048] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 180.232472][ T7048] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.261496][ T7048] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 180.274449][ T7048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 181.072556][ T7048] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 181.075536][ T7048] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 181.077946][ T7048] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,data_err=ignore,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 181.085951][ T7056] loop4: detected capacity change from 0 to 1764 [ 181.254502][ T7056] udc-core: couldn't find an available UDC or it's busy [ 181.256460][ T7056] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 181.337565][ T7067] loop1: detected capacity change from 0 to 128 [ 181.403147][ T7067] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 181.420559][ T7067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.551159][ T7076] udc-core: couldn't find an available UDC or it's busy [ 181.554444][ T7076] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 181.610542][ T7078] udc-core: couldn't find an available UDC or it's busy [ 181.612533][ T7078] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 181.730809][ T7086] udc-core: couldn't find an available UDC or it's busy [ 181.733553][ T7086] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 182.945948][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1136'. [ 183.542022][ T26] kauditd_printk_skb: 1682 callbacks suppressed [ 183.542034][ T26] audit: type=1326 audit(183.520:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89c167fc code=0x7ffc0000 [ 183.586189][ T26] audit: type=1326 audit(183.530:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89c167fc code=0x7ffc0000 [ 183.648034][ T7118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.372854][ T26] audit: type=1326 audit(183.530:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b12728 code=0x7ffc0000 [ 184.565860][ T26] audit: type=1326 audit(183.530:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b12728 code=0x7ffc0000 [ 184.572268][ T26] audit: type=1326 audit(183.540:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89c167fc code=0x7ffc0000 [ 184.579216][ T26] audit: type=1326 audit(183.540:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89c167fc code=0x7ffc0000 [ 184.585536][ T26] audit: type=1326 audit(183.540:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89c167fc code=0x7ffc0000 [ 184.591471][ T26] audit: type=1326 audit(184.340:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89c167fc code=0x7ffc0000 [ 184.598119][ T26] audit: type=1326 audit(184.340:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89c167fc code=0x7ffc0000 [ 184.604165][ T26] audit: type=1326 audit(184.340:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89c167fc code=0x7ffc0000 [ 185.756564][ T7139] udc-core: couldn't find an available UDC or it's busy [ 185.758583][ T7139] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 186.243457][ T148] bond1: (slave ip6gretap1): link status up again after 0 ms [ 186.252194][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 186.375258][ T4110] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 186.383845][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1156'. [ 186.387062][ T7155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1156'. [ 186.390631][ T7155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1156'. [ 186.411988][ T7146] team0 speed is unknown, defaulting to 1000 [ 186.514192][ T4110] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 186.634065][ T4110] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 186.743603][ T4110] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 186.853452][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 186.973481][ T4110] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 187.093321][ T4110] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 187.213171][ T4110] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 187.333033][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 187.367270][ T7146] chnl_net:caif_netlink_parms(): no params data found [ 187.461485][ T7171] loop1: detected capacity change from 0 to 1024 [ 187.728610][ T7171] EXT4-fs (loop1): Ignoring removed orlov option [ 187.730383][ T7171] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 188.496171][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 188.502480][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.505189][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.508255][ T7146] device bridge_slave_0 entered promiscuous mode [ 188.511419][ T7171] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 188.518953][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.520889][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.574134][ T7146] device bridge_slave_1 entered promiscuous mode [ 188.753676][ T7146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.760902][ T7146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.848530][ T7146] team0: Port device team_slave_0 added [ 188.852285][ T7146] team0: Port device team_slave_1 added [ 188.917465][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.919440][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.948266][ T7146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.959231][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.961237][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.975255][ T7146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.988557][ T7205] team0 speed is unknown, defaulting to 1000 [ 189.078608][ T7212] udc-core: couldn't find an available UDC or it's busy [ 189.080650][ T7212] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 189.215751][ T7146] device hsr_slave_0 entered promiscuous mode [ 189.278442][ T7146] device hsr_slave_1 entered promiscuous mode [ 189.312882][ T7146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.315009][ T7146] Cannot create hsr debugfs directory [ 190.583574][ T7227] udc-core: couldn't find an available UDC or it's busy [ 190.585543][ T7227] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 190.600997][ T4072] Bluetooth: hci1: command 0x041b tx timeout [ 191.083423][ T7146] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.360369][ T7146] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.266664][ T7146] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.386159][ T7146] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.484147][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.486048][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.486592][ T9] net_ratelimit: 15 callbacks suppressed [ 192.486604][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 192.513707][ T7256] loop2: detected capacity change from 0 to 2048 [ 192.593341][ T7256] EXT4-fs (loop2): Unrecognized mount option "smackfshat=ext4" or missing value [ 192.608840][ T7146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.639545][ T7146] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.717874][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.720460][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.728375][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.735465][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.743644][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.745642][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.757519][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.770279][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.771904][ T4074] Bluetooth: hci1: command 0x040f tx timeout [ 192.780501][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.782552][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.294269][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.299037][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.305633][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.313497][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.331379][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.339401][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.361907][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.391914][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.405082][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.425205][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.435382][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.445460][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.462862][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 193.479847][ T7146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.583389][ T4269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 193.673341][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.675512][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.701744][ T7274] loop1: detected capacity change from 0 to 4096 [ 193.705055][ T7146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.710206][ T7279] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1200'. [ 193.723036][ T7279] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1200'. [ 193.727027][ T7279] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1200'. [ 193.808283][ T4269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 193.890777][ T7274] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.983131][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 194.094057][ T4110] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 194.219714][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 194.593981][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.596988][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.676565][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.679383][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.682574][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.685776][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.725071][ T7146] device veth0_vlan entered promiscuous mode [ 194.754087][ T7146] device veth1_vlan entered promiscuous mode [ 194.802873][ T4074] Bluetooth: hci1: command 0x0419 tx timeout [ 