last executing test programs: 1m51.197575398s ago: executing program 0 (id=238): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) fstatfs(r1, &(0x7f0000000300)=""/112) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="31f99a12c4caf48a72dfca5afa6bc31340067e6b25a9144969d6a8ccab3eab81bd9ace74cbe45aa4cc71ddf4162d03d69fd710c25ad17902c3cf3a2c1b7f989745a90dc2d7c0725568ec91bec116e32e629436b583cac1ad36e6f91facc24ca3c9c0e72ac05fd9541d136328b530"], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000002310000e5ff0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000140)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000040)) 1m50.276872535s ago: executing program 0 (id=241): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 1m50.229275054s ago: executing program 0 (id=242): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40), 0xa, 0x4e4, &(0x7f0000001400)="$eJzs3c9vG1kdAPDvTOKStClJgUOpRFvRorSCOklD24hDKRKip0pAuZeQOFEUJ45ip22iClLxByAhBEiceuLSvwAk1AN/AEJCgjvix65Wu+3uYQ+765XtcZqmdhztOnGVfD7SdN57Huf7fVN5PDPvyRPAkXU+Im5FRF9EXI6I4aw9zZbbtcpmY7sXzx/N1JYkqtW77yaRZG07/+aJxltiICJ+fDviZ8nrccvrG4vTxWJhNauPVZZWxsrrG1cWlqbnC/OF5cnJietTN6auTY13pZ+1ft38/v9++6s//uDmX7714N/33r7081paQ9nrrfrRDY2u5+r7oqk/Ilb3I1gP9GXrXMct/7rvuQAA0FntHP9LEfH1+vn/cPTVz04BAACAw6T63aH4KImoAgAAAIdWWp8Dm6T5bC7AUKRpPt+Yw/uVOJ4WS+XKN+dKa8uzjbmyI5FL5xaKhfFsTu1I5JJafaJeflm/uqM+GRGnIuI3w4P1en6mVJzt9c0PAAAAOCJO7Lj+/2C4cf0PAAAAHDIjvU4AAAAA2HevXP8/6V0eAAAAwP4x/g8AAACH2g/v3Kkt1ebzr2fvr68tlu5fmS2UF/NLazP5mdLqSn6+VJqv/2bfUqe/VyyVVr4dy2sPxyqFcmWsvL5xb6m0tlwZXHjlEdgAAADAATp17tm/kojY/M5gfak51uukgAORdNpg+127/+5vLsDB6svWT//U40SAA9ff6wSAnsn1OgGg5zrdB2g7eedv3c8FAADYH6Nf3Rr/H2y2Ncf/O98b6Dh6CLzB0l4nAAAcOOP/cHTltmYAAkfVF3c2JBGb26qff/y/Wv0seQEAAN0zVF+SNJ+NBQ5FmubzESfrjwXIJXMLxcJ4dn3wz+HcF2r1ifo7E6P/AAAAAAAAAAAAAAAAAAAAAAAAALBH1WoSVQAAAOBQi0jfSrIn+Y8OXxzaeX/gWPLhcH0dEQ/+cPd3D6crldWJWvt7W+2V32ftVz1PHAAAAN4Ezev05nU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTTi+ePZprLay8e27+473wvIkZaxe+Pgfp6IHIRcfz9JPq3vS+JiL4uxN98HBGnW8VPamnFSJZFq/iDPYyfRsSJLsSHo+xZ7fhzq9XnL43z9XXrz1+t/P8uxG9//Eu3jn99bY4/J/cY48zmLvEfR5zpb338acZP2sS/sMf4P/3Jxka716pPIkZbfv8kr8QaqyytjJXXN64sLE3PF+YLy5OTE9enbkxdmxofm1soFrJ/W8b49df+/Mlu/T/eJv5Io//n2vX/4h77//E/Hj7/cqOYaxX/0oXW37+nG/Ff2/9p9t33jaz8olr9xWhWTjYb+3O7s0//fna3/s+26X+n//9Le+z/5R/98j973BQAOADl9Y3F6WKxsKrQulCt2lEKh7IQA7tt0+sjEwAA0G0vT/p7nQkAAAAAAAAAAAAAAAAAAAAcXQfxS2M7Y+7yc9QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3zaQAAAP//6ajYQw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x8}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m46.987277319s ago: executing program 0 (id=250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m46.855594508s ago: executing program 0 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1m29.580803934s ago: executing program 3 (id=291): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xd01c4813, &(0x7f0000000a00)={0x2, 0xffffffff, 0x0, 0x0, 0x2000000}) 1m26.209956832s ago: executing program 3 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) 1m26.046605008s ago: executing program 3 (id=301): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@test_dummy_encryption}, {@dioread_lock}, {@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5e9, &(0x7f0000001340)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) syz_open_pts(r0, 0x141601) gettid() 1m25.86774136s ago: executing program 1 (id=302): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000008181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x400, 0x9, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x8, 0x2, 0x0, @void, @value, @void, @value}, 0x50) write$cgroup_subtree(r6, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 1m24.989539946s ago: executing program 3 (id=303): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f00000018c0)=ANY=[@ANYRES32, @ANYBLOB="749235c63bc001e29d7d09ef375f63128afacfe8f0ceeecb4e94d802fcf7fb224c8e9d9df582f661c26d2970f7ab1e0f14f11584b083ba27367e9700cdb013122b6f248e89447aa3b0ffba27c76545e41126f8c5b59b3e9a839669f2a212105589ad1abd707ddc", @ANYRES32, @ANYRES16, @ANYRES32=r2, @ANYRESOCT, @ANYBLOB="77664895cba8dfdce399457cc28f7ded08ead3c0ec4c625aa2c471c377f46988078d00df4dbf922b6d413f529ebd63fad7f2d1c2eb5b8f26cb542c036fdb58341f55efafb88cfb32b4463aed848c7d22bde6d7046c734381291393fdec64d930caf86895846a8189006de1f11a9c5f543adad2a65e2494c99e256287f4bb58ec0375b688da94f3c0053cc848a566f17fa3025e7d8e5f5750d14f7309d69fe58b4b577de5f5259bfe19c0efe18aefa4d385e7dd5452291c5c94432521ab2a1898179a25c39edcc9f744f8f686181999f50fdf956ea314ec12febc9b7f21a3a7325eb83536fa097ec4a712ef3a8c734410742b65a943fba12bc91c516e90e1951615892710e9ec5e4b4723824f19091880741e84304c08b958c45db5fd91cbf6f66cc9b4ca5131ad988d907b0266c197f080c3b1f430df5ed5a8d65611ab10734aa04ca786e9336495379bc8bf2d21dfeb002d45734aad93503c", @ANYRESOCT], 0x2, 0x1e3, &(0x7f0000000b40)="$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") sendmmsg$unix(r3, 0x0, 0x0, 0x840) fallocate(r0, 0x24, 0xffffffffffffffff, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x401, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x4c, 0x5c010000}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa0}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m24.666242257s ago: executing program 1 (id=305): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c020001000000000000400002000000000500050000000000"], 0x80}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1m23.843699543s ago: executing program 1 (id=306): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001439) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x2000000b) read(r3, 0x0, 0x0) close(r3) close(r2) connect$vsock_stream(r0, &(0x7f0000000040), 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/206, 0xce}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x1, 0x35) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0xfe66}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x5, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0xfff1, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m14.60252081s ago: executing program 1 (id=323): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b000000050000000100010009000000010000006f59e761c6c9bbe9bad57b1068aa34f5bd09c1d82002a35ebd37cf4c8d0de25851aa5db16ba7e9f538c601e73933e1c56e70b9f3c3beedd795bda9c4b1afa93e3c817eafaa05c3abe9366f2872bcd9d479e286ccb314bb5d56fef65def", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f7, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000340)={@private=0xa010100, @rand_addr=0x64010100}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x583e, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r7) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}}, 0x0) 1m13.117429957s ago: executing program 1 (id=324): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x18, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x18, 0x0, @wg=@data}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x22020600) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000200)='./file0\x00', 0x1808014, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES8, @ANYRESHEX], 0x1, 0x559a, &(0x7f0000001480)="$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") setns(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc531, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0xa0, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x10, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0x9d1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0x1, 0x80}}}}}]}}]}}, 0x0) 1m12.162790941s ago: executing program 1 (id=327): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$mptcp(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[], 0xf) 1m10.090295536s ago: executing program 2 (id=331): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\f\x00\x00\x00'], 0x0}, 0x0) 1m9.433235693s ago: executing program 2 (id=335): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x18) recvmsg(0xffffffffffffffff, 0x0, 0x104) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)) 1m9.348999314s ago: executing program 2 (id=336): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010ef17096000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "289d297b"}]}}, 0x0}, 0x0) 1m8.750198271s ago: executing program 2 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@datasec={0x6, 0x1, 0x0, 0xf, 0x3, [{0x3}], "8f54b7"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '@'}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) getpid() sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000001020101000000"], 0x40}}, 0x0) 47.052814995s ago: executing program 0 (id=271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) 27.400613881s ago: executing program 3 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2080000, &(0x7f00000007c0)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000540)) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) syz_open_procfs(0x0, 0x0) 27.255770149s ago: executing program 3 (id=368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x28a083, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 17.899692789s ago: executing program 4 (id=383): r0 = syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x9, 0x2bc, &(0x7f0000000880)="$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") ptrace$PTRACE_SETSIGMASK(0x420b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={[0xffffffffffffffff]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800"], 0x44}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setrlimit(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r5}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r6}, &(0x7f00000003c0), &(0x7f0000000340)='%ps \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 16.975218787s ago: executing program 4 (id=385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000050000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x804810, &(0x7f0000000d40), 0x9, 0x61c, &(0x7f0000000700)="$eJzs3U1rXFUfAPD/nbwnz/MkDQ9qXWhAtAVt0qStFBG0CK5KqS8LwY1jk5ba6QtNRFMrTaFuBHHjQnDlwrrwO2hBcOUXcOHGlVSKSDdK0ZE7uTNOk7nJTMzMtJnfD8Y5556bOeea/HvOnDnnTgA9ayr9TyFid0RcSCIm68r6IyucWj3v9m+XT6SPJMrlV35N4vKVZKX+tZLseSwi0oI/xyP5LiIm+9bXu7h86UyxVFq4mOVnls5emFlcvrTv9NniqYVTC+fmnp47fOjgocOz++t+6uSLrV7frrr00WtvvTP+4bHXv/jsTjL75Y/Hkni+VpZeV6uvvZmpmIpypv54+v/18HZX1iV9tb+TfyRrD6z1QhsbREuqv7+BiHgwxqOv7rc5Hh+81NXGAW1VTqLWRwG9JhH/0KOq44Dqe/vm3gcPtnlUAnTCrSMRT9TifyAiqvHfvzo3GMOVuYHR28ld8zxJROzfhvrTOr7/9ti19BFtmocDGlu5OpTN26/t/5NKbE7EcCU3ertwV/wXsmnciWz+8OWNqxnPK5hak8/qH9rq9QDNW7kaEQ81Gv9vHv9vZM/p8Te3WH9O/AMAAAAAAABbcONIRDzV6PO/Qm39z2CD9T9jEXW757Zu88//Cje3oRqggVtHIp5tuP63UD1loi/L/beyHmAgOXm6tLA/Iv4XEXtjYCjNz9a/6Fd1Px0R+z6a/DSv/vr1f+kjrb+6FjBrx83+NauB5otLxW24dOh5t65GPNyfv/4n7f+TBv1/Gt8Xmqxj8vHrx/PKNo9/oF3Kn0fsadj/J7Vzko3vzzFTGQ/MVEcF6z3y3sdf59Uv/qF70v5/dOP4H0rq79ez2NrrD0bEgeX+cl75Vsf/g8mrfVG3E/Hd4tLSxdmIweTo+uNzrbUZ7ifDzZ/6fkRU4qEaL2n8731s4/m/2vi/Lg5Hsnt8NeOBv8Z+yivT/0P3pPE/v3H/P3F3/996Yu76xDd59R9vqv8/WOnT92ZHzP/BxpoN0G63EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuR4WI+E8khelaulCYno4Yi4j/x2ihdH5x6cmT598+N5+WVb7/v1D9pt/x1XxS/f7/ibr83Jr8gYjYFRGf9I1U8tMnzpfmu33xAAAAAAAAAAAAAAAAAAAAcI8YW31at/8/9XNfV5sGdEJ/9izeoff0d7sBQNeIf+hd4h96V378/36nXNHR5gAd1Gz/X77S5oYAHbfF8b+PC2AH8P4fetVAc6cNt7sdQDfo/wEAAAAAYEfZ9eiNH5KIWHlmpPJIDWZltQ8GR7rVOqCdCnkFQ51tB9B51vBC77L0B3pXk4t/gR0sqaX+aLjZP3/1f9KeBgEAAAAAAAAAAAAA6+zZ3cT+f2BHyt3/D+x4G+z/b7Sxx+0CYAex/x96l9t8AdXBft43/dv/DwAAAAAAAAAAAAD3gOFLZ4ql0sLFxeWmE1daOfnfJ36JvKLnOtmM7UqsFO+JZtwPiYGIWFNUHl/9sz1TLL0WnW1PNWI6UddgB+vKSXTp3yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCdvwMAAP//emUoLA==") 16.838395047s ago: executing program 4 (id=386): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000008181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 15.899672147s ago: executing program 4 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1819000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x840, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) mmap(&(0x7f00009aa000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 15.03904421s ago: executing program 4 (id=388): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) process_mrelease(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4}, @timestamp_prespec={0x44, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@dev}]}]}}}}}) 12.313048643s ago: executing program 4 (id=389): unshare(0x62040200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x43850000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_nanosleep(0x9, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'security\x00', 0x0, [0x14, 0x200203, 0x5, 0x3fe, 0x8]}, &(0x7f0000000300)=0x54) 941.84947ms ago: executing program 2 (id=345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x6e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) listen(r1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c01005602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09001a910039ffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 0s ago: executing program 2 (id=391): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$mptcp(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[], 0xf) kernel console output (not intermixed with test programs): mode [ 59.022031][ T6671] bridge_slave_0: entered promiscuous mode [ 59.030204][ T6671] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.032884][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.034928][ T6671] bridge_slave_1: entered allmulticast mode [ 59.043278][ T6671] bridge_slave_1: entered promiscuous mode [ 59.116169][ T6671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.137134][ T6671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.182107][ T44] bridge_slave_1: left allmulticast mode [ 59.185770][ T44] bridge_slave_1: left promiscuous mode [ 59.188580][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.197789][ T44] bridge_slave_0: left allmulticast mode [ 59.200909][ T44] bridge_slave_0: left promiscuous mode [ 59.204181][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.495625][ T6423] Bluetooth: hci0: command tx timeout [ 60.769621][ T6719] loop4: detected capacity change from 0 to 512 [ 60.780867][ T6719] EXT4-fs error (device loop4): __ext4_fill_super:5435: inode #2: comm syz.4.64: casefold flag without casefold feature [ 61.065532][ T6719] EXT4-fs (loop4): get root inode failed [ 61.121422][ T6719] EXT4-fs (loop4): mount failed [ 61.887671][ T6731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.941970][ T6731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.033231][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 62.033246][ T30] audit: type=1326 audit(62.010:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6732 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 