last executing test programs: 3m4.060623233s ago: executing program 0 (id=305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) 3m3.985329062s ago: executing program 32 (id=305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) 3m3.012822649s ago: executing program 3 (id=322): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x201e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffc, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x40, 0xe, 0x29, {0x29, 0x22, "b34493ad846e6315bd8ceb828bdb1995db13e9779753fc52c69c72dc3b3428599243c5968c0e8a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m2.407677017s ago: executing program 3 (id=327): unshare(0x2020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 3m2.286863866s ago: executing program 3 (id=329): openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 3m2.178867096s ago: executing program 3 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m2.050894555s ago: executing program 3 (id=334): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed8059, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@data_err_abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfb, 0x476, &(0x7f0000000ac0)="$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") syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3m1.490912303s ago: executing program 3 (id=341): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_int(r0, &(0x7f0000000140)=0xe, 0x12) 3m1.423763223s ago: executing program 33 (id=341): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_int(r0, &(0x7f0000000140)=0xe, 0x12) 2m36.602914897s ago: executing program 1 (id=553): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x8) 2m36.469866467s ago: executing program 1 (id=556): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bsdgroups}, {@nobh}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x8, 0x0, 0x8000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4042, 0x1ff) sendfile(r3, r2, 0x0, 0xfffe83) 2m35.991220115s ago: executing program 1 (id=561): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@minixdf}]}, 0x1, 0x50e, &(0x7f00000017c0)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x41, 0x51b, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) ftruncate(r0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r1}) 2m35.578472514s ago: executing program 1 (id=568): syz_emit_ethernet(0x82e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "181373", 0x7f8, 0x3c, 0xa636efb2ff85a8a1, @private1, @local, {[], "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"}}}}}, 0x0) 2m35.369250323s ago: executing program 1 (id=570): lseek(0xffffffffffffffff, 0x130a, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@dioread_lock}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000540)={[{@journal_checksum}, {@discard}, {@nomblk_io_submit}, {@jqfmt_vfsv0}, {@commit={'commit', 0x3d, 0x5e}}, {@noblock_validity}, {@nodiscard}, {@sysvgroups}]}, 0x1, 0x263, &(0x7f0000000600)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) 2m35.095126912s ago: executing program 1 (id=572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x3abe, 0x0, r2, 0x300, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m27.627864573s ago: executing program 6 (id=628): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6ed, &(0x7f0000000dc0)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) 2m27.432072883s ago: executing program 6 (id=631): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2m27.235748742s ago: executing program 6 (id=635): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="620dc4ff15aa000271101e0000000000957e9de21d0000009cbffa9710af30f9e8ec47fc1edea081f824df81fcc9a1719b7771dcbb97c54e859a98157326028ab44108eedbf6758ef5229a934b3432c04618e67ac825d3cdcbab4bae6b98c4e8bd982357fdc952e557ddb18d7b6439723741344afc4835e43d81d610ffad6e47c33d74fb6e308c1853a37e4af790b903941ce6972c885b660467b969a314a8"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2m27.112535991s ago: executing program 6 (id=638): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x55b, &(0x7f0000000980)="$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") syz_clone(0x820000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000005c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "5ea714", 0x0, 0x33, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@hopopts={0x33}]}}}}}}}, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, 0x0, 0x0) 2m26.817709671s ago: executing program 6 (id=643): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001b80)='net/if_inet6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x2020) 2m25.960674557s ago: executing program 6 (id=656): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010207010902240001000000000904fb"], 0x0) 2m25.767795126s ago: executing program 34 (id=656): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010207010902240001000000000904fb"], 0x0) 2m19.924729524s ago: executing program 35 (id=572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x3abe, 0x0, r2, 0x300, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m58.978629764s ago: executing program 7 (id=872): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x9b, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122100631177fbac14030a44079f03fe800000ff050000000000000000ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) r0 = socket$packet(0x11, 0x3, 0x300) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 1m58.09091964s ago: executing program 7 (id=875): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) 1m57.96170307s ago: executing program 7 (id=877): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) 1m57.83468299s ago: executing program 7 (id=879): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 1m57.638948419s ago: executing program 7 (id=882): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000300)) 1m57.162743437s ago: executing program 7 (id=892): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 1m57.010127177s ago: executing program 36 (id=892): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 1m12.377575496s ago: executing program 2 (id=1201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 1m12.250934186s ago: executing program 2 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="a00000001000030400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000007800128009000100766c616e00000000680002800600ef00000000001c0003800c00010008000000010400000c00010d000000006ab20000400004800c00010007000000f8a500000c00010000100000030000000c0001000500000000000000060001"], 0xa0}, 0x1, 0xba01, 0x0, 0x4008010}, 0x0) 1m11.994671245s ago: executing program 2 (id=1205): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) msync(&(0x7f000074d000/0x1000)=nil, 