194.842336][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.845068][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.853703][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.856472][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.911083][ T7146] device veth0_macvtap entered promiscuous mode [ 194.915698][ T7146] device veth1_macvtap entered promiscuous mode [ 194.960100][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.966732][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.983942][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.990781][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.010333][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.021459][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.031704][ T7146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.087791][ T7146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.090267][ T7146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.121199][ T7146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.613447][ T4124] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 196.153107][ T4124] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 196.334688][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 196.358958][ T4147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.361332][ T4147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.432618][ T7319] loop2: detected capacity change from 0 to 2048 [ 196.435522][ T4147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.437710][ T4147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.460749][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.463469][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.466067][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.470284][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.473106][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.475864][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.478327][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.564053][ T7323] device batadv_slave_1 entered promiscuous mode [ 196.568291][ T7322] device batadv_slave_1 left promiscuous mode [ 196.596619][ T7319] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.646816][ T7327] loop4: detected capacity change from 0 to 512 [ 196.736702][ T7327] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 196.763215][ T7327] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 196.766158][ T7327] EXT4-fs (loop4): orphan cleanup on readonly fs [ 196.769117][ T7327] __quota_error: 946 callbacks suppressed [ 196.769245][ T7327] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 196.798511][ T7327] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 196.801204][ T7327] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.1152: Failed to acquire dquot type 1 [ 196.828716][ T7327] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1152: bg 0: block 40: padding at end of block bitmap is not set [ 196.851033][ T7327] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 196.854595][ T7327] EXT4-fs (loop4): 1 truncate cleaned up [ 196.856572][ T7327] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,,errors=continue. Quota mode: writeback. [ 197.901000][ T9] net_ratelimit: 5 callbacks suppressed [ 197.901014][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 198.032809][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 198.146662][ T4110] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 198.242431][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.244568][ T7352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.253405][ T4110] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 198.529249][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 198.633062][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 198.742884][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 198.991296][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 199.160982][ T7376] loop4: detected capacity change from 0 to 8 [ 199.165027][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 199.272803][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 200.934914][ T7391] udc-core: couldn't find an available UDC or it's busy [ 200.936887][ T7391] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 201.543392][ T7405] udc-core: couldn't find an available UDC or it's busy [ 201.545377][ T7405] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 201.580912][ T7404] loop2: detected capacity change from 0 to 256 [ 201.670636][ T7404] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0a42a509, utbl_chksum : 0xe619d30d) [ 201.683615][ T4123] tipc: Left network mode [ 201.689912][ T7404] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 201.916195][ T7409] udc-core: couldn't find an available UDC or it's busy [ 201.918189][ T7409] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 202.985856][ T4147] net_ratelimit: 18 callbacks suppressed [ 202.985872][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 203.233454][ T4269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 204.722078][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 204.865028][ T4269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 205.072173][ T4269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 205.314637][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 205.417496][ T7448] bpf_jit: unknown atomic op code f1 [ 205.458665][ T4269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 206.140018][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 206.215929][ T7447] loop2: detected capacity change from 0 to 256 [ 206.271540][ T7447] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 206.298029][ T7447] exFAT-fs (loop2): hint_cluster is invalid (17) [ 207.872893][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.972384][ T7459] netlink: 'syz.4.1260': attribute type 10 has an invalid length. [ 208.003294][ T7462] loop2: detected capacity change from 0 to 512 [ 208.061534][ T7459] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 208.155903][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1259'. [ 208.167396][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 208.316044][ T7468] udc-core: couldn't find an available UDC or it's busy [ 208.318203][ T7468] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 209.023035][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.134471][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.400504][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.592953][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.810943][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.842880][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.975950][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.043359][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.354972][ T4124] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.463363][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 213.320010][ T4123] bond0: (slave wlan1): Releasing backup interface [ 214.163945][ T7546] ODEBUG: Out of memory. ODEBUG disabled [ 214.633961][ T9] net_ratelimit: 9 callbacks suppressed [ 214.633976][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 214.826768][ T4123] device hsr_slave_0 left promiscuous mode [ 214.873325][ T4123] device hsr_slave_1 left promiscuous mode [ 215.060369][ T4123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.064034][ T4123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.067788][ T4123] device bridge_slave_1 left promiscuous mode [ 215.074001][ T4123] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.848897][ T4123] device bridge_slave_0 left promiscuous mode [ 215.850775][ T4123] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.940448][ T7584] 9pnet: Insufficient options for proto=fd [ 215.965102][ T7587] loop2: detected capacity change from 0 to 128 [ 216.062323][ T7593] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1302'. [ 216.094800][ T7587] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.015356][ T7610] 9pnet: Insufficient options for proto=fd [ 217.086779][ T7615] loop1: detected capacity change from 0 to 8 [ 217.131545][ T4123] team0 (unregistering): Port device team_slave_1 removed [ 217.157167][ T4123] team0 (unregistering): Port device team_slave_0 removed [ 217.158161][ T7615] SQUASHFS error: Corrupted symlink [ 217.181144][ T4123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.379122][ T4123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.059028][ T4123] bond0 (unregistering): Released all slaves [ 220.099953][ T7650] 9pnet: Insufficient options for proto=fd [ 220.179837][ T4072] team0 speed is unknown, defaulting to 1000 [ 220.182155][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 220.192865][ T7639] netlink: 'syz.2.1316': attribute type 10 has an invalid length. [ 220.200115][ T7639] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 220.292803][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 220.337534][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 220.538955][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 220.552567][ T7672] loop4: detected capacity change from 0 to 128 [ 221.816992][ T7676] loop2: detected capacity change from 0 to 512 [ 221.885895][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 221.992799][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.102773][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.212849][ T341] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.237138][ T7684] 9pnet: Insufficient options for proto=fd [ 222.273538][ T7676] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,lazytime,nodelalloc,,errors=continue. Quota mode: writeback. [ 222.322949][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.481498][ T341] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.593026][ T341] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 223.250902][ T7703] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 224.680101][ T7713] 9pnet: Insufficient options for proto=fd [ 224.864406][ T7729] loop1: detected capacity change from 0 to 512 [ 225.053842][ T7742] 9pnet: Could not find request transport: fd0x0000000000000003 [ 225.224959][ T4147] net_ratelimit: 12 callbacks