62.040141][ T30] audit: type=1326 audit(62.020:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6732 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 62.045686][ T30] audit: type=1326 audit(62.020:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6732 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 62.050743][ T30] audit: type=1326 audit(62.020:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6732 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 62.059143][ T30] audit: type=1326 audit(62.020:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6732 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 62.064576][ T30] audit: type=1326 audit(62.020:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6732 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 62.070734][ T30] audit: type=1326 audit(62.020:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6732 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 62.075903][ T30] audit: type=1326 audit(62.020:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6732 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 62.080899][ T30] audit: type=1326 audit(62.020:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6732 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 62.085880][ T30] audit: type=1326 audit(62.020:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6732 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 62.364670][ T6739] Zero length message leads to an empty skb [ 62.577156][ T6423] Bluetooth: hci0: command tx timeout [ 62.672143][ T6741] loop3: detected capacity change from 0 to 40427 [ 62.674645][ T6741] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 62.676761][ T6741] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 62.683020][ T6741] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.696197][ T6741] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 62.698181][ T6741] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 63.008429][ T6750] loop3: detected capacity change from 0 to 512 [ 63.010475][ T6750] ext4: Unknown parameter 'nojournal_checksum"dax' [ 63.178419][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.225409][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.277471][ T44] bond0 (unregistering): Released all slaves [ 63.293649][ T6671] team0: Port device team_slave_0 added [ 63.355027][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.70'. [ 63.357637][ T6464] usb 1-1: USB disconnect, device number 2 [ 63.370195][ T6671] team0: Port device team_slave_1 added [ 63.448893][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.450666][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.482757][ T6671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.792319][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.794058][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.801306][ T6671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.815411][ T6464] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 63.877573][ T6671] hsr_slave_0: entered promiscuous mode [ 63.961654][ T6671] hsr_slave_1: entered promiscuous mode [ 63.984928][ T6777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.007068][ T6464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.010193][ T6464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.014459][ T6464] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 64.016475][ T6671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.018681][ T6671] Cannot create hsr debugfs directory [ 64.023556][ T6464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.041990][ T6464] usb 1-1: config 0 descriptor?? [ 64.062540][ T6777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.407312][ T44] hsr_slave_0: left promiscuous mode [ 64.458026][ T44] hsr_slave_1: left promiscuous mode [ 64.463966][ T6464] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 64.475087][ T6464] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 64.481433][ T6464] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 64.483377][ T6464] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 64.486334][ T6464] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 64.497963][ T2340] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499657][ T2340] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.591897][ T6464] sony 0003:054C:0268.0001: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0 [ 64.595107][ T6464] sony 0003:054C:0268.0001: failed to claim input [ 64.655804][ T6423] Bluetooth: hci0: command tx timeout [ 64.656069][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.661217][ T6464] usb 1-1: USB disconnect, device number 3 [ 64.675463][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.679141][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.680916][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.386678][ T44] veth1_macvtap: left promiscuous mode [ 65.388453][ T44] veth0_macvtap: left promiscuous mode [ 65.390908][ T44] veth1_vlan: left promiscuous mode [ 65.392511][ T44] veth0_vlan: left promiscuous mode [ 66.444109][ T6790] loop3: detected capacity change from 0 to 40427 [ 66.450709][ T6790] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 66.452900][ T6790] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 66.475520][ T6790] F2FS-fs (loop3): Found nat_bits in checkpoint [ 66.530916][ T6790] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 66.532612][ T6790] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 66.757005][ T6423] Bluetooth: hci0: command tx timeout [ 67.059690][ T2122] Bluetooth: hci5: Frame reassembly failed (-84) [ 67.095472][ T6788] Bluetooth: hci5: Frame reassembly failed (-84) [ 67.181410][ T6818] loop1: detected capacity change from 0 to 256 [ 67.183657][ T6818] exfat: Deprecated parameter 'namecase' [ 67.197814][ T6818] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x00000007, checksum : 0x1119abd0) [ 67.219561][ T6818] exFAT-fs (loop1): invalid boot region [ 67.221037][ T6818] exFAT-fs (loop1): failed to recognize exfat type [ 67.363512][ T6822] loop3: detected capacity change from 0 to 2048 [ 67.392666][ T6822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.410086][ T6412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.658033][ T44] team0 (unregistering): Port device team_slave_1 removed [ 68.895632][ T6423] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 69.298067][ T44] team0 (unregistering): Port device team_slave_0 removed [ 69.380518][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 69.380535][ T30] audit: type=1326 audit(69.360:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6842 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd49728 code=0x7ffc0000 [ 69.400558][ T30] audit: type=1326 audit(69.360:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6842 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd49728 code=0x7ffc0000 [ 69.406359][ T30] audit: type=1326 audit(69.360:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6842 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8fd49728 code=0x7ffc0000 [ 69.413256][ T30] audit: type=1326 audit(69.360:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6842 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd49728 code=0x7ffc0000 [ 69.419877][ T30] audit: type=1326 audit(69.360:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6842 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8fd49728 code=0x7ffc0000 [ 69.424863][ T30] audit: type=1326 audit(69.360:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6842 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd49728 code=0x7ffc0000 [ 69.430193][ T30] audit: type=1326 audit(69.360:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6842 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=113 compat=0 ip=0xffff8fd49728 code=0x7ffc0000 [ 69.435035][ T30] audit: type=1326 audit(69.360:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6842 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd49728 code=0x7ffc0000 [ 69.440154][ T30] audit: type=1326 audit(69.360:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6842 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd49728 code=0x7ffc0000 [ 69.625022][ T9] cfg80211: failed to load regulatory.db [ 69.714994][ T6848] loop3: detected capacity change from 0 to 40427 [ 69.719995][ T6848] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 69.722281][ T6848] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 69.736618][ T6848] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.748901][ T6848] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.751558][ T6848] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.489321][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.84'. [ 71.555053][ T6861] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.770754][ T6878] loop4: detected capacity change from 0 to 512 [ 71.774304][ T6878] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.782724][ T6880] loop0: detected capacity change from 0 to 256 [ 71.792670][ T6878] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 73.931498][ T6671] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.935205][ T6671] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.943059][ T6671] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.973441][ T6671] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.982476][ T6908] loop4: detected capacity change from 0 to 256 [ 74.039980][ T6908] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 74.058290][ T6912] pim6reg1: entered promiscuous mode [ 74.061122][ T6912] pim6reg1: entered allmulticast mode [ 74.182876][ T6671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.204619][ T6671] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.253633][ T6671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.269558][ T6671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.326662][ T2122] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.328368][ T2122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.365700][ T2122] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.368152][ T2122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.520218][ T6925] usb usb7: usbfs: process 6925 (syz.4.110) did not claim interface 0 before use [ 75.080258][ T30] audit: type=1326 audit(75.050:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6928 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 75.109160][ T6671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.116371][ T30] audit: type=1326 audit(75.060:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6928 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 75.121897][ T30] audit: type=1326 audit(75.070:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6928 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 75.175500][ T30] audit: type=1326 audit(75.070:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6928 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 75.187948][ T30] audit: type=1326 audit(75.070:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6928 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 75.200591][ T6906] loop1: detected capacity change from 0 to 40427 [ 75.207681][ T30] audit: type=1326 audit(75.090:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6928 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 75.212820][ T30] audit: type=1326 audit(75.090:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6928 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 75.225300][ T6906] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 75.227223][ T6906] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 75.238165][ T6930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.112'. [ 75.244782][ T6906] F2FS-fs (loop1): Found nat_bits in checkpoint [ 75.267250][ T30] audit: type=1326 audit(75.090:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6928 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 75.296508][ T30] audit: type=1326 audit(75.090:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6928 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f749728 code=0x7ffc0000 [ 75.314623][ T30] audit: type=1326 audit(75.090:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6928 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9f747e60 code=0x7ffc0000 [ 75.470806][ T6906] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 75.536452][ T6906] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 75.908833][ T6671] veth0_vlan: entered promiscuous mode [ 75.931596][ T6671] veth1_vlan: entered promiscuous mode [ 75.999989][ T6671] veth0_macvtap: entered promiscuous mode [ 76.073942][ T6671] veth1_macvtap: entered promiscuous mode [ 76.087486][ T6958] tmpfs: Unknown parameter '' [ 76.120790][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.139641][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.154389][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.168327][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.178576][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.184399][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.191827][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.213839][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.229178][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.250896][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.253439][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.293774][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.301746][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.311373][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.314140][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.321866][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.324552][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.343032][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.367133][ T6671] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.369447][ T6671] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.380590][ T6671] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.386583][ T6671] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.516887][ T2140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.520237][ T2140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.571673][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.573814][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.608691][ T6979] loop3: detected capacity change from 0 to 512 [ 76.623067][ T6979] EXT4-fs (loop3): Test dummy encryption mode enabled [ 76.671261][ T6979] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #11: comm syz.3.121: iget: bad extended attribute block 9 [ 76.683554][ T6979] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.121: couldn't read orphan inode 11 (err -117) [ 76.699458][ T6979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.336483][ T7002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.526579][ T7002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.134200][ T6412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.916122][ T7036] xt_bpf: check failed: parse error [ 81.142616][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.238464][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.964177][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 82.964193][ T30] audit: type=1326 audit(82.940:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f49728 code=0x7ffc0000 [ 83.025699][ T30] audit: type=1326 audit(82.950:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f49728 code=0x7ffc0000 [ 83.045587][ T30] audit: type=1326 audit(82.960:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb3f47cc4 code=0x7ffc0000 [ 83.111238][ T30] audit: type=1326 audit(82.960:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f49728 code=0x7ffc0000 [ 83.116574][ T30] audit: type=1326 audit(82.990:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb3f49728 code=0x7ffc0000 [ 83.121928][ T30] audit: type=1326 audit(82.990:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f49728 code=0x7ffc0000 [ 83.127188][ T30] audit: type=1326 audit(82.990:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f49728 code=0x7ffc0000 [ 83.132072][ T30] audit: type=1326 audit(82.990:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb3f49728 code=0x7ffc0000 [ 83.142688][ T30] audit: type=1326 audit(82.990:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f49728 code=0x7ffc0000 [ 83.148678][ T30] audit: type=1326 audit(82.990:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f49728 code=0x7ffc0000 [ 83.809752][ T7084] loop3: detected capacity change from 0 to 2048 [ 83.869652][ T7088] loop0: detected capacity change from 0 to 16 [ 83.877329][ T7088] erofs: (device loop0): mounted with root inode @ nid 36. [ 83.898400][ T7088] syz.0.146: attempt to access beyond end of device [ 83.898400][ T7088] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 83.925207][ T7084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.006448][ T6412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.079439][ T7107] input: syz1 as /devices/virtual/input/input3 [ 86.352976][ T7136] loop1: detected capacity change from 0 to 512 [ 86.390158][ T7136] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.160: casefold flag without casefold feature [ 86.402779][ T7136] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.160: couldn't read orphan inode 15 (err -117) [ 86.419184][ T7136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.367347][ T7134] loop3: detected capacity change from 0 to 40427 [ 87.372414][ T7134] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 87.378929][ T7134] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 87.386621][ T7134] F2FS-fs (loop3): invalid crc value [ 87.392951][ T7134] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 87.408894][ T7134] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 87.413840][ T7134] F2FS-fs (loop3): NAT is corrupt, run fsck to fix it [ 87.423137][ T7134] F2FS-fs (loop3): Failed to initialize F2FS node manager (-117) [ 88.183750][ T6416] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.953759][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.985803][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.860214][ T7176] loop1: detected capacity change from 0 to 16 [ 89.862215][ T7176] erofs: Unknown parameter '18446744073709551615n&*4c N3iVEl?lѾνB^'׃juL]CJ(Hyt pdNGn+'X [ 89.862215][ T7176] ' [ 91.689265][ T7197] veth0_to_bond: mtu less than device minimum [ 92.760158][ T7210] binder: 7209:7210 ioctl c018620c 20000000 returned -1 [ 93.853482][ T7220] loop1: detected capacity change from 0 to 128 [ 93.866067][ T7220] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 94.007224][ T7215] loop2: detected capacity change from 0 to 40427 [ 94.009667][ T7215] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 94.011679][ T7215] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 94.462684][ T7215] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.646051][ T7215] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 94.647759][ T7215] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.832189][ T7218] loop3: detected capacity change from 0 to 40427 [ 94.862035][ T7218] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.252524][ T7218] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.968812][ T6414] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.972097][ T6414] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.974903][ T6414] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.977540][ T6414] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.980444][ T6414] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.985738][ T6414] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.154787][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 96.154802][ T30] audit: type=1326 audit(96.130:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7246 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89549728 code=0x7ffc0000 [ 96.163589][ T30] audit: type=1326 audit(96.130:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7246 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89549728 code=0x7ffc0000 [ 96.175453][ T6420] Bluetooth: hci5: command 0x1003 tx timeout [ 96.175482][ T6423] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 96.257208][ T7249] input: syz1 as /devices/virtual/input/input4 [ 96.785387][ T30] audit: type=1326 audit(96.150:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7246 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89549728 code=0x7ffc0000 [ 96.790517][ T30] audit: type=1326 audit(96.150:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7246 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89549728 code=0x7ffc0000 [ 96.806880][ T30] audit: type=1326 audit(96.150:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7246 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89549728 code=0x7ffc0000 [ 96.811910][ T30] audit: type=1326 audit(96.150:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7246 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89549728 code=0x7ffc0000 [ 96.827690][ T30] audit: type=1326 audit(96.150:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7246 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89549728 code=0x7ffc0000 [ 96.832615][ T30] audit: type=1326 audit(96.150:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7246 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89549728 code=0x7ffc0000 [ 96.840041][ T30] audit: type=1326 audit(96.150:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7246 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89549728 code=0x7ffc0000 [ 96.845172][ T30] audit: type=1326 audit(96.150:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7246 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffff89549728 code=0x7ffc0000 [ 96.980149][ T7239] chnl_net:caif_netlink_parms(): no params data found [ 97.292603][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.294358][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.306147][ T7239] bridge_slave_0: entered allmulticast mode [ 97.308222][ T7239] bridge_slave_0: entered promiscuous mode [ 97.333395][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.335216][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.343018][ T7239] bridge_slave_1: entered allmulticast mode [ 97.357050][ T7239] bridge_slave_1: entered promiscuous mode [ 97.394656][ T7270] syzkaller0: entered promiscuous mode [ 97.408813][ T7270] syzkaller0: entered allmulticast mode [ 97.532433][ T7239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.544126][ T7239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.015466][ T6423] Bluetooth: hci6: command tx timeout [ 100.110339][ T6423] Bluetooth: hci6: command tx timeout [ 102.176278][ T6423] Bluetooth: hci6: command tx timeout [ 104.265470][ T6423] Bluetooth: hci6: command tx timeout [ 107.626730][ T6420] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 107.633353][ T5979] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 107.636257][ T5979] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 107.637209][ T6414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 107.642411][ T5979] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 107.642649][ T6414] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 107.645560][ T5979] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 107.648425][ T5979] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 107.650337][ T6414] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 107.651158][ T5979] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 107.652773][ T6414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.654029][ T5979] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 109.648836][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 109.691071][ T7239] team0: Port device team_slave_0 added [ 109.695459][ T6423] Bluetooth: hci5: command tx timeout [ 109.697174][ T6423] Bluetooth: hci7: command tx timeout [ 109.710531][ T7239] team0: Port device team_slave_1 added [ 109.740900][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.742808][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.783903][ T7239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.800067][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.802034][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.836269][ T7239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.922378][ T6420] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.926298][ T6420] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.933866][ T6420] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.942219][ T6420] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.944507][ T6420] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.948050][ T6420] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.107310][ T7239] hsr_slave_0: entered promiscuous mode [ 110.155944][ T7239] hsr_slave_1: entered promiscuous mode [ 110.195438][ T7239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.198153][ T7239] Cannot create hsr debugfs directory [ 110.557787][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.650368][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.719156][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.758267][ T7324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.805555][ T7324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.827617][ T7239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.836411][ T7304] chnl_net:caif_netlink_parms(): no params data found [ 110.886960][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.958741][ T7239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.048606][ T7239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.052749][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.054579][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.057909][ T7304] bridge_slave_0: entered allmulticast mode [ 111.060766][ T7304] bridge_slave_0: entered promiscuous mode [ 111.065092][ T7316] chnl_net:caif_netlink_parms(): no params data found [ 111.074645][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.077012][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.079011][ T7304] bridge_slave_1: entered allmulticast mode [ 111.081034][ T7304] bridge_slave_1: entered promiscuous mode [ 111.096100][ T7307] chnl_net:caif_netlink_parms(): no params data found [ 111.106161][ T7304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.117942][ T7304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.179426][ T7239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.212392][ T7304] team0: Port device team_slave_0 added [ 111.241973][ T7304] team0: Port device team_slave_1 added [ 111.256534][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.259421][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.261528][ T7307] bridge_slave_0: entered allmulticast mode [ 111.264975][ T7307] bridge_slave_0: entered promiscuous mode [ 111.268160][ T7307] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.270132][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.271878][ T7307] bridge_slave_1: entered allmulticast mode [ 111.274246][ T7307] bridge_slave_1: entered promiscuous mode [ 111.276860][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.278711][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.280762][ T7316] bridge_slave_0: entered allmulticast mode [ 111.282805][ T7316] bridge_slave_0: entered promiscuous mode [ 111.318472][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.320533][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.322527][ T7316] bridge_slave_1: entered allmulticast mode [ 111.325646][ T7316] bridge_slave_1: entered promiscuous mode [ 111.343645][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.347593][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.354032][ T7304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.358352][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.360171][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.366645][ T7304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.373349][ T7307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.388693][ T7316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.391300][ T13] bridge_slave_1: left allmulticast mode [ 111.392598][ T13] bridge_slave_1: left promiscuous mode [ 111.394132][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.398784][ T13] bridge_slave_0: left allmulticast mode [ 111.400234][ T13] bridge_slave_0: left promiscuous mode [ 111.401755][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.775398][ T6420] Bluetooth: hci5: command tx timeout [ 111.785410][ T6420] Bluetooth: hci7: command tx timeout [ 112.015585][ T6420] Bluetooth: hci0: command tx timeout [ 112.919513][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.958345][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.018991][ T13] bond0 (unregistering): Released all slaves [ 113.028291][ T7307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.046539][ T7316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.051318][ T7307] team0: Port device team_slave_0 added [ 113.054706][ T7307] team0: Port device team_slave_1 added [ 113.197787][ T7304] hsr_slave_0: entered promiscuous mode [ 113.235819][ T7304] hsr_slave_1: entered promiscuous mode [ 113.275369][ T7304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.277485][ T7304] Cannot create hsr debugfs directory [ 113.383017][ T7346] loop1: detected capacity change from 0 to 2048 [ 113.418739][ T7346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.461450][ T7316] team0: Port device team_slave_0 added [ 113.463612][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.475518][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.490701][ T7307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.537985][ T7316] team0: Port device team_slave_1 added [ 113.539919][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.541559][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.558224][ T7307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.599691][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.601518][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.622334][ T7316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.634679][ T7239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.659500][ T7349] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.804659][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.810239][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.821086][ T7316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.832573][ T7239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.839946][ T7239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.844153][ T7239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.857978][ T6420] Bluetooth: hci7: command tx timeout [ 113.859498][ T6420] Bluetooth: hci5: command tx timeout [ 113.917840][ T7307] hsr_slave_0: entered promiscuous mode [ 113.961189][ T7307] hsr_slave_1: entered promiscuous mode [ 114.005398][ T7307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.007309][ T7307] Cannot create hsr debugfs directory [ 114.083937][ T13] hsr_slave_0: left promiscuous mode [ 114.095496][ T6423] Bluetooth: hci0: command tx timeout [ 114.110401][ T6416] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.142764][ T13] hsr_slave_1: left promiscuous mode [ 114.205566][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.207614][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.210288][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.212214][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.223609][ T13] veth1_macvtap: left promiscuous mode [ 114.225139][ T13] veth0_macvtap: left promiscuous mode [ 114.227111][ T13] veth1_vlan: left promiscuous mode [ 114.228479][ T13] veth0_vlan: left promiscuous mode [ 115.918573][ T13] team0 (unregistering): Port device team_slave_1 removed [ 115.945382][ T6423] Bluetooth: hci5: command tx timeout [ 115.946834][ T6423] Bluetooth: hci7: command tx timeout [ 116.118110][ T13] team0 (unregistering): Port device team_slave_0 removed [ 116.175375][ T6420] Bluetooth: hci0: command tx timeout [ 118.255590][ T6420] Bluetooth: hci0: command tx timeout [ 118.467682][ T7316] hsr_slave_0: entered promiscuous mode [ 118.505635][ T7316] hsr_slave_1: entered promiscuous mode [ 118.536326][ T7316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.538227][ T7316] Cannot create hsr debugfs directory [ 118.553975][ T7376] netlink: 'syz.1.212': attribute type 27 has an invalid length. [ 118.576954][ T7382] loop1: detected capacity change from 0 to 256 [ 118.683380][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.685977][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.133509][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.139830][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.394354][ T7376] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.401641][ T7376] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.403870][ T7376] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.414265][ T7376] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.740417][ T7382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.742838][ T7382] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.785604][ T7382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.080337][ T7239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.167218][ T7239] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.176595][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.178428][ T6542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.181210][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.183046][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.237907][ T7402] loop1: detected capacity change from 0 to 40427 [ 120.240799][ T7402] F2FS-fs (loop1): Unrecognized mount option "==S>F2"fVMܞrY#޴!b}_S2A0- jgO)NSQ4Yo̒3K"?1O<Z(1$|Uw9R5#B|˗`M :\?/+d۱?#g@?M-]`R" or missing value [ 120.292297][ T7239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.295054][ T7239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.554019][ T7402] loop1: detected capacity change from 0 to 40427 [ 120.562205][ T7402] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 120.564528][ T7402] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 120.570648][ T7402] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.582927][ T7402] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.584658][ T7402] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.742151][ T7239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.335934][ T7433] overlayfs: invalid origin (0000007900000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000) [ 121.403176][ T6416] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 121.409011][ T6416] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 121.411013][ T6416] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 121.412811][ T6416] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 121.414586][ T6416] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 121.418282][ T6416] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 121.420110][ T6416] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 121.590400][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.707997][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.717474][ T7239] veth0_vlan: entered promiscuous mode [ 121.725142][ T7239] veth1_vlan: entered promiscuous mode [ 121.741778][ T7304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.747110][ T7304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.750777][ T7304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.799182][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.804147][ T7304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.829985][ T7239] veth0_macvtap: entered promiscuous mode [ 121.833379][ T7239] veth1_macvtap: entered promiscuous mode [ 121.877522][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.897114][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.899868][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.902651][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.905222][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.908823][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.911300][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.914592][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.918444][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.920929][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.923136][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.927280][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.929769][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.932359][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.936425][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.946749][ T7239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.948895][ T7239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.951031][ T7239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.953063][ T7239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.957389][ T7457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.975522][ T7457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.988924][ T7304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.018402][ T7304] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.023530][ T1973] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.025315][ T1973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.066011][ T1973] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.067826][ T1973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.085466][ T2140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.090668][ T2140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.114927][ T7304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.132096][ T7304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.227825][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.261874][ T2140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.264055][ T2140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.329799][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.364907][ T7304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.408696][ T7304] veth0_vlan: entered promiscuous mode [ 122.417478][ T7304] veth1_vlan: entered promiscuous mode [ 122.432333][ T7304] veth0_macvtap: entered promiscuous mode [ 122.441277][ T7304] veth1_macvtap: entered promiscuous mode [ 122.482648][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.490599][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.493086][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.496404][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.499213][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.501707][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.504124][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.506655][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.510388][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.514041][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.517675][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.520156][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.522643][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.525013][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.528865][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.531370][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.533994][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.537550][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.958742][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.162785][ T7304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.168025][ T7304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.172115][ T7304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.174591][ T7304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.206443][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.247759][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.358828][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.413646][ T7510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.215'. [ 123.433532][ T7510] xt_hashlimit: size too large, truncated to 1048576 [ 123.436454][ T285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.438435][ T285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.040312][ T285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.046670][ T285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.201609][ T13] bridge_slave_1: left allmulticast mode [ 124.203054][ T13] bridge_slave_1: left promiscuous mode [ 124.214874][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.239922][ T13] bridge_slave_0: left allmulticast mode [ 124.242590][ T13] bridge_slave_0: left promiscuous mode [ 124.247378][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.273334][ T13] bridge_slave_1: left allmulticast mode [ 124.285783][ T13] bridge_slave_1: left promiscuous mode [ 124.289107][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.301770][ T13] bridge_slave_0: left allmulticast mode [ 124.306886][ T13] bridge_slave_0: left promiscuous mode [ 124.309538][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.943086][ T2340] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.952044][ T2340] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.090880][ T7575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.230'. [ 130.087714][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.409442][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.572287][ T13] bond0 (unregistering): Released all slaves [ 131.602453][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.638220][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.850396][ T13] bond0 (unregistering): Released all slaves [ 134.350919][ T7614] loop1: detected capacity change from 0 to 8192 [ 134.432047][ T7614] Dev loop1: unable to read RDB block 8 [ 134.433570][ T7614] loop1: unable to read partition table [ 134.435118][ T7614] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 134.607838][ T7621] loop1: detected capacity change from 0 to 256 [ 134.991111][ T7316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.994939][ T7316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 135.192164][ T7316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 135.196384][ T7316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 135.266610][ T7307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.274343][ T7307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.283783][ T7307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.290762][ T7307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 137.554959][ T13] hsr_slave_0: left promiscuous mode [ 137.581756][ T7653] syz.2.244: attempt to access beyond end of device [ 137.581756][ T7653] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 137.596940][ T7653] FAT-fs (loop5): unable to read boot sector [ 137.602326][ T13] hsr_slave_1: left promiscuous mode [ 137.668782][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.670869][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.673539][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.679052][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.684609][ T13] hsr_slave_0: left promiscuous mode [ 137.796167][ T13] hsr_slave_1: left promiscuous mode [ 138.110325][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.151927][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.349703][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.415473][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.442037][ T13] veth1_macvtap: left promiscuous mode [ 138.443583][ T13] veth0_macvtap: left promiscuous mode [ 138.446219][ T13] veth1_vlan: left promiscuous mode [ 138.447920][ T13] veth0_vlan: left promiscuous mode [ 138.451049][ T13] veth1_macvtap: left promiscuous mode [ 138.452657][ T13] veth0_macvtap: left promiscuous mode [ 138.454142][ T13] veth1_vlan: left promiscuous mode [ 138.456129][ T13] veth0_vlan: left promiscuous mode [ 138.563176][ T7667] loop2: detected capacity change from 0 to 512 [ 138.640006][ T7667] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.249: bad orphan inode 4 [ 138.660806][ T7667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.681947][ T7667] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.249: Logical block already allocated [ 138.700779][ T7304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.819635][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 138.819653][ T30] audit: type=1326 audit(138.730:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7674 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e749728 code=0x7ffc0000 [ 138.835470][ T30] audit: type=1326 audit(138.730:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7674 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=111 compat=0 ip=0xffff9e749728 code=0x7ffc0000 [ 138.858956][ T30] audit: type=1326 audit(138.730:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7674 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e749728 code=0x7ffc0000 [ 138.887231][ T30] audit: type=1326 audit(138.730:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7674 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e749728 code=0x7ffc0000 [ 138.905690][ T30] audit: type=1326 audit(138.890:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e749728 code=0x7ffc0000 [ 138.921941][ T30] audit: type=1326 audit(138.890:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff9e749728 code=0x7ffc0000 [ 138.934118][ T7678] loop2: detected capacity change from 0 to 2048 [ 138.943062][ T30] audit: type=1326 audit(138.890:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9e74975c code=0x7ffc0000 [ 138.948663][ T30] audit: type=1326 audit(138.910:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9e747e60 code=0x7ffc0000 [ 139.038513][ T30] audit: type=1326 audit(138.910:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff9e7497cc code=0x7ffc0000 [ 139.061841][ T30] audit: type=1326 audit(138.910:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9e747cc4 code=0x7ffc0000 [ 139.084224][ T7678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.123678][ T7304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.490851][ T7703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.531938][ T7703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.664362][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.715598][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.912465][ T7706] binder: 7704:7706 context manager tried to acquire desc 0 [ 140.914686][ T7706] binder: 7704:7706 ioctl c0306201 200003c0 returned -22 [ 141.439543][ T13] team0 (unregistering): Port device team_slave_1 removed [ 141.629375][ T13] team0 (unregistering): Port device team_slave_0 removed [ 143.731188][ T7711] loop1: detected capacity change from 0 to 1024 [ 143.752274][ T7711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.652179][ T6416] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.760036][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.805643][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.079009][ T13] team0 (unregistering): Port device team_slave_1 removed [ 146.239331][ T7728] loop1: detected capacity change from 0 to 512 [ 146.244010][ T7728] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 146.263431][ T7728] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.267: Invalid inode bitmap blk 4 in block_group 0 [ 146.270239][ T7728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.289698][ T13] team0 (unregistering): Port device team_slave_0 removed [ 147.129843][ T6416] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.711093][ T7316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.792135][ T7316] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.812171][ T7743] EXT4-fs (nvme0n1p2): resizing filesystem from 262144 to 262144 blocks [ 148.817719][ T7307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.845489][ T7307] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.866568][ T1973] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.868263][ T1973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.870990][ T6423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.874104][ T1973] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.876040][ T1973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.878286][ T6423] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.893084][ T6423] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.900918][ T6423] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.903303][ T6423] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.912328][ T6423] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.925852][ T7747] loop1: detected capacity change from 0 to 512 [ 148.934238][ T1973] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.936202][ T1973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.973618][ T1973] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.975588][ T1973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.999660][ T7747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.074202][ T7752] loop2: detected capacity change from 0 to 512 [ 149.087366][ T7752] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 149.930541][ T7765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.976134][ T7744] chnl_net:caif_netlink_parms(): no params data found [ 150.027691][ T7765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.093852][ T7758] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.273: corrupted inode contents [ 150.098378][ T7758] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #19: comm syz.1.273: mark_inode_dirty error [ 150.101642][ T7758] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.273: corrupted inode contents [ 150.104799][ T7758] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3007: inode #19: comm syz.1.273: mark_inode_dirty error [ 150.107988][ T7758] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3010: inode #19: comm syz.1.273: mark inode dirty (error -117) [ 150.111166][ T7758] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 150.252933][ T7770] loop2: detected capacity change from 0 to 512 [ 150.311820][ T7770] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.275: casefold flag without casefold feature [ 150.315812][ T7770] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.275: couldn't read orphan inode 15 (err -117) [ 150.319603][ T7770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.352107][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.359118][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.361231][ T7744] bridge_slave_0: entered allmulticast mode [ 150.363323][ T7744] bridge_slave_0: entered promiscuous mode [ 150.381398][ T7307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.387764][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.406081][ T7316] veth0_vlan: entered promiscuous mode [ 150.410936][ T7316] veth1_vlan: entered promiscuous mode [ 150.422704][ T7316] veth0_macvtap: entered promiscuous mode [ 150.426422][ T7316] veth1_macvtap: entered promiscuous mode [ 150.433208][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.436319][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.438859][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.441701][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.444253][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.447768][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.452430][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.455956][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.465124][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.473015][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.485108][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.489021][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.493121][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.500412][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.505130][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.510476][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.521160][ T7744] bridge_slave_1: entered allmulticast mode [ 150.525788][ T7744] bridge_slave_1: entered promiscuous mode [ 150.552914][ T7316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.562308][ T7316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.564478][ T7316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.577615][ T7316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.625849][ T7744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.637998][ T7744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.703093][ T7744] team0: Port device team_slave_0 added [ 150.730789][ T7744] team0: Port device team_slave_1 added [ 150.824938][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.829999][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.842046][ T7744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.860350][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.864476][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.871861][ T7744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.903314][ T5203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.914187][ T5203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.978699][ T7744] hsr_slave_0: entered promiscuous mode [ 150.985587][ T6420] Bluetooth: hci2: command tx timeout [ 151.035813][ T7744] hsr_slave_1: entered promiscuous mode [ 151.086493][ T7744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.090329][ T7744] Cannot create hsr debugfs directory [ 151.102144][ T5203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.108210][ T5203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.173332][ T7307] veth0_vlan: entered promiscuous mode [ 151.451887][ T7304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.488305][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.575530][ T7785] batadv_slave_1: entered promiscuous mode [ 151.583809][ T7307] veth1_vlan: entered promiscuous mode [ 151.590089][ T7784] batadv_slave_1: left promiscuous mode [ 151.623565][ T7307] veth0_macvtap: entered promiscuous mode [ 152.285586][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.302031][ T7307] veth1_macvtap: entered promiscuous mode [ 152.305945][ T6416] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.345011][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.348804][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.351209][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.353742][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.361836][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.364390][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.385658][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.395363][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.398796][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.402273][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.404850][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.416417][ T7791] loop3: detected capacity change from 0 to 128 [ 152.418737][ T7791] ext4: Unknown parameter 'noacl' [ 152.420318][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.423039][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.425494][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.428019][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.430370][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.432713][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.437101][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.472326][ T6420] Bluetooth: hci2: command tx timeout [ 153.475757][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.147495][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.310224][ T7814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.314750][ T7811] loop3: detected capacity change from 0 to 256 [ 154.345161][ T7307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.347768][ T7814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.358298][ T7307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.360585][ T7307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.364878][ T7307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.530837][ T6646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.532865][ T6646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.535418][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 154.535430][ T30] audit: type=1326 audit(134217882.505:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7818 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f49728 code=0x7ffc0000 [ 154.542259][ T30] audit: type=1326 audit(134217882.515:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7818 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=438 compat=0 ip=0xffffb3f49728 code=0x7ffc0000 [ 154.775644][ T30] audit: type=1326 audit(134217882.515:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7818 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f49728 code=0x7ffc0000 [ 154.780782][ T30] audit: type=1326 audit(134217882.515:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7818 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f49728 code=0x7ffc0000 [ 154.815930][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.818038][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.052831][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.075736][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.121616][ T11] bridge_slave_1: left allmulticast mode [ 155.122967][ T11] bridge_slave_1: left promiscuous mode [ 155.124342][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.133086][ T11] bridge_slave_0: left allmulticast mode [ 155.143629][ T11] bridge_slave_0: left promiscuous mode [ 155.148666][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.191427][ T7831] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.546401][ T6420] Bluetooth: hci2: command tx timeout [ 156.091897][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.125735][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.495935][ T7856] loop2: detected capacity change from 0 to 2048 [ 157.520364][ T7856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.615785][ T6420] Bluetooth: hci2: command tx timeout [ 158.297906][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.342657][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.373363][ T7304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.398154][ T11] bond0 (unregistering): Released all slaves [ 158.424605][ T7862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.451243][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.205'. [ 158.485933][ T7862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.858378][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.296'. [ 159.560639][ T7890] loop1: detected capacity change from 0 to 256 [ 159.581222][ T7894] loop3: detected capacity change from 0 to 1024 [ 159.584867][ T7894] EXT4-fs: Ignoring removed orlov option [ 159.587204][ T7894] EXT4-fs (loop3): Test dummy encryption mode enabled [ 159.602240][ T7894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.686105][ T30] audit: type=1326 audit(134217887.645:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e749728 code=0x7ffc0000 [ 159.707936][ T30] audit: type=1326 audit(134217887.645:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e749728 code=0x7ffc0000 [ 159.749478][ T30] audit: type=1326 audit(134217887.645:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9e749728 code=0x7ffc0000 [ 159.774859][ T30] audit: type=1326 audit(134217887.645:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e749728 code=0x7ffc0000 [ 159.788213][ T30] audit: type=1326 audit(134217887.645:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e749728 code=0x7ffc0000 [ 160.652862][ T7316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.976999][ T7915] loop3: detected capacity change from 0 to 16 [ 160.984141][ T11] hsr_slave_0: left promiscuous mode [ 161.283710][ T7915] erofs: (device loop3): mounted with root inode @ nid 36. [ 161.290054][ T11] hsr_slave_1: left promiscuous mode [ 161.453246][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.541689][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.605829][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.607599][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.643583][ T11] veth1_macvtap: left promiscuous mode [ 161.645079][ T11] veth0_macvtap: left promiscuous mode [ 161.656857][ T11] veth1_vlan: left promiscuous mode [ 161.663581][ T11] veth0_vlan: left promiscuous mode [ 164.167397][ T7965] loop2: detected capacity change from 0 to 512 [ 164.194238][ T7965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.044287][ T7304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.099947][ T7974] loop2: detected capacity change from 0 to 512 [ 165.109740][ T7974] EXT4-fs (loop2): Test dummy encryption mode enabled [ 165.121630][ T7974] EXT4-fs error (device loop2): __ext4_fill_super:5435: inode #2: comm syz.2.313: casefold flag without casefold feature [ 165.135549][ T7974] EXT4-fs (loop2): get root inode failed [ 165.137075][ T7974] EXT4-fs (loop2): mount failed [ 165.388052][ T7974] loop2: detected capacity change from 0 to 40427 [ 165.410884][ T7974] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 165.412885][ T7974] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 165.437104][ T7974] F2FS-fs (loop2): Found nat_bits in checkpoint [ 165.462820][ T7974] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 165.464594][ T7974] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 166.246417][ T7985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.332411][ T7985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.729132][ T11] team0 (unregistering): Port device team_slave_1 removed [ 167.183815][ T11] team0 (unregistering): Port device team_slave_0 removed [ 168.160661][ T7995] loop2: detected capacity change from 0 to 40427 [ 168.163152][ T7995] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 168.164978][ T7995] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 168.172223][ T7995] F2FS-fs (loop2): invalid crc value [ 168.175115][ T7995] F2FS-fs (loop2): Found nat_bits in checkpoint [ 168.199085][ T7995] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 168.200855][ T7995] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 168.792740][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.939816][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.065386][ T5979] Bluetooth: hci3: command 0x0406 tx timeout [ 169.067168][ T6414] Bluetooth: hci1: command 0x0406 tx timeout [ 170.804118][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.306'. [ 170.847837][ T8007] sch_tbf: peakrate 9 is lower than or equals to rate 9 ! [ 170.942015][ T13] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 170.956047][ T13] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 170.985522][ T7744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.007013][ T7744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.011692][ T6420] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.018315][ T6420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.021317][ T6420] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.025957][ T6420] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.028380][ T6420] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 171.034031][ T6420] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.066745][ T7744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.073429][ T7744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.265111][ T8019] loop2: detected capacity change from 0 to 256 [ 172.550362][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.565561][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.570212][ T8012] chnl_net:caif_netlink_parms(): no params data found [ 172.582602][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.584541][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.599542][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.601391][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.729327][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.733929][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.735946][ T8012] bridge_slave_0: entered allmulticast mode [ 172.739221][ T8012] bridge_slave_0: entered promiscuous mode [ 172.755129][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.758163][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.760122][ T8012] bridge_slave_1: entered allmulticast mode [ 172.762128][ T8012] bridge_slave_1: entered promiscuous mode [ 172.825049][ T8027] loop1: detected capacity change from 0 to 40427 [ 172.828239][ T8027] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 172.831109][ T8027] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 172.835154][ T8027] F2FS-fs (loop1): invalid crc value [ 172.843364][ T8027] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 172.848074][ T8027] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 172.863365][ T8027] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 172.865539][ T8027] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 173.055450][ T6423] Bluetooth: hci4: command tx timeout [ 173.124551][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.149078][ T8012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.154969][ T8012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.195785][ T8012] team0: Port device team_slave_0 added [ 173.268035][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.284409][ T8012] team0: Port device team_slave_1 added [ 173.309996][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.368250][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.377102][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.379686][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.391240][ T8012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.397059][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.402136][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.410997][ T8012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.839355][ T8012] hsr_slave_0: entered promiscuous mode [ 173.908755][ T8012] hsr_slave_1: entered promiscuous mode [ 173.988551][ T8012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.000379][ T8012] Cannot create hsr debugfs directory [ 174.239874][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.285467][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 174.381979][ T8057] loop2: detected capacity change from 0 to 512 [ 174.410241][ T8057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.189476][ T6423] Bluetooth: hci4: command tx timeout [ 175.525073][ T7304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.571064][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.615810][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.824031][ T8075] loop4: detected capacity change from 0 to 256 [ 176.215459][ T8078] loop2: detected capacity change from 0 to 4096 [ 176.232647][ T8078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.255777][ T7304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.309676][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.335609][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.278713][ T8091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.338'. [ 177.951983][ T6423] Bluetooth: hci4: command tx timeout [ 179.204798][ T8103] loop4: detected capacity change from 0 to 2048 [ 179.224978][ T8103] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 180.015534][ T6423] Bluetooth: hci4: command tx timeout [ 184.202159][ T6420] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.207108][ T6420] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.209477][ T6420] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.212347][ T6420] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.214546][ T6420] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 184.216937][ T6420] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.261543][ T6420] Bluetooth: hci0: command tx timeout [ 187.375758][ T2340] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.377300][ T2340] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.695596][ T6423] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.698408][ T6423] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.700850][ T6423] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.703316][ T6423] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.713610][ T6423] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 187.717597][ T6423] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 188.335478][ T6420] Bluetooth: hci0: command tx timeout [ 188.460897][ T7744] veth0_vlan: entered promiscuous mode [ 188.505085][ T11] bridge_slave_1: left allmulticast mode [ 188.509136][ T11] bridge_slave_1: left promiscuous mode [ 188.510551][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.515062][ T11] bridge_slave_0: left allmulticast mode [ 188.523616][ T11] bridge_slave_0: left promiscuous mode [ 188.525214][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.775436][ T6420] Bluetooth: hci6: command tx timeout [ 190.415419][ T6420] Bluetooth: hci0: command tx timeout [ 190.738376][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.777949][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.837797][ T11] bond0 (unregistering): Released all slaves [ 190.898928][ T8121] IPv6: NLM_F_REPLACE set, but no existing node found! [ 190.952192][ T7744] veth1_vlan: entered promiscuous mode [ 191.813512][ T7744] veth0_macvtap: entered promiscuous mode [ 191.857347][ T6420] Bluetooth: hci6: command tx timeout [ 191.945673][ T7744] veth1_macvtap: entered promiscuous mode [ 191.953047][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.956718][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.959319][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.961757][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.964256][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.967022][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.969551][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.972006][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.978942][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.052937][ T8157] loop4: detected capacity change from 0 to 512 [ 192.066202][ T8157] EXT4-fs (loop4): Test dummy encryption mode enabled [ 192.076065][ T8157] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.349: corrupted in-inode xattr: invalid ea_ino [ 192.081341][ T8157] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.349: couldn't read orphan inode 12 (err -117) [ 192.084720][ T8157] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.238167][ T8111] chnl_net:caif_netlink_parms(): no params data found [ 192.248826][ T8107] chnl_net:caif_netlink_parms(): no params data found [ 192.270028][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.272846][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.282322][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.383096][ T8169] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 192.521452][ T8169] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.349: Directory hole found for htree leaf block 0 [ 192.545404][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.583694][ T8169] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.349: Directory hole found for htree leaf block 0 [ 192.587590][ T6420] Bluetooth: hci0: command tx timeout [ 192.623993][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.671486][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.714755][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.777664][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.856266][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.934098][ T11] hsr_slave_0: left promiscuous mode [ 193.025560][ T11] hsr_slave_1: left promiscuous mode [ 193.145520][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.153734][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.156678][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.158816][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.173006][ T11] veth1_macvtap: left promiscuous mode [ 193.174508][ T11] veth0_macvtap: left promiscuous mode [ 193.176376][ T11] veth1_vlan: left promiscuous mode [ 193.177744][ T11] veth0_vlan: left promiscuous mode [ 193.935461][ T6420] Bluetooth: hci6: command tx timeout [ 194.919128][ T11] team0 (unregistering): Port device team_slave_1 removed [ 195.107851][ T11] team0 (unregistering): Port device team_slave_0 removed [ 196.025429][ T6420] Bluetooth: hci6: command tx timeout [ 197.355454][ T7744] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.357770][ T7744] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.359857][ T7744] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.361887][ T7744] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.370025][ T7307] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 197.612687][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.614514][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.616942][ T8111] bridge_slave_0: entered allmulticast