0x1000, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000d00)=0x20000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x2, 0x4}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x149, 0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000080100"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) 1m10.962704791s ago: executing program 2 (id=1208): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 1m10.863713561s ago: executing program 2 (id=1210): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1m10.66022126s ago: executing program 2 (id=1213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 54.520920158s ago: executing program 37 (id=1213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 16.124968102s ago: executing program 0 (id=1251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000680)=@bridge_setlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}}, 0x0) 15.803810191s ago: executing program 0 (id=1334): bind$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x18) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) 13.890986403s ago: executing program 0 (id=1338): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) unshare(0x22020600) open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0/../file0/file0\x00', 0x89901) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 13.707334643s ago: executing program 0 (id=1340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 11.203703123s ago: executing program 8 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r6, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) 10.891638652s ago: executing program 8 (id=1354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r7, 0x1, 0x70bd29, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "47aa32b137d401a50000001000"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0xd, 0xfffffffe, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c}, {@in=@broadcast, 0x0, 0x6c}, @in=@multicast2, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x21}, {}, 0x80, 0x3502, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r3) 9.845621688s ago: executing program 8 (id=1358): socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60000000}, 0x50) 8.866657274s ago: executing program 0 (id=1359): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0x7}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xa}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12340}]}}]}, 0x44}}, 0x0) 8.350971962s ago: executing program 38 (id=1359): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0x7}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xa}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12340}]}}]}, 0x44}}, 0x0) 7.497665269s ago: executing program 8 (id=1362): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000380)={[{@usrjquota}, {@data_err_abort}, {@data_err_abort}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) timer_create(0x1, 0x0, &(0x7f0000000800)=0x0) timer_gettime(r3, &(0x7f0000000840)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sched_kthread_work_execute_start\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f00000001c0)={'lo\x00', {0x2, 0x0, @private=0xa010101}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) copy_file_range(r7, &(0x7f0000000180)=0x1, 0xffffffffffffffff, 0x0, 0x4, 0x0) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x4118b7b5f0715705, {0x42, 0x2}}, 0x10, 0x0}, 0x4090) 7.450039018s ago: executing program 4 (id=1363): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80041284, &(0x7f0000001080)) 6.414804205s ago: executing program 5 (id=1367): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mlock(&(0x7f000074f000/0x2000)=nil, 0x2000) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 6.414279725s ago: executing program 9 (id=1368): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000716f00000000000033"], 0xfc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 6.270274724s ago: executing program 9 (id=1369): r0 = socket(0x840000000002, 0x3, 0x100) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) 6.101236953s ago: executing program 5 (id=1370): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 6.079412393s ago: executing program 9 (id=1371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYBLOB="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", @ANYRES32=r5], 0x22c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x12b084226d2dad07, 0x0, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'caif0\x00'}}}}, 0x2c}}, 0x0) 5.786676982s ago: executing program 5 (id=1372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x1a9a81) ioctl$int_in(r0, 0x5421, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000340)="0000003f3d3449a8cf2d7c9282729e47bf013b426efd220284ebf4df211b94eac3eda004a7b729bbf01132ff33d7af6e580d725b03bddcad18e0badda7498d9ddd95dae0861621b90f9b13d52e67da9122affb", 0xfffffc96, 0x4000054, 0x0, 0x13) 5.574897022s ago: executing program 4 (id=1373): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000a00)={'pim6reg1\x00', @broadcast}) 4.745683738s ago: executing program 5 (id=1374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8}]}, 0x34}}, 0x0) 4.438045847s ago: executing program 4 (id=1375): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x24029000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000780)={[{@dioread_lock}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") 4.436610017s ago: executing program 5 (id=1384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x40000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267e, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.220220832s ago: executing program 5 (id=1376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, 0x0, 0x0) 2.316532999s ago: executing program 9 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x4, 0x0, 0x0, 0xa36d937cca5b736) 1.122553734s ago: executing program 9 (id=1378): r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d63703835302c6e616d65aa7d04743d312c6572726f72733d72656d6f756e742d726f2c6572726f72733d72656d6f756e742d726f2c666d61736b3f30303030303430303030303030303030323030383030332c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1520, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bond0\x00', 0x0}) 1.075414924s ago: executing program 4 (id=1379): unshare(0x22000400) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000380)=0x7, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x2042, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 1.058235264s ago: executing program 8 (id=1380): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20e41, 0x0) dup3(r0, r1, 0x0) 838.459344ms ago: executing program 4 (id=1381): syz_emit_ethernet(0x4b, &(0x7f0000000200)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x15, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "a78ce5"}]}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 