suppressed [ 225.224973][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 225.252923][ T7729] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 225.255088][ T7729] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 225.265273][ T7750] 9pnet: Insufficient options for proto=fd [ 225.331106][ T7729] EXT4-fs (loop1): 1 truncate cleaned up [ 225.332975][ T7729] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000001,grpjquota=,nomblk_io_submit,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 225.336104][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 225.452775][ T341] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 225.535314][ T7769] loop1: detected capacity change from 0 to 1024 [ 225.541897][ T7773] 9pnet: Could not find request transport: fd0x0000000000000003 [ 225.562872][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 225.595822][ T7777] TCP: tcp_parse_options: Illegal window scaling value 112 > 14 received [ 225.620265][ T7769] EXT4-fs (loop1): Ignoring removed orlov option [ 225.622064][ T7769] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 225.675147][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 225.689021][ T7769] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 225.842455][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 225.849501][ T7774] loop2: detected capacity change from 0 to 8192 [ 225.985508][ T4110] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 226.102828][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 226.219561][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.036282][ T26] audit: type=1326 audit(227.020:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7820 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ffc0000 [ 227.174938][ T7836] udc-core: couldn't find an available UDC or it's busy [ 227.184635][ T7834] usb usb8: usbfs: process 7834 (syz.4.1395) did not claim interface 0 before use [ 227.194675][ T7836] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 228.615873][ T7870] udc-core: couldn't find an available UDC or it's busy [ 228.643998][ T7870] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 228.798083][ T7874] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.803705][ T7874] blk_update_request: I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.807345][ T7874] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 228.811799][ T7874] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.815342][ T7874] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 228.818021][ T7874] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 228.820145][ T7874] UDF-fs: Scanning with blocksize 512 failed [ 228.827195][ T7874] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.832035][ T7874] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.847788][ T7874] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 228.850573][ T7874] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.853805][ T7874] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 228.856363][ T7874] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 228.858483][ T7874] UDF-fs: Scanning with blocksize 1024 failed [ 228.860376][ T7874] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.863581][ T7874] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.866630][ T7874] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 228.869288][ T7874] blk_update_request: I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.872417][ T7874] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 228.874999][ T7874] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 228.877000][ T7874] UDF-fs: Scanning with blocksize 2048 failed [ 228.878999][ T7874] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.881991][ T7874] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 228.884669][ T7874] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 228.887247][ T7874] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 228.889297][ T7874] UDF-fs: Scanning with blocksize 4096 failed [ 228.890914][ T7874] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 229.487998][ T7887] udc-core: couldn't find an available UDC or it's busy [ 229.507916][ T7887] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 229.758108][ T7897] udc-core: couldn't find an available UDC or it's busy [ 229.760277][ T7897] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 230.234505][ T4124] net_ratelimit: 28 callbacks suppressed [ 230.234543][ T4124] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 230.343347][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 230.462979][ T341] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 230.586646][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 230.692879][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 230.802796][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 230.913950][ T341] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 231.038764][ T7920] loop1: detected capacity change from 0 to 164 [ 231.046951][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 231.122105][ T7920] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 231.129059][ T7927] loop2: detected capacity change from 0 to 256 [ 231.152814][ T4110] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 231.175008][ T7927] FAT-fs (loop2): Unrecognized mount option "dmask=0100000L000000000000000" or missing value [ 231.264520][ T4124] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 231.267110][ T7935] loop1: detected capacity change from 0 to 512 [ 231.327267][ T7939] udc-core: couldn't find an available UDC or it's busy [ 231.334563][ T7935] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.349939][ T7939] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 231.388792][ T7935] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 231.398364][ T7935] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1439: inode #15: comm syz.1.1439: iget: illegal inode # [ 231.412126][ T7935] EXT4-fs (loop1): Remounting filesystem read-only [ 231.417342][ T7935] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1439: couldn't read orphan inode 15 (err -117) [ 232.179353][ T7935] EXT4-fs (loop1): Remounting filesystem read-only [ 232.181249][ T7935] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 232.213117][ T7935] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.1439: inode #15: comm syz.1.1439: iget: illegal inode # [ 232.240001][ T7935] EXT4-fs (loop1): Remounting filesystem read-only [ 232.360347][ T7952] loop2: detected capacity change from 0 to 2048 [ 232.376158][ T7952] EXT4-fs (loop2): Unrecognized mount option "smackfshat=ext4" or missing value [ 232.456951][ T7956] loop1: detected capacity change from 0 to 2048 [ 232.468101][ T7960] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1448'. [ 232.505691][ T7956] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 232.510172][ T7956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.439801][ T7976] fuse: Bad value for 'fd' [ 233.586856][ T7991] udc-core: couldn't find an available UDC or it's busy [ 233.588834][ T7991] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 233.825080][ T7999] loop2: detected capacity change from 0 to 2048 [ 233.909900][ T7999] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 233.923363][ T8004] fuse: Bad value for 'fd' [ 233.925827][ T8004] fuse: Bad value for 'fd' [ 234.038108][ T8008] udc-core: couldn't find an available UDC or it's busy [ 234.040198][ T8008] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 235.292842][ T153] net_ratelimit: 21 callbacks suppressed [ 235.292856][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 235.318652][ T8020] loop2: detected capacity change from 0 to 2048 [ 235.414028][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 235.425109][ T8020] EXT4-fs (loop2): Unrecognized mount option "smackfshat=ext4" or missing value [ 235.477049][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 235.535349][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 235.720540][ T4124] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 235.752093][ T8040] loop1: detected capacity change from 0 to 8 [ 235.759955][ T8042] udc-core: couldn't find an available UDC or it's busy [ 235.928282][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 236.034482][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 236.323475][ T4124] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 236.363020][ T8042] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 236.412860][ T8040] SQUASHFS error: zlib decompression failed, data probably corrupt [ 236.430936][ T8040] SQUASHFS error: Failed to read block 0x4de: -5 [ 236.433759][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 236.449547][ T8040] SQUASHFS error: Failed to read block 0x4e2: -5 [ 236.451345][ T8040] SQUASHFS error: Failed to read block 0x9ca: -5 [ 236.463529][ T8040] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 236.465542][ T8040] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 236.467614][ T8040] SQUASHFS error: Failed to read block 0x535f2: -5 [ 236.552886][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 236.575249][ T8049] binder: 8048:8049 ioctl c00c6211 20000040 returned -22 [ 236.665141][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 236.859811][ T8060] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.199869][ T8074] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1498'. [ 237.226416][ T26] audit: type=1326 audit(237.200:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b12728 code=0x7ffc0000 [ 237.242490][ T26] audit: type=1326 audit(237.200:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=194 compat=0 ip=0xffff89b12728 code=0x7ffc0000 [ 237.249193][ T26] audit: type=1326 audit(237.200:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b12728 code=0x7ffc0000 [ 237.264126][ T26] audit: type=1326 audit(237.200:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b12728 code=0x7ffc0000 [ 237.285030][ T26] audit: type=1326 audit(237.200:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffff89b12728 code=0x7ffc0000 [ 237.304422][ T26] audit: type=1326 audit(237.200:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b12728 