mode [ 197.619090][ T8111] bridge_slave_0: entered promiscuous mode [ 197.644664][ T8107] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.659010][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.661238][ T8107] bridge_slave_0: entered allmulticast mode [ 197.663200][ T8107] bridge_slave_0: entered promiscuous mode [ 197.667100][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.678073][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.679861][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.681739][ T8107] bridge_slave_1: entered allmulticast mode [ 197.684720][ T8107] bridge_slave_1: entered promiscuous mode [ 197.692983][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.694791][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.697190][ T8111] bridge_slave_1: entered allmulticast mode [ 197.699319][ T8111] bridge_slave_1: entered promiscuous mode [ 197.713405][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.730014][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.734255][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.821957][ T8107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.827632][ T8107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.862172][ T8107] team0: Port device team_slave_0 added [ 197.868521][ T8111] team0: Port device team_slave_0 added [ 197.885585][ T8107] team0: Port device team_slave_1 added [ 197.913583][ T8111] team0: Port device team_slave_1 added [ 197.966164][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.968113][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.974778][ T8107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.023628][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.029184][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.048602][ T8111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.052553][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.054521][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.081225][ T8107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.094999][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.102515][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.121925][ T8111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.195588][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.197572][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.287567][ T8111] hsr_slave_0: entered promiscuous mode [ 198.315883][ T8111] hsr_slave_1: entered promiscuous mode [ 198.336234][ T8111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.337977][ T8111] Cannot create hsr debugfs directory [ 198.374117][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.382167][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.389776][ T8012] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.417144][ T8107] hsr_slave_0: entered promiscuous mode [ 198.445694][ T8107] hsr_slave_1: entered promiscuous mode [ 198.485490][ T8107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.487470][ T8107] Cannot create hsr debugfs directory [ 198.491090][ T8012] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.496429][ T8012] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.500054][ T8012] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.888766][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.476403][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.508910][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.220627][ T6423] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.223974][ T6423] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.226743][ T6423] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.229812][ T6423] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.232082][ T6423] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.234264][ T6423] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.129392][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.142441][ T8243] tipc: Enabling of bearer rejected, failed to enable media [ 211.258338][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.283261][ T8012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.295555][ T6423] Bluetooth: hci3: command tx timeout [ 211.350383][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.412600][ T8012] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.424656][ T5203] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.426681][ T5203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.444850][ T5203] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.446762][ T5203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.461120][ T8247] chnl_net:caif_netlink_parms(): no params data found [ 211.557369][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.565704][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.567672][ T8247] bridge_slave_0: entered allmulticast mode [ 211.569772][ T8247] bridge_slave_0: entered promiscuous mode [ 211.590018][ T8012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.592563][ T8012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.606232][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.608222][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.610099][ T8247] bridge_slave_1: entered allmulticast mode [ 211.612375][ T8247] bridge_slave_1: entered promiscuous mode [ 211.677243][ T8247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.681327][ T8247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.279357][ T8247] team0: Port device team_slave_0 added [ 212.308649][ T8247] team0: Port device team_slave_1 added [ 212.520193][ T8012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.574007][ T8012] veth0_vlan: entered promiscuous mode [ 212.646021][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.647911][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.654475][ T8247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.669611][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.671421][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.705110][ T8247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.079415][ T8247] hsr_slave_0: entered promiscuous mode [ 213.133430][ T8247] hsr_slave_1: entered promiscuous mode [ 213.186812][ T8247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.188896][ T8247] Cannot create hsr debugfs directory [ 213.194225][ T8012] veth1_vlan: entered promiscuous mode [ 213.316198][ T8012] veth0_macvtap: entered promiscuous mode [ 213.319924][ T8012] veth1_macvtap: entered promiscuous mode [ 213.379787][ T6423] Bluetooth: hci3: command tx timeout [ 213.383401][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.394391][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.397130][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.399691][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.402180][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.404697][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.415351][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.418482][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.422209][ T8012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.458683][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.461307][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.463654][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.478572][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.481173][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.483705][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.495212][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.498431][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.501566][ T8012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.509196][ T8012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.511189][ T8012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.513162][ T8012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.514952][ T8012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.535095][ T11] bridge_slave_1: left allmulticast mode [ 213.547173][ T11] bridge_slave_1: left promiscuous mode [ 213.549564][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.552974][ T11] bridge_slave_0: left allmulticast mode [ 213.554491][ T11] bridge_slave_0: left promiscuous mode [ 213.562346][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.568554][ T11] bridge_slave_1: left allmulticast mode [ 213.570063][ T11] bridge_slave_1: left promiscuous mode [ 213.571381][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.574373][ T11] bridge_slave_0: left allmulticast mode [ 213.583418][ T11] bridge_slave_0: left promiscuous mode [ 213.585050][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.833710][ T8289] loop4: detected capacity change from 0 to 40427 [ 213.843085][ T8289] F2FS-fs (loop4): Unrecognized mount option "==S>F2"fVMܞrY#޴!b}_S2A0- jgO)NSQ4Yo̒3K"?1O<Z(1$|Uw9R5#B|˗`M :\?/+d۱?#g@?M-]`R" or missing value [ 214.103395][ T8289] loop4: detected capacity change from 0 to 40427 [ 214.107695][ T8289] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 214.109773][ T8289] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 214.134219][ T8289] F2FS-fs (loop4): Found nat_bits in checkpoint [ 214.147160][ T8289] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 214.149070][ T8289] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 214.944493][ T8295] overlayfs: invalid origin (000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 215.080487][ T7307] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 215.082447][ T7307] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 215.084289][ T7307] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 215.090785][ T7307] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 215.092753][ T7307] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 215.094550][ T7307] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 215.096783][ T7307] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 215.456339][ T6423] Bluetooth: hci3: command tx timeout [ 216.958910][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.998851][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.037953][ T11] bond0 (unregistering): Released all slaves [ 217.535411][ T6423] Bluetooth: hci3: command tx timeout [ 217.788031][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.826703][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.877273][ T11] bond0 (unregistering): Released all slaves [ 217.994679][ T8111] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.001524][ T8111] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.034889][ T8111] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.046640][ T8111] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.056164][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.058536][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.060603][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.093857][ T5203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.105488][ T5203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.115744][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.291021][ T8327] vhci_hcd: invalid port number 157 [ 218.292334][ T8327] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 218.479205][ T8330] syzkaller0: entered promiscuous mode [ 218.480708][ T8330] syzkaller0: entered allmulticast mode [ 219.593979][ T8340] loop4: detected capacity change from 0 to 512 [ 219.598753][ T8340] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 219.616828][ T8340] usb usb8: usbfs: process 8340 (syz.4.371) did not claim interface 0 before use [ 219.669677][ T8342] loop4: detected capacity change from 0 to 512 [ 219.698058][ T8342] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.372: bg 0: block 248: padding at end of block bitmap is not set [ 219.703352][ T8342] Quota error (device loop4): write_blk: dquota write failed [ 219.706442][ T8342] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 219.709070][ T8342] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.372: Failed to acquire dquot type 1 [ 219.715854][ T8342] EXT4-fs (loop4): 1 truncate cleaned up [ 219.717938][ T8342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.752903][ T7307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.997458][ T8348] loop4: detected capacity change from 0 to 40427 [ 220.014484][ T8348] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.045156][ T8348] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 220.783869][ T7307] syz-executor: attempt to access beyond end of device [ 220.783869][ T7307] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 220.794190][ T7307] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 222.049536][ T8363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.095803][ T8363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.639581][ T8365] loop4: detected capacity change from 0 to 2048 [ 222.663915][ T8365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.670859][ T8365] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.377: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 222.694989][ T7307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.932314][ T8378] binder: 8375:8378 tried to acquire reference to desc 0, got 1 instead [ 226.718715][ T7390] binder: send failed reply for transaction 9 to 8375:8378 [ 226.721063][ T7390] binder: undelivered TRANSACTION_COMPLETE [ 226.723287][ T7390] binder: undelivered TRANSACTION_ERROR: 29189 [ 226.961103][ T8384] binder: 8382:8384 Acquire 1 refcount change on invalid ref 0 ret -22 [ 227.683157][ T8386] loop4: detected capacity change from 0 to 128 [ 227.685954][ T8386] vfat: Unknown parameter '' [ 228.682625][ T8391] loop4: detected capacity change from 0 to 1024 [ 228.700260][ T6414] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.700718][ T8391] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 228.706606][ T6414] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.709143][ T6414] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.711987][ T6414] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.714116][ T6414] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 228.716253][ T6414] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.739412][ T8391] JBD2: no valid journal superblock found [ 228.740979][ T8391] EXT4-fs (loop4): Could not load journal inode [ 230.421104][ T6414] Bluetooth: hci7: command 0x0406 tx timeout [ 230.735430][ T6423] Bluetooth: hci2: command tx timeout [ 232.815593][ T6423] Bluetooth: hci2: command tx timeout [ 233.222089][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.388'. [ 233.383492][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.424161][ T8107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.171421][ T8247] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.184174][ T8107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.233756][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.240016][ T8107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.277268][ T8247] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.299132][ T8107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.365704][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.367587][ T6788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.370308][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.372143][ T6788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.426878][ T8247] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.568775][ T8247] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.596423][ T8392] chnl_net:caif_netlink_parms(): no params data found [ 234.647910][ T11] hsr_slave_0: left promiscuous mode [ 234.685714][ T11] hsr_slave_1: left promiscuous mode [ 234.775414][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.777286][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.780803][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.782772][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.793873][ T11] hsr_slave_0: left promiscuous mode [ 234.843175][ T11] hsr_slave_1: left promiscuous mode [ 234.895559][ T6423] Bluetooth: hci2: command tx timeout [ 234.915519][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.917957][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.930374][ T11] veth1_macvtap: left promiscuous mode [ 234.931772][ T11] veth0_macvtap: left promiscuous mode [ 234.933000][ T11] veth1_vlan: left promiscuous mode [ 234.934431][ T11] veth0_vlan: left promiscuous mode [ 236.678486][ T11] team0 (unregistering): Port device team_slave_1 removed [ 236.878115][ T11] team0 (unregistering): Port device team_slave_0 removed [ 236.975853][ T6423] Bluetooth: hci2: command tx timeout [ 240.819449][ T11] team0 (unregistering): Port device team_slave_1 removed [ 241.035470][ T11] team0 (unregistering): Port device team_slave_0 removed [ 243.283230][ T8111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.286028][ T8111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.337569][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.339467][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.341200][ T8392] bridge_slave_0: entered allmulticast mode [ 243.343305][ T8392] bridge_slave_0: entered promiscuous mode [ 243.369960][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.371675][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.373700][ T8392] bridge_slave_1: entered allmulticast mode [ 243.376550][ T8392] bridge_slave_1: entered promiscuous mode [ 243.397495][ T8107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.449009][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.456126][ T8392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.488817][ T8392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.549060][ T8111] veth0_vlan: entered promiscuous mode [ 243.553877][ T8111] veth1_vlan: entered promiscuous mode [ 243.579225][ T8392] team0: Port device team_slave_0 added [ 243.582201][ T8107] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.599052][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.600836][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.641625][ T8392] team0: Port device team_slave_1 added [ 243.650561][ T6414] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.654550][ T6414] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.659668][ T6414] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.659753][ T8111] veth0_macvtap: entered promiscuous mode [ 243.663902][ T6414] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.666811][ T6414] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 243.668808][ T6414] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.670316][ T8111] veth1_macvtap: entered promiscuous mode [ 243.697215][ T2122] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.699069][ T2122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.769964][ T8247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.854653][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.856870][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.863461][ T8392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.867771][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.869361][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.875389][ T8392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.881650][ T8247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.891562][ T8107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.894344][ T8107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.909578][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.912399][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.915012][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.919504][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.922165][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.924893][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.934290][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.937595][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.941334][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.944627][ T8247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.948554][ T8247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.978333][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.980811][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.983135][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.989278][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.991937][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.994477][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.999328][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.001696][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.004767][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.070203][ T8392] hsr_slave_0: entered promiscuous mode [ 244.115751][ T8392] hsr_slave_1: entered promiscuous mode [ 244.165837][ T8392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.167777][ T8392] Cannot create hsr debugfs directory [ 244.203015][ T8111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.206402][ T8111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.208475][ T8111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.210515][ T8111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.241483][ T8107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.369569][ T8247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.386525][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.388560][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.408162][ T8107] veth0_vlan: entered promiscuous mode [ 244.432813][ T6788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.434948][ T6788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.499272][ T8392] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.517984][ T8107] veth1_vlan: entered promiscuous mode [ 244.531050][ T8247] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.536471][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.538297][ T6788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.608894][ T8455] chnl_net:caif_netlink_parms(): no params data found [ 244.628829][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.630575][ T6788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.703568][ T6414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.707479][ T6414] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.714169][ T6414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.718972][ T6414] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.721153][ T6414] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 244.723785][ T6414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.776245][ T8392] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.878176][ T8247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.625697][ T31] INFO: task syz.0.146:7088 blocked for more than 143 seconds. [ 245.627724][ T31] Not tainted 6.11.0-rc7-syzkaller-g5f5673607153 #0 [ 245.632983][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.635141][ T31] task:syz.0.146 state:D stack:0 pid:7088 tgid:7087 ppid:6410 flags:0x00000009 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 245.637433][ T8392] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.642361][ T31] Call trace: [ 245.643275][ T31] __switch_to+0x420/0x6dc [ 245.644266][ T31] __schedule+0x13d4/0x2418 [ 245.655366][ T31] schedule+0xbc/0x238 [ 245.656482][ T31] io_schedule+0x8c/0x124 [ 245.657588][ T31] folio_wait_bit_common+0x65c/0xb90 [ 245.658725][ T31] __folio_lock+0x2c/0x3c [ 245.659810][ T31] z_erofs_runqueue+0x838/0x17ec [ 245.661025][ T31] z_erofs_readahead+0x858/0xc18 [ 245.662186][ T31] read_pages+0x160/0x694 [ 245.663298][ T31] page_cache_ra_unbounded+0x484/0x584 [ 245.664384][ T31] force_page_cache_ra+0x22c/0x290 [ 245.669150][ T31] generic_fadvise+0x3e8/0x6a0 [ 245.670423][ T31] __arm64_sys_fadvise64_64+0x12c/0x174 [ 245.671804][ T31] invoke_syscall+0x98/0x2b8 [ 245.673342][ T31] el0_svc_common+0x130/0x23c [ 245.674480][ T31] do_el0_svc+0x48/0x58 [ 245.675475][ T31] el0_svc+0x54/0x168 [ 245.676473][ T31] el0t_64_sync_handler+0x84/0xfc [ 245.677689][ T31] el0t_64_sync+0x190/0x194 [ 245.679161][ T31] [ 245.679161][ T31] Showing all locks held in the system: [ 245.686003][ T31] 4 locks held by kworker/u8:0/11: [ 245.687358][ T31] #0: ffff0000c1869948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 245.695442][ T6423] Bluetooth: hci4: command tx timeout [ 245.700694][ T31] #1: ffff8000975b7c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 245.703357][ T31] #2: ffff80009242b950 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x13c/0x9b4 [ 245.706631][ T31] #3: ffff800092437ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 245.708896][ T31] 3 locks held by kworker/u8:1/13: [ 245.710152][ T31] #0: ffff0000d2065148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 245.712713][ T31] #1: ffff8000975d7c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 245.716504][ T31] #2: ffff800092437ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 245.718704][ T31] 1 lock held by khungtaskd/31: [ 245.719778][ T31] #0: ffff80008f74dfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 245.722134][ T31] 3 locks held by kworker/u8:3/44: [ 245.723275][ T31] #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 245.726277][ T31] #1: ffff800097cc7c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 245.728696][ T31] #2: ffff800092437ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 245.730938][ T31] 2 locks held by getty/6174: [ 245.732077][ T31] #0: ffff0000d76c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 245.734410][ T31] #1: ffff80009b54b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41c/0x1228 [ 245.737175][ T31] 3 locks held by kworker/0:4/6463: [ 245.738459][ T31] #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 245.740856][ T31] #1: ffff8000b09f7c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 245.743681][ T31] #2: ffff0000c26df240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x270/0x32bc [ 245.746162][ T31] 1 lock held by syz.0.146/7088: [ 245.747378][ T31] #0: ffff0000f0188330 (mapping.invalidate_lock#4){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xc8/0x584 [ 245.750027][ T31] 3 locks held by kworker/1:6/7388: [ 245.751306][ T31] #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 245.753751][ T31] #1: ffff80009d467c20 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 245.756558][ T31] #2: ffff80008f7531c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x58/0x534 [ 245.759063][ T31] 3 locks held by kworker/1:7/7390: [ 245.760400][ T31] #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 245.763015][ T31] #1: ffff80009d3b7c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 245.765977][ T31] #2: ffff0000ed1ca240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x270/0x32bc [ 245.768571][ T31] 1 lock held by syz-executor/8247: [ 245.769863][ T31] #0: ffff800092437ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x5e8/0xa9c [ 245.772045][ T31] 7 locks held by syz-executor/8392: [ 245.773314][ T31] #0: ffff0000d8518420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x368/0xc80 [ 245.776581][ T31] #1: ffff0000cc407088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c [ 245.779131][ T31] #2: ffff0000cc0130f8 (kn->active#45){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c [ 245.781545][ T31] #3: ffff800091592148 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xec/0x39c [ 245.784036][ T31] #4: ffff0000d54080e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xbc/0x698 [ 245.786797][ T31] #5: ffff0000ceac6250 (&devlink->lock_key#12){+.+.}-{3:3}, at: devl_lock+0x24/0x34 [ 245.789107][ T31] #6: ffff80008f7531c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x58/0x534 [ 245.791671][ T31] 2 locks held by syz-executor/8455: [ 245.792953][ T31] #0: ffff800092437ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x5e8/0xa9c [ 245.795404][ T31] #1: ffff80008f7532f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x354/0x674 [ 245.797945][ T31] 1 lock held by syz-executor/8471: [ 245.799189][ T31] #0: ffff800092437ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x5e8/0xa9c [ 245.801438][ T31] 1 lock held by syz.2.391/8484: [ 245.802488][ T31] #0: ffff800092437ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x5e8/0xa9c [ 245.804876][ T31] 1 lock held by syz.2.391/8485: [ 245.806342][ T31] #0: ffff800092437ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 245.808509][ T31] [ 245.809066][ T31] ============================================= [ 245.809066][ T31] [ 245.810942][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 245.812613][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-g5f5673607153 #0 [ 245.814926][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 245.817575][ T31] Call trace: [ 245.818430][ T31] dump_backtrace+0x1b8/0x1e4 [ 245.819645][ T31] show_stack+0x2c/0x3c [ 245.820681][ T31] dump_stack_lvl+0xe4/0x150 [ 245.821826][ T31] dump_stack+0x1c/0x28 [ 245.822887][ T31] panic+0x300/0x884 [ 245.823904][ T31] hung_task_panic+0x0/0x2c [ 245.825024][ T31] kthread+0x288/0x310 [ 245.825926][ T31] ret_from_fork+0x10/0x20 [ 245.826981][ T31] SMP: stopping secondary CPUs [ 245.828197][ T31] Kernel Offset: disabled [ 245.829207][ T31] CPU features: 0x10,00000207,00200128,42017203 [ 245.830907][ T31] Memory Limit: none [ 246.523842][ T31] Rebooting in 86400 seconds..