25.84881ms ago: executing program 8 (id=1382): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@posixacl}]}}) 25.32106ms ago: executing program 4 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x1ff, {{}, {@val={0x8, 0x1, 0x64}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000000101010100000000000000000a000000300001802c000180140003000000000000000000000000000000000104000000ff0100000000000000000000000000010c0019800800010002"], 0x50}}, 0x4008084) 0s ago: executing program 9 (id=1385): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x20, 0x7, 0x69, "401a1e5f2e5f6309011fe4352742b878657781ff5ddbb4f8ee7dec46b48da7b19a724b3c22089537a7391c5c1ce5b1ceba552b92cee1fbb9e334e6f604ab1ea9ea69c584ae3b849876f25c2b6474373f8b9dcb622fee3a170e81aff236722e13fab98d690b8576c05f"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0}) kernel console output (not intermixed with test programs): y [ 97.403016][ T5531] EXT4-fs (loop4): 1 truncate cleaned up [ 97.404800][ T5531] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.423695][ T5531] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.407: Invalid inode table block 0 in block_group 0 [ 97.482907][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 97.561212][ T5543] loop2: detected capacity change from 0 to 512 [ 97.581882][ T5547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.583951][ T5547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.618427][ T4305] Bluetooth: hci1: command 0x040f tx timeout [ 97.863631][ T5550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 98.576786][ T5557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.579301][ T5554] loop4: detected capacity change from 0 to 136 [ 98.583512][ T5557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.618469][ T5195] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.726232][ T5561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.728749][ T5561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.739360][ T5561] loop4: detected capacity change from 0 to 512 [ 98.786946][ T5561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.211498][ T5567] loop2: detected capacity change from 0 to 4096 [ 99.216059][ T5567] EXT4-fs (loop2): Test dummy encryption mode enabled [ 99.233427][ T5567] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 99.237425][ T5567] System zones: 0-5 [ 99.245191][ T5567] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 99.276986][ T4298] EXT4-fs (loop2): unmounting filesystem. [ 99.325790][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 99.442247][ T4385] team0 (unregistering): Port device team_slave_1 removed [ 99.651719][ T4385] team0 (unregistering): Port device team_slave_0 removed [ 99.699403][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 99.733185][ T5583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'. [ 99.833289][ T5586] loop2: detected capacity change from 0 to 256 [ 99.849204][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.069059][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.685894][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 100.685907][ T27] audit: type=1326 audit(100.660:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5587 comm="syz.2.429" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaab52ba8 code=0x0 [ 101.743816][ T4385] team0 (unregistering): Port device bond0 removed [ 101.778511][ T4305] Bluetooth: hci1: command 0x0405 tx timeout [ 102.444426][ T4385] bond0 (unregistering): Released all slaves [ 102.719248][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.721262][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.792299][ T5304] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.801588][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.804174][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.807059][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.808539][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.829328][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.841079][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.843215][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.845101][ T5551] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.846554][ T5551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.890180][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.918419][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.931234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.933865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.936206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.960123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.966408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.988513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.990801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.996683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.003548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.012218][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.022698][ T5608] capability: warning: `syz.4.436' uses 32-bit capabilities (legacy support in use) [ 103.242988][ T5616] loop5: detected capacity change from 0 to 8192 [ 103.285245][ T5616] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 103.290348][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.292015][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.304733][ T5304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.477310][ T5635] loop4: detected capacity change from 0 to 1024 [ 103.532513][ T5637] loop5: detected capacity change from 0 to 1024 [ 103.596725][ T5637] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 103.766069][ T5651] Bluetooth: MGMT ver 1.22 [ 103.790429][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 103.806680][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.809324][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.917401][ T5304] device veth0_vlan entered promiscuous mode [ 103.936497][ T5304] device veth1_vlan entered promiscuous mode [ 104.033919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.039830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.043151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.065227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.073943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.087073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.111150][ T5304] device veth0_macvtap entered promiscuous mode [ 104.115398][ T5304] device veth1_macvtap entered promiscuous mode [ 