code=0x7ffc0000 [ 237.337398][ T8081] fuse: Bad value for 'fd' [ 237.426804][ T8083] loop1: detected capacity change from 0 to 256 [ 238.451997][ T8083] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 238.509819][ T8090] loop2: detected capacity change from 0 to 1024 [ 238.543696][ T26] audit: type=1326 audit(238.530:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ffc0000 [ 238.551177][ T26] audit: type=1326 audit(238.530:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff89863728 code=0x7ffc0000 [ 238.648193][ T26] audit: type=1326 audit(238.530:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ffc0000 [ 238.676570][ T26] audit: type=1326 audit(238.530:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ffc0000 [ 238.791219][ T8110] loop1: detected capacity change from 0 to 1024 [ 238.845552][ T8090] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.040974][ T8137] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1523'. [ 240.230014][ T8146] netlink: 'syz.0.1526': attribute type 10 has an invalid length. [ 241.152991][ T4123] net_ratelimit: 19 callbacks suppressed [ 241.153005][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 241.273560][ T8155] 9pnet: Insufficient options for proto=fd [ 241.281197][ T8157] netlink: 'syz.0.1530': attribute type 29 has an invalid length. [ 241.290600][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 241.317020][ T8157] netlink: 'syz.0.1530': attribute type 29 has an invalid length. [ 241.359195][ T8157] netlink: 'syz.0.1530': attribute type 29 has an invalid length. [ 241.383504][ T8163] netlink: 'syz.4.1534': attribute type 29 has an invalid length. [ 241.385960][ T8163] netlink: 'syz.4.1534': attribute type 29 has an invalid length. [ 241.402812][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 241.474217][ T8163] netlink: 'syz.4.1534': attribute type 29 has an invalid length. [ 241.477735][ T8157] netlink: 'syz.0.1530': attribute type 29 has an invalid length. [ 241.481038][ T8157] netlink: 'syz.0.1530': attribute type 29 has an invalid length. [ 241.490416][ T8163] netlink: 'syz.4.1534': attribute type 29 has an invalid length. [ 241.512777][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 241.622859][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 241.736429][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 241.783713][ T8188] 9pnet: Insufficient options for proto=fd [ 241.832408][ T8189] loop1: detected capacity change from 0 to 2048 [ 241.845199][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 241.896602][ T8198] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1549'. [ 241.901167][ T8189] EXT4-fs (loop1): Unrecognized mount option "smackfshat=ext4" or missing value [ 241.952773][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.062803][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.565949][ T8215] 9pnet: Insufficient options for proto=fd [ 242.680010][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 243.069579][ T8244] loop1: detected capacity change from 0 to 128 [ 243.172982][ T8246] loop2: detected capacity change from 0 to 16 [ 243.960726][ T8246] erofs: (device loop2): mounted with root inode @ nid 36. [ 244.126903][ T8245] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -33 in[62, 4034] out[1849] [ 244.131907][ T8245] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 244.781951][ T8260] 9pnet: Insufficient options for proto=fd [ 244.850414][ T8259] loop2: detected capacity change from 0 to 2048 [ 244.896402][ T8259] EXT4-fs (loop2): Unrecognized mount option "smackfshat=ext4" or missing value [ 245.936872][ T8287] 9pnet: Insufficient options for proto=fd [ 246.253549][ T148] net_ratelimit: 12 callbacks suppressed [ 246.253644][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 246.413184][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 246.543046][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 246.653159][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 246.922798][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.032942][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.073473][ T8306] validate_nla: 12 callbacks suppressed [ 247.073487][ T8306] netlink: 'syz.0.1598': attribute type 10 has an invalid length. [ 247.095407][ T8308] netlink: 'syz.3.1597': attribute type 29 has an invalid length. [ 247.099473][ T8313] 9pnet: Insufficient options for proto=fd [ 247.103113][ T8306] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1598'. [ 247.131813][ T8308] netlink: 'syz.3.1597': attribute type 29 has an invalid length. [ 247.153893][ T8318] netlink: 'syz.3.1597': attribute type 29 has an invalid length. [ 247.164089][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.193636][ T8323] netlink: 'syz.2.1603': attribute type 10 has an invalid length. [ 247.195864][ T8323] netlink: 'syz.2.1603': attribute type 19 has an invalid length. [ 247.198056][ T8323] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.1603'. [ 247.215344][ T8319] loop4: detected capacity change from 0 to 2048 [ 247.291195][ T8329] 9pnet: Insufficient options for proto=fd [ 247.344119][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.359554][ T8319] EXT4-fs (loop4): Unrecognized mount option "smackfshat=ext4" or missing value [ 247.421130][ T8331] C: renamed from team_slave_0 [ 248.093751][ T8331] netlink: 'syz.2.1606': attribute type 1 has an invalid length. [ 248.112334][ T8331] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 248.161651][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.351672][ T8301] chnl_net:caif_netlink_parms(): no params data found [ 248.822835][ T8301] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.832669][ T8301] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.848040][ T8301] device bridge_slave_0 entered promiscuous mode [ 248.864691][ T8301] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.873047][ T8301] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.886398][ T8301] device bridge_slave_1 entered promiscuous mode [ 248.973164][ T8301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.993781][ T8301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.048217][ T8301] team0: Port device team_slave_0 added [ 249.052092][ T8301] team0: Port device team_slave_1 added [ 249.122952][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 249.269929][ T8301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.271880][ T8301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.301752][ T8301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.330490][ T8301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.342656][ T8301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.350677][ T8301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.162598][ T8301] device hsr_slave_0 entered promiscuous mode [ 250.353757][ T8301] device hsr_slave_1 entered promiscuous mode [ 250.423009][ T8301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.425122][ T8301] Cannot create hsr debugfs directory [ 251.105305][ T8389] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1623'. [ 251.113966][ T8381] bond0: (slave wlan1): Error: Slave device does not support XDP [ 251.143354][ T8384] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1625'. [ 251.146075][ T8389] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1623'. [ 251.189124][ T8381] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1623'. [ 251.202793][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 251.237849][ T8393] udc-core: couldn't find an available UDC or it's busy [ 251.239777][ T8393] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 251.262315][ T8381] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1623'. [ 251.274539][ T8384] device syzkaller0 entered promiscuous mode [ 251.314021][ T4147] net_ratelimit: 9 callbacks suppressed [ 251.314034][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 251.422873][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 251.451564][ T8383] delete_channel: no stack [ 251.512032][ T8301] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 251.687754][ T8301] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.295544][ T8301] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.347408][ T8301] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.484966][ T8423] netlink: 'syz.3.1640': attribute type 17 has an invalid length. [ 252.487367][ T8423] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1640'. [ 252.503259][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 252.612894][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 252.667832][ T8301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.700720][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.703490][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.714870][ T8301] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.730767][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.737064][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.750992][ T4147] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.753301][ T4147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.765628][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.813370][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.816167][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.829726][ T4147] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.831712][ T4147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.839075][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.852362][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.855582][ T8449] udc-core: couldn't find an available UDC or it's busy [ 252.860134][ T8449] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 252.866567][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.870541][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.899974][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.905270][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.907949][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.910602][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.919535][ T8301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.924033][ T8301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.927611][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.930173][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.933911][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.952827][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 252.987945][ T8457] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1655'. [ 252.990460][ T8457] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1655'. [ 253.008610][ T8457] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1655'. [ 253.067882][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.121867][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.125485][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.148728][ T8301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.174034][ T4269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.199539][ T8475] netlink: 'syz.2.1661': attribute type 29 has an invalid length. [ 253.201926][ T8475] netlink: 'syz.2.1661': attribute type 29 has an invalid length. [ 253.224149][ T8475] netlink: 'syz.2.1661': attribute type 29 has an invalid length. [ 253.238574][ T8475] netlink: 'syz.2.1661': attribute type 29 has an invalid length. [ 253.259655][ T8475] netlink: 'syz.2.1661': attribute type 29 has an invalid length. [ 253.283105][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 253.284880][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.393041][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.504030][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.537492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.540268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.600116][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.603256][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.615669][ T8301] device veth0_vlan entered promiscuous mode [ 253.624730][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.627839][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.644911][ T8301] device veth1_vlan entered promiscuous mode [ 253.694785][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.697560][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.700176][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.703400][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.707885][ T8301] device veth0_macvtap entered promiscuous mode [ 253.712048][ T8301] device veth1_macvtap entered promiscuous mode [ 253.731359][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.742100][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.749418][ T8515] netlink: 'syz.4.1677': attribute type 11 has an invalid length. [ 253.751576][ T8515] netlink: 'syz.4.1677': attribute type 15 has an invalid length. [ 253.754250][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.757187][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.759975][ T8515] netlink: 'syz.4.1677': attribute type 16 has an invalid length. [ 253.764558][ T8301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.766613][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.768727][ T8515] netlink: 12798 bytes leftover after parsing attributes in process `syz.4.1677'. [ 253.775996][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.781037][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.808649][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.811432][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.820569][ T8521] 9pnet: Could not find request transport: fd0x0000000000000003 [ 253.825619][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.828402][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.840614][ T8301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.840929][ T8522] udc-core: couldn't find an available UDC or it's busy [ 253.850362][ T8522] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 253.858476][ T8301] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.860907][ T8301] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.864180][ T8301] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.866861][ T8301] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.871605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.881154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.886093][ T8524] netlink: 'syz.0.1682': attribute type 10 has an invalid length. [ 253.926904][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.928721][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.946510][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.948792][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.964423][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.985458][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.987828][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.998964][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.270623][ T8544] 9pnet: Could not find request transport: fd0x0000000000000003 [ 254.536852][ T8568] 9pnet: Could not find request transport: fd0x0000000000000003 [ 254.584701][ T8574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1703'. [ 254.634095][ T8578] udc-core: couldn't find an available UDC or it's busy [ 254.637282][ T8578] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 254.656626][ T8571] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 254.666099][ T8574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1703'. [ 254.668834][ T8569] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1703'. [ 254.681934][ T8581] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1703'. [ 255.391062][ T4105] Bluetooth: hci4: command 0x0419 tx timeout [ 255.873242][ T8606] 9pnet: Insufficient options for proto=fd [ 255.963975][ T8609] Illegal XDP return value 2548218656, expect packet loss! [ 256.002536][ T8614] "syz.0.1720" (8614) uses obsolete ecb(arc4) skcipher [ 256.029263][ T8617] loop5: detected capacity change from 0 to 128 [ 256.054002][ T8617] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 256.063307][ T8617] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.098268][ T8620] device syzkaller0 entered promiscuous mode [ 256.325162][ T8633] udc-core: couldn't find an available UDC or it's busy [ 256.327188][ T8633] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 256.337708][ T8635] 9pnet: Insufficient options for proto=fd [ 256.373234][ T4147] net_ratelimit: 16 callbacks suppressed [ 256.373247][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 256.494665][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 256.603990][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 256.646627][ T8650] device lo entered promiscuous mode [ 256.649297][ T8648] device lo left promiscuous mode [ 256.779822][ T8652] trusted_key: encrypted_key: key user:syz not found [ 256.818487][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.223382][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.622872][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.625285][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 257.625296][ T26] audit: type=1326 audit(257.610:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ff00000 [ 257.635263][ T26] audit: type=1326 audit(257.610:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ff00000 [ 257.641029][ T26] audit: type=1326 audit(257.610:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ff00000 [ 257.654144][ T8660] validate_nla: 9 callbacks suppressed [ 257.654155][ T8660] netlink: 'syz.0.1741': attribute type 10 has an invalid length. [ 257.668706][ T8664] 9pnet: Insufficient options for proto=fd [ 257.678131][ T26] audit: type=1326 audit(257.610:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ff00000 [ 257.701940][ T26] audit: type=1326 audit(257.610:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ff00000 [ 257.718797][ T26] audit: type=1326 audit(257.610:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ff00000 [ 257.743175][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.763966][ T26] audit: type=1326 audit(257.610:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ff00000 [ 257.773133][ T26] audit: type=1326 audit(257.610:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ff00000 [ 257.799016][ T26] audit: type=1326 audit(257.610:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ff00000 [ 257.829915][ T26] audit: type=1326 audit(257.610:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ff00000 [ 257.852819][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.773451][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.883460][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.908106][ T8688] loop5: detected capacity change from 0 to 2048 [ 258.920479][ T8691] 9pnet: Insufficient options for proto=fd [ 258.984810][ T8693] netlink: 'syz.3.1755': attribute type 10 has an invalid length. [ 258.988817][ T8693] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 259.001554][ T8688] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 259.025233][ T8688] UDF-fs: Scanning with blocksize 512 failed [ 259.057766][ T8688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.049793][ T8708] udc-core: couldn't find an available UDC or it's busy [ 260.068085][ T8708] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 260.083039][ T8706] loop5: detected capacity change from 0 to 1024 [ 260.093390][ T8706] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 260.120855][ T8704] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 260.153806][ T8706] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,dioread_nolock,. Quota mode: none. [ 260.363387][ T8720] udc-core: couldn't find an available UDC or it's busy [ 260.365373][ T8720] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 260.462876][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.739543][ T8735] netlink: 'syz.5.1772': attribute type 10 has an invalid length. [ 260.872406][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1774'. [ 260.881388][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1774'. [ 261.196770][ T8763] udc-core: couldn't find an available UDC or it's busy [ 261.198835][ T8763] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 261.394228][ T4123] net_ratelimit: 19 callbacks suppressed [ 261.394243][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 261.449412][ T8771] netlink: 'syz.3.1787': attribute type 10 has an invalid length. [ 261.553038][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 261.662836][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 261.772913][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 261.892943][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 261.941183][ T8795] loop4: detected capacity change from 0 to 1024 [ 262.003331][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 262.241924][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 262.451060][ T8812] netlink: 'syz.0.1803': attribute type 10 has an invalid length. [ 262.647599][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.335775][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.452831][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.473566][ T8829] udc-core: couldn't find an available UDC or it's busy [ 263.475557][ T8829] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 263.483558][ T8835] udc-core: couldn't find an available UDC or it's busy [ 263.485492][ T8835] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 264.706627][ T8844] netlink: 'syz.2.1816': attribute type 10 has an invalid length. [ 264.799500][ T8850] udc-core: couldn't find an available UDC or it's busy [ 264.807408][ T8850] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 264.810614][ T8852] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1820'. [ 264.813920][ T8852] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 264.915605][ T8862] 9pnet: Insufficient options for proto=fd [ 265.075065][ T8859] loop2: detected capacity change from 0 to 8 [ 265.197383][ T8859] SQUASHFS error: zlib decompression failed, data probably corrupt [ 265.199637][ T8859] SQUASHFS error: Failed to read block 0x9b: -5 [ 265.214169][ T8859] SQUASHFS error: Unable to read metadata cache entry [99] [ 265.216201][ T8859] SQUASHFS error: Unable to read inode 0x127 [ 265.241324][ T8876] loop4: detected capacity change from 0 to 1024 [ 265.524569][ T8880] process 'syz.3.1833' launched './file0' with NULL argv: empty string added [ 266.141277][ T8882] loop5: detected capacity change from 0 to 512 [ 266.284842][ T8882] EXT4-fs (loop5): Ignoring removed nobh option [ 266.512905][ T4123] net_ratelimit: 18 callbacks suppressed [ 266.512919][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 266.517553][ T8882] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1834: invalid indirect mapped block 256 (level 2) [ 266.533111][ T8882] EXT4-fs (loop5): 2 truncates cleaned up [ 266.534822][ T8882] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,quota,,errors=continue. Quota mode: writeback. [ 266.817276][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 267.074200][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 267.404822][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 267.513411][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 267.623244][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 267.884752][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 267.993470][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.061535][ T8920] udc-core: couldn't find an available UDC or it's busy [ 268.083154][ T8920] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 268.107745][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.200458][ T8926] mmap: syz.3.1852 (8926): VmData 37490688 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 268.212930][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.407387][ T8944] loop2: detected capacity change from 0 to 1024 [ 268.489406][ T8944] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.579375][ T8969] loop2: detected capacity change from 0 to 1024 [ 269.592180][ T4105] hid-generic 0007:0006:0003.0002: item fetching failed at offset 0/1 [ 269.595653][ T4105] hid-generic: probe of 0007:0006:0003.0002 failed with error -22 [ 269.606074][ T8969] EXT4-fs (loop2): Test dummy encryption mode enabled [ 269.625754][ T8969] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,barrier=0x00000000000083fc,noblock_validity,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 269.784353][ T8969] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 269.846771][ T8982] udc-core: couldn't find an available UDC or it's busy [ 269.848746][ T8982] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 269.909719][ T8988] loop4: detected capacity change from 0 to 8 [ 270.502614][ T8995] udc-core: couldn't find an available UDC or it's busy [ 270.504807][ T8995] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 270.511147][ T8994] udc-core: couldn't find an available UDC or it's busy [ 270.521093][ T8994] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 270.592576][ T8995] udc-core: couldn't find an available UDC or it's busy [ 270.594754][ T8995] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 270.608769][ T9000] loop2: detected capacity change from 0 to 764 [ 270.642202][ T9002] udc-core: couldn't find an available UDC or it's busy [ 270.653468][ T9002] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 271.519105][ T9018] device syzkaller0 entered promiscuous mode [ 271.641187][ T9028] loop4: detected capacity change from 0 to 512 [ 271.663090][ T153] net_ratelimit: 20 callbacks suppressed [ 271.663101][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 271.773097][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 271.893462][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.003077][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.113449][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.233057][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.353146][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.462850][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.482362][ T9039] udc-core: couldn't find an available UDC or it's busy [ 272.501075][ T9039] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 272.542010][ T9028] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 272.583129][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.605535][ T9048] binder: 9047:9048 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 272.619606][ T9048] binder: 9048 RLIMIT_NICE not set [ 272.651415][ T9050] udc-core: couldn't find an available UDC or it's busy [ 272.653565][ T9050] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 272.703048][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.259887][ T9080] udc-core: couldn't find an available UDC or it's busy [ 273.286730][ T9080] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 274.439149][ T9099] udc-core: couldn't find an available UDC or it's busy [ 274.441175][ T9099] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 274.490221][ T9104] udc-core: couldn't find an available UDC or it's busy [ 274.492113][ T9104] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 275.448787][ T9111] udc-core: couldn't find an available UDC or it's busy [ 275.450819][ T9111] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 275.653595][ T9121] udc-core: couldn't find an available UDC or it's busy [ 275.655637][ T9121] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 275.663286][ T9119] input: syz0 as /devices/virtual/input/input5 [ 276.698248][ T4123] net_ratelimit: 30 callbacks suppressed [ 276.698269][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 276.835253][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 276.875345][ T9147] udc-core: couldn't find an available UDC or it's busy [ 276.877392][ T9147] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 278.534755][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.805061][ T9152] udc-core: couldn't find an available UDC or it's busy [ 278.807039][ T9152] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 278.865795][ T9154] udc-core: couldn't find an available UDC or it's busy [ 278.868446][ T9154] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 278.922953][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.061764][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.243794][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.353096][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.462859][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.573304][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.684335][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.985406][ T9170] loop5: detected capacity change from 0 to 16 [ 279.997594][ T9167] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 280.174586][ T9170] erofs: (device loop5): mounted with root inode @ nid 36. [ 281.207672][ T9186] udc-core: couldn't find an available UDC or it's busy [ 281.209727][ T9186] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 281.355472][ T9190] loop4: detected capacity change from 0 to 512 [ 281.825633][ T4123] net_ratelimit: 6 callbacks suppressed [ 281.825645][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 282.094794][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 282.125070][ T9190] EXT4-fs (loop4): orphan cleanup on readonly fs [ 282.127507][ T9190] EXT4-fs error (device loop4): ext4_quota_enable:6391: comm syz.4.1951: Bad quota inum: 11, type: 1 [ 282.131982][ T9190] EXT4-fs warning (device loop4): ext4_enable_quotas:6439: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 282.136253][ T9190] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 282.138102][ T9190] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.298079][ T9195] udc-core: couldn't find an available UDC or it's busy [ 282.300202][ T9195] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 282.337673][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 282.356814][ T9192] loop5: detected capacity change from 0 to 2048 [ 282.417488][ T9192] EXT4-fs (loop5): Unrecognized mount option "smackfshat=ext4" or missing value [ 282.454959][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 282.575166][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 282.823454][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.573728][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.686333][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.781922][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1962'. [ 