104.124638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.126670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.142528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.149545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.161514][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.181985][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.184050][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.198424][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.200477][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.202477][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.204446][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.227200][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.237333][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.244185][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.247973][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.265476][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.267939][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.273977][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.275996][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.284702][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.286802][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.293908][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.296076][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.298024][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.308667][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.314156][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.316304][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.322255][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.342978][ T5304] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.344818][ T5304] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.346652][ T5304] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.364993][ T5304] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.377755][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.383521][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.500560][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.502610][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.506799][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.520149][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.539656][ T5113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.541502][ T5113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.544271][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.546866][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.607716][ T5680] loop5: detected capacity change from 0 to 1024 [ 104.645980][ T5680] netlink: 20 bytes leftover after parsing attributes in process `syz.5.452'. [ 105.221398][ T5699] loop5: detected capacity change from 0 to 512 [ 105.464351][ T5699] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 105.467000][ T5699] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 105.469313][ T5699] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.455: Corrupt directory, running e2fsck is recommended [ 105.479847][ T5699] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 105.483352][ T5699] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.455: corrupted in-inode xattr [ 105.488963][ T5699] EXT4-fs (loop5): Remounting filesystem read-only [ 105.490816][ T5699] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.455: couldn't read orphan inode 15 (err -117) [ 105.498724][ T5699] EXT4-fs (loop5): Remounting filesystem read-only [ 105.500228][ T5699] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 106.138846][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 106.921621][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.457'. [ 107.187471][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 107.484649][ T5750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.486767][ T5750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.629625][ T5761] loop5: detected capacity change from 0 to 8 [ 107.657955][ T5763] loop6: detected capacity change from 0 to 1024 [ 107.664285][ T5763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.697819][ T5763] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 107.766673][ T5304] EXT4-fs (loop6): unmounting filesystem. [ 107.855886][ T5775] loop5: detected capacity change from 0 to 128 [ 107.871130][ T5777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.872950][ T5777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.904475][ T5777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.910098][ T5777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.121791][ T5791] loop5: detected capacity change from 0 to 8 [ 108.166411][ T5791] SQUASHFS error: Failed to read block 0x1ec: -5 [ 108.170173][ T5791] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 109.324490][ T5821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.361487][ T5821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.376473][ T5821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.379709][ T5824] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 109.386184][ T5821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.408641][ T5841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.410530][ T5841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.437542][ T5843] loop1: detected capacity change from 0 to 1024 [ 110.440343][ T5843] EXT4-fs: Ignoring removed orlov option [ 110.441494][ T5843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.443331][ T5843] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.489158][ T5843] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 110.491796][ T5843] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.651406][ T5859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.655344][ T5859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.669371][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 110.990297][ T5874] loop1: detected capacity change from 0 to 512 [ 110.992917][ T5874] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.995673][ T5874] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.012772][ T5874] EXT4-fs (loop1): 1 truncate cleaned up [ 111.014084][ T5874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.318067][ T5900] loop6: detected capacity change from 0 to 8 [ 112.327573][ T5900] SQUASHFS error: Failed to read block 0x1ec: -5 [ 112.379044][ T5900] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 112.421462][ T5902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.511750][ T5908] loop6: detected capacity change from 0 to 164 [ 112.524171][ T5902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.557218][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 112.631742][ T5912] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 112.697818][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.707366][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.733426][ T5919] loop1: detected capacity change from 0 to 16 [ 112.741837][ T5919] erofs: (device loop1): mounted with root inode @ nid 36. [ 114.044548][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.057148][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.069862][ T5940] loop6: detected capacity change from 0 to 256 [ 114.098784][ T5940] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 115.002341][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.004354][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.512861][ T5967] loop6: detected capacity change from 0 to 512 [ 115.514482][ T5967] ext4: Unknown parameter 'noacl' [ 115.597074][ T5971] loop5: detected capacity change from 0 to 512 [ 115.691859][ T5971] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 115.747326][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 115.781882][ T5978] loop6: detected capacity change from 0 to 1024 [ 115.866552][ T5978] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 115.966361][ T5304] EXT4-fs (loop6): unmounting filesystem. [ 116.045916][ T5997] loop5: detected capacity change from 0 to 512 [ 116.116459][ T5997] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.551: invalid indirect mapped block 256 (level 2) [ 116.180742][ T5997] EXT4-fs (loop5): Remounting filesystem read-only [ 116.189047][ T5997] EXT4-fs (loop5): 2 truncates cleaned up [ 116.190202][ T5997] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 116.294780][ T6011] loop6: detected capacity change from 0 to 512 [ 116.351708][ T6011] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 116.400689][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 116.403828][ T6022] loop1: detected capacity change from 0 to 1024 [ 116.405634][ T6022] EXT4-fs: Ignoring removed nobh option [ 116.406841][ T6022] EXT4-fs: Ignoring removed nobh option [ 116.580312][ T6022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.755974][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 116.865551][ T6042] vhci_hcd: invalid port number 34 [ 116.866792][ T6042] vhci_hcd: invalid port number 34 [ 116.880726][ T6043] loop1: detected capacity change from 0 to 512 [ 116.927084][ T6043] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 117.164588][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.167943][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 117.183539][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.404351][ T6059] loop1: detected capacity change from 0 to 512 [ 117.490449][ T6059] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 117.526648][ T6059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.528233][ T6059] EXT4-fs: Cannot change journaled quota options when quota turned on [ 117.694603][ T4296] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /101/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 118.419296][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.421133][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.502871][ T5304] EXT4-fs (loop6): unmounting filesystem. [ 118.892834][ T6092] hub 2-0:1.0: USB hub found [ 118.896177][ T6092] hub 2-0:1.0: 8 ports detected [ 119.578993][ T6098] loop5: detected capacity change from 0 to 128 [ 119.581261][ T6098] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 120.663977][ T6112] loop6: detected capacity change from 0 to 512 [ 120.718156][ T6112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.909519][ T6117] loop4: detected capacity change from 0 to 1764 [ 120.936415][ T6112] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 121.778879][ T6122] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 122.861328][ T5304] EXT4-fs (loop6): unmounting filesystem. [ 122.872185][ T6150] loop4: detected capacity change from 0 to 8192 [ 122.939504][ T6150] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.003869][ T6154] loop6: detected capacity change from 0 to 512 [ 123.025255][ T6154] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 123.037768][ T6154] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 123.068112][ T6154] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 123.104598][ T6154] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 123.106306][ T6154] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 123.130938][ T6154] EXT4-fs (loop6): orphan cleanup on readonly fs [ 123.159479][ T6154] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.597: bg 0: block 34: padding at end of block bitmap is not set [ 123.206748][ T6154] Quota error (device loop6): write_blk: dquota write failed [ 123.220915][ T6154] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 123.222917][ T6154] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.597: Failed to acquire dquot type 1 [ 123.292895][ T6154] EXT4-fs (loop6): 1 truncate cleaned up [ 123.304508][ T6154] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 123.532397][ T5304] EXT4-fs (loop6): unmounting filesystem. [ 124.295795][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.297713][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.354419][ T6203] loop6: detected capacity change from 0 to 256 [ 124.382569][ T6203] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.815700][ T6228] loop4: detected capacity change from 0 to 256 [ 124.845504][ T6228] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 125.053248][ T6241] device veth0_macvtap left promiscuous mode [ 125.195798][ T6248] loop6: detected capacity change from 0 to 1024 [ 125.232152][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.629'. [ 125.297549][ T5551] hfsplus: b-tree write err: -5, ino 4 [ 125.692125][ T6276] loop6: detected capacity change from 0 to 1024 [ 125.725071][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.639'. [ 125.781591][ T6276] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 125.939050][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.940414][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.946318][ T5304] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 126.008873][ T5304] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 126.103068][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.104880][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.144766][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.146793][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.390070][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.398639][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.493688][ T6322] loop4: detected capacity change from 0 to 164 [ 126.725762][ T6289] EXT4-fs (loop6): unmounting filesystem. [ 127.048993][ T6343] loop5: detected capacity change from 0 to 512 [ 127.060379][ T6343] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.115545][ T6343] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ee018, mo2=0000] [ 127.117214][ T6343] System zones: 0-2, 18-18, 34-34 [ 127.125600][ T6343] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 127.127812][ T6343] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 127.138586][ T6343] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.658: Failed to acquire dquot type 0 [ 127.165631][ T6343] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 127.167855][ T6343] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 127.170665][ T6343] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.658: Failed to acquire dquot type 0 [ 127.185891][ T6343] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 127.188418][ T6343] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 127.208276][ T6343] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.658: Failed to acquire dquot type 0 [ 127.217106][ T4305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.232671][ T4674] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.236771][ T4305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.236852][ T6343] EXT4-fs (loop5): 1 orphan inode deleted [ 127.240145][ T6343] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 127.240151][ T4305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.244855][ T4305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.247535][ T4305] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 127.258628][ T4305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.331455][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 127.397797][ T6363] loop4: detected capacity change from 0 to 256 [ 127.441898][ T4674] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.445051][ T6363] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe89b369c, utbl_chksum : 0xe619d30d) [ 127.465530][ T6365] loop5: detected capacity change from 0 to 1024 [ 127.466987][ T6363] syz.4.663: attempt to access beyond end of device [ 127.466987][ T6363] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 127.485147][ T6363] syz.4.663: attempt to access beyond end of device [ 127.485147][ T6363] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 127.518652][ T6365] hfsplus: request for non-existent node 3 in B*Tree [ 127.520350][ T6365] hfsplus: request for non-existent node 3 in B*Tree [ 127.607430][ T4674] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.810587][ T4674] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.950331][ T6388] loop4: detected capacity change from 0 to 164 [ 127.995641][ T6385] loop5: detected capacity change from 0 to 2048 [ 128.014485][ T6354] chnl_net:caif_netlink_parms(): no params data found [ 128.115329][ T6385] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 128.117712][ T6385] EXT4-fs (loop5): unable to read superblock [ 128.294071][ T6402] af_packet: tpacket_rcv: packet too big, clamped from 298 to 4294967286. macoff=82 [ 128.411164][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.412671][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.416785][ T6354] device bridge_slave_0 entered promiscuous mode [ 128.474932][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.478644][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.481057][ T6354] device bridge_slave_1 entered promiscuous mode [ 128.692138][ T6424] loop5: detected capacity change from 0 to 512 [ 128.693779][ T6424] ext4: Unknown parameter 'fscontext' [ 128.700538][ T6354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.786433][ T6354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.817802][ T6428] loop4: detected capacity change from 0 to 2048 [ 128.862898][ T6428] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.897347][ T6354] team0: Port device team_slave_0 added [ 129.023876][ T6434] loop5: detected capacity change from 0 to 1024 [ 129.025656][ T6434] EXT4-fs: Ignoring removed i_version option [ 129.034214][ T6354] team0: Port device team_slave_1 added [ 129.084726][ T6434] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 129.216357][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.217844][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.239468][ T6354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.248264][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 129.298533][ T4305] Bluetooth: hci1: command 0x0409 tx timeout [ 129.346145][ T6450] support for the xor transformation has been removed. [ 129.349569][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.351308][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.356770][ T6354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.389087][ T22] kernel write not supported for file /cpuinfo (pid: 22 comm: kworker/1:0) [ 129.471343][ T6354] device hsr_slave_0 entered promiscuous mode [ 129.498761][ T6354] device hsr_slave_1 entered promiscuous mode [ 129.766021][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.768043][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.164866][ T6493] device pim6reg1 entered promiscuous mode [ 130.282569][ T6354] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 130.703449][ T6354] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 130.740816][ T6354] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 130.792356][ T6503] dvmrp1: tun_chr_ioctl cmd 1074025684 [ 130.854564][ T6354] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 130.935657][ T4674] device hsr_slave_0 left promiscuous mode [ 130.988701][ T4674] device hsr_slave_1 left promiscuous mode [ 131.079838][ T4674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.081427][ T4674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.091486][ T4674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.093035][ T4674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.099865][ T4674] device bridge_slave_1 left promiscuous mode [ 131.119705][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.159340][ T4674] device bridge_slave_0 left promiscuous mode [ 131.160712][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.175651][ T6516] netlink: 'syz.4.715': attribute type 2 has an invalid length. [ 131.323346][ T6522] loop5: detected capacity change from 0 to 16 [ 131.329144][ T6524] netlink: 'syz.4.717': attribute type 2 has an invalid length. [ 131.331000][ T6524] netlink: 'syz.4.717': attribute type 1 has an invalid length. [ 131.334375][ T6522] erofs: (device loop5): mounted with root inode @ nid 36. [ 131.379130][ T4305] Bluetooth: hci1: command 0x041b tx timeout [ 131.398825][ T4674] device veth1_macvtap left promiscuous mode [ 131.400158][ T4674] device veth0_macvtap left promiscuous mode [ 131.401485][ T4674] device veth1_vlan left promiscuous mode [ 131.402700][ T4674] device veth0_vlan left promiscuous mode [ 131.525176