284.792986][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.853869][ T9219] loop5: detected capacity change from 0 to 512 [ 284.858386][ T9219] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (800) [ 284.904516][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 285.120525][ T9233] loop2: detected capacity change from 0 to 1024 [ 285.142467][ T9233] EXT4-fs (loop2): Ignoring removed orlov option [ 285.144400][ T9233] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 285.191607][ T9233] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 285.437394][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'. [ 285.977063][ T9249] loop4: detected capacity change from 0 to 512 [ 286.152661][ T9249] EXT4-fs (loop4): orphan cleanup on readonly fs [ 286.156389][ T9249] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1977: bg 0: block 248: padding at end of block bitmap is not set [ 286.186843][ T9249] __quota_error: 1587 callbacks suppressed [ 286.186854][ T9249] Quota error (device loop4): write_blk: dquota write failed [ 286.190533][ T9249] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 286.210267][ T9249] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.1977: Failed to acquire dquot type 1 [ 286.219147][ T9249] EXT4-fs (loop4): 1 truncate cleaned up [ 286.232542][ T9249] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.274181][ T9264] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1983'. [ 286.329219][ T9267] loop2: detected capacity change from 0 to 2048 [ 286.573110][ T26] audit: type=1326 audit(286.560:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89863728 code=0x7ffc0000 [ 286.581202][ T26] audit: type=1326 audit(286.560:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff899677fc code=0x7ffc0000 [ 286.589829][ T26] audit: type=1326 audit(286.560:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff899677fc code=0x7ffc0000 [ 286.592961][ T9267] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.595845][ T26] audit: type=1326 audit(286.560:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff899677fc code=0x7ffc0000 [ 286.604895][ T26] audit: type=1326 audit(286.560:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff899677fc code=0x7ffc0000 [ 286.610845][ T26] audit: type=1326 audit(286.560:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff899677fc code=0x7ffc0000 [ 286.616970][ T26] audit: type=1326 audit(286.560:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff899677fc code=0x7ffc0000 [ 286.623431][ T26] audit: type=1326 audit(286.560:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff899677fc code=0x7ffc0000 [ 286.934056][ T148] net_ratelimit: 14 callbacks suppressed [ 286.934069][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 287.035486][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1988'. [ 287.052864][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 287.164012][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 287.199283][ T9284] loop5: detected capacity change from 0 to 2048 [ 287.287312][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 287.328595][ T9284] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002] [ 287.331033][ T9284] System zones: 0-4 [ 287.337892][ T9284] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.411983][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 287.525431][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 287.551688][ T9296] loop5: detected capacity change from 0 to 1024 [ 287.610270][ T9296] EXT4-fs (loop5): Ignoring removed orlov option [ 287.612124][ T9296] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 287.652885][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 287.674096][ T9296] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 287.762865][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 287.932950][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 288.155123][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 288.723525][ T9311] udc-core: couldn't find an available UDC or it's busy [ 288.725433][ T9311] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 288.830404][ T9316] netlink: 'syz.5.2002': attribute type 10 has an invalid length. [ 288.835326][ T9320] loop4: detected capacity change from 0 to 164 [ 288.889084][ T9320] Unable to read rock-ridge attributes [ 289.010523][ T9335] loop4: detected capacity change from 0 to 128 [ 289.039463][ T9335] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.091820][ T9341] loop5: detected capacity change from 0 to 1024 [ 289.136013][ T9341] EXT4-fs (loop5): Ignoring removed orlov option [ 289.137911][ T9341] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 289.270925][ T9349] loop4: detected capacity change from 0 to 1024 [ 289.318502][ T9341] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 289.326256][ T9349] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.627454][ T9377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2024'. [ 290.647528][ T9377] tc_dump_action: action bad kind [ 290.654596][ T9375] netlink: 'syz.0.2023': attribute type 10 has an invalid length. [ 290.826086][ T9388] udc-core: couldn't find an available UDC or it's busy [ 290.828048][ T9388] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 290.836197][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2028'. [ 290.925286][ T9392] loop2: detected capacity change from 0 to 512 [ 290.960750][ T9398] netlink: 'syz.5.2035': attribute type 1 has an invalid length. [ 290.963883][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2035'. [ 290.969208][ T9392] EXT4-fs (loop2): Ignoring removed nobh option [ 290.996016][ T9392] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2032: invalid indirect mapped block 256 (level 2) [ 291.009250][ T9392] EXT4-fs (loop2): 2 truncates cleaned up [ 291.015981][ T9392] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 291.016481][ T9402] udc-core: couldn't find an available UDC or it's busy [ 291.032293][ T9402] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 291.239062][ T9410] netlink: 'syz.4.2039': attribute type 10 has an invalid length. [ 291.254502][ T9409] loop2: detected capacity change from 0 to 1024 [ 291.308323][ T9409] EXT4-fs (loop2): Ignoring removed orlov option [ 291.310152][ T9409] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 291.325862][ T9409] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 292.002875][ T433] net_ratelimit: 32 callbacks suppressed [ 292.002915][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 292.122877][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 292.164701][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'. [ 292.253987][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 292.273891][ T9427] loop5: detected capacity change from 0 to 512 [ 292.362941][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 292.396742][ T9427] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 292.402967][ T9431] device wg1 entered promiscuous mode [ 292.456029][ T9442] udc-core: couldn't find an available UDC or it's busy [ 292.457936][ T9442] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 292.470071][ T9443] netlink: 'syz.4.2052': attribute type 10 has an invalid length. [ 292.474326][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 292.548965][ T9450] udc-core: couldn't find an available UDC or it's busy [ 292.548987][ T9450] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 292.584096][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 292.793034][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 293.032537][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 293.144745][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 293.265033][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 293.588554][ T9460] loop5: detected capacity change from 0 to 1024 [ 293.678949][ T9467] devpts: called with bogus options [ 293.706731][ T9460] EXT4-fs (loop5): Ignoring removed orlov option [ 293.708561][ T9460] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 293.759397][ T9460] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 293.836980][ T9480] netlink: 'syz.4.2068': attribute type 10 has an invalid length. [ 293.900850][ T9484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2069'. [ 294.010743][ T9490] udc-core: couldn't find an available UDC or it's busy [ 294.015520][ T9490] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 294.059895][ T9492] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 294.513695][ T9506] udc-core: couldn't find an available UDC or it's busy [ 294.519719][ T9506] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 294.795459][ T9508] loop2: detected capacity change from 0 to 2048 [ 294.892999][ T9508] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 294.920858][ T9517] loop5: detected capacity change from 0 to 128 [ 294.926003][ T9508] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 294.950259][ T9517] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 295.149816][ T9520] netlink: 'syz.2.2083': attribute type 10 has an invalid length. [ 295.204611][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2084'. [ 295.275998][ T9525] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2082'. [ 295.815920][ T9527] udc-core: couldn't find an available UDC or it's busy [ 295.840729][ T9527] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 295.923907][ T9533] loop2: detected capacity change from 0 to 1024 [ 295.957252][ T9537] loop4: detected capacity change from 0 to 2048 [ 295.994555][ T9539] loop5: detected capacity change from 0 to 512 [ 295.999700][ T9537] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 296.029764][ T9533] EXT4-fs (loop2): Ignoring removed orlov option [ 296.031563][ T9533] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 296.045987][ T9539] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 296.050895][ T9539] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 296.053943][ T9539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0002] [ 296.056102][ T9533] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 296.056811][ T9539] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 296.085904][ T9539] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 296.109858][ T9539] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,jqfmt=vfsold,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 296.511341][ T9550] netlink: 'syz.4.2092': attribute type 4 has an invalid length. [ 297.082927][ T148] net_ratelimit: 25 callbacks suppressed [ 297.082942][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 297.204165][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 297.217830][ T9560] loop4: detected capacity change from 0 to 512 [ 297.226181][ T9564] udc-core: couldn't find an available UDC or it's busy [ 297.228157][ T9560] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 297.230236][ T9564] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 297.232449][ T9560] UDF-fs: Scanning with blocksize 512 failed [ 297.237363][ T9560] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 297.239404][ T9560] UDF-fs: Scanning with blocksize 1024 failed [ 297.243908][ T9560] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 297.245997][ T9560] UDF-fs: Scanning with blocksize 2048 failed [ 297.248212][ T9560] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 297.261523][ T9560] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.323022][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 297.421009][ T9571] netlink: 'syz.4.2098': attribute type 10 has an invalid length. [ 297.514089][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 297.603298][ T9584] loop2: detected capacity change from 0 to 128 [ 297.625240][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 297.675058][ T9584] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.733416][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 297.974354][ T4147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.098629][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.213167][ T4124] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.322943][ T4124] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.445224][ T9590] loop4: detected capacity change from 0 to 1024 [ 298.495539][ T9590] EXT4-fs (loop4): Ignoring removed orlov option [ 298.497474][ T9590] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 298.574765][ T9590] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 298.861859][ T9606] udc-core: couldn't find an available UDC or it's busy [ 298.871911][ T9606] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 300.350711][ T9611] loop2: detected capacity change from 0 to 1024 [ 300.404942][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'. [ 300.426134][ T9621] udc-core: couldn't find an available UDC or it's busy [ 300.428111][ T9621] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 300.459459][ T9611] attempt to access beyond end of device [ 300.459459][ T9611] loop2: rw=0, want=5780, limit=1024 [ 300.530450][ T9623] netlink: 'syz.5.2118': attribute type 10 has an invalid length. [ 300.614095][ T9632] udc-core: couldn't find an available UDC or it's busy [ 300.616219][ T9632] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 302.600853][ T4124] net_ratelimit: 19 callbacks suppressed [ 302.600952][ T4124] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 302.733008][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 302.853577][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 302.975570][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.103836][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.203296][ T9650] udc-core: couldn't find an available UDC or it's busy [ 303.205304][ T9650] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 303.213164][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.338258][ T9651] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2124'. [ 303.369711][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.482812][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.529101][ T9655] loop5: detected capacity change from 0 to 8192 [ 303.592820][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.702803][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.712483][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 303.838921][ T9655] loop5: p1 p3 < > p4 < p5 > [ 303.840491][ T9655] loop5: partition table partially beyond EOD, truncated [ 303.851404][ T9655] loop5: p1 start 67108864 is beyond EOD, truncated [ 303.855152][ T9655] loop5: p3 start 100859904 is beyond EOD, truncated [ 303.862263][ T9655] loop5: p5 start 67108864 is beyond EOD, truncated [ 303.994653][ T9668] netlink: 'syz.2.2134': attribute type 10 has an invalid length. [ 304.132197][ T9672] loop5: detected capacity change from 0 to 8192 [ 304.156200][ T9676] loop2: detected capacity change from 0 to 1024 [ 304.195051][ T9676] EXT4-fs (loop2): Ignoring removed orlov option [ 304.196719][ T9676] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 304.243373][ T9676] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 304.254914][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 305.065087][ T4033] Bluetooth: hci4: link tx timeout [ 305.066793][ T4033] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.070408][ T4033] Bluetooth: hci4: link tx timeout [ 305.071832][ T4033] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.448658][ T9694] ------------[ cut here ]------------ [ 305.450586][ T9694] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 305.452967][ T9694] WARNING: CPU: 1 PID: 9694 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x3e8/0x7ac [ 305.456140][ T9694] Modules linked in: [ 305.457252][ T9694] CPU: 1 PID: 9694 Comm: syz.3.2139 Not tainted 5.15.180-syzkaller #0 [ 305.459492][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 305.462239][ T9694] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 305.464442][ T9694] pc : ieee80211_bss_info_change_notify+0x3e8/0x7ac [ 305.466237][ T9694] lr : ieee80211_bss_info_change_notify+0x3e8/0x7ac [ 305.468090][ T9694] sp : ffff80001fd071a0 [ 305.469213][ T9694] x29: ffff80001fd071a0 x28: 1ffff00002767870 x27: ffff80001fd07360 [ 305.471466][ T9694] x26: 1fffe0001d054c53 x25: dfff800000000000 x24: 0000000000000000 [ 305.473587][ T9694] x23: 0000000000000004 x22: ffff0000e82a6298 x21: 0000000002000000 [ 305.475751][ T9694] x20: ffff0000e82a4c80 x19: ffff80001658d000 x18: 1fffe0003685b58e [ 305.477880][ T9694] x17: 1fffe0003685b58e x16: ffff80001119ef40 x15: ffff8000141eec20 [ 305.480081][ T9694] x14: ffff0001b42dac80 x13: 1ffff0000282a06b x12: 0000000000080000 [ 305.482316][ T9694] x11: 000000000000a141 x10: ffff800027b8f000 x9 : 27f2b2b90aaf6b00 [ 305.484450][ T9694] x8 : 27f2b2b90aaf6b00 x7 : 0000000000000000 x6 : 0000000000000000 [ 305.486567][ T9694] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff800008503f9c [ 305.488766][ T9694] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000035 [ 305.490972][ T9694] Call trace: [ 305.491855][ T9694] ieee80211_bss_info_change_notify+0x3e8/0x7ac [ 305.493647][ T9694] ieee80211_set_mcast_rate+0x3c/0x50 [ 305.495063][ T9694] nl80211_set_mcast_rate+0x2e0/0x75c [ 305.496529][ T9694] genl_rcv_msg+0x8b4/0xb6c [ 305.497752][ T9694] netlink_rcv_skb+0x208/0x3c4 [ 305.499013][ T9694] genl_rcv+0x38/0x50 [ 305.500048][ T9694] netlink_unicast+0x60c/0x89c [ 305.501382][ T9694] netlink_sendmsg+0x6e8/0x9cc [ 305.502684][ T9694] ____sys_sendmsg+0x61c/0x920 [ 305.503962][ T9694] ___sys_sendmsg+0x1d0/0x240 [ 305.505191][ T9694] __arm64_sys_sendmsg+0x1a8/0x254 [ 305.506544][ T9694] invoke_syscall+0x98/0x2b8 [ 305.507800][ T9694] el0_svc_common+0x138/0x258 [ 305.509040][ T9694] do_el0_svc+0x58/0x14c [ 305.510160][ T9694] el0_svc+0x78/0x1e0 [ 305.511223][ T9694] el0t_64_sync_handler+0xcc/0xe4 [ 305.512585][ T9694] el0t_64_sync+0x1a0/0x1a4 [ 305.513806][ T9694] irq event stamp: 664 [ 305.514910][ T9694] hardirqs last enabled at (663): [] finish_lock_switch+0xb0/0x1c4 [ 305.517510][ T9694] hardirqs last disabled at (664): [] el1_dbg+0x24/0x80 [ 305.519847][ T9694] softirqs last enabled at (482): [] release_sock+0x1d0/0x258 [ 305.522357][ T9694] softirqs last disabled at (478): [] release_sock+0x34/0x258 [ 305.524816][ T9694] ---[ end trace 952fed9ff84a52b5 ]--- [ 306.076971][ T9697] loop4: detected capacity change from 0 to 128 [ 306.131317][ T9698] loop5: detected capacity change from 0 to 256 [ 306.151938][ T9697] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 306.154024][ T9698] FAT-fs (loop5): Unrecognized mount option "dmask=0100000L000000000000000" or missing value [ 306.578029][ T9701] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2143'. [ 307.607813][ T4072] Bluetooth: hci4: command 0x0406 tx timeout [ 307.619005][ T4123] net_ratelimit: 15 callbacks suppressed [ 307.619018][ T4123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 307.744122][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 307.852971][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 307.962825][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.072890][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.182814][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.292891][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.412845][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.522871][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.632903][ T433] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 309.682960][ T4270] Bluetooth: hci4: command 0x0406 tx timeout [ 312.632908][ T9] net_ratelimit: 35 callbacks suppressed [ 312.632923][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 312.743294][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 312.852901][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 312.972986][ T148] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.082792][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.202846][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.312867][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.422920][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.532882][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.642875][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 315.366025][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.367849][ T2056] ieee802154 phy1 wpan1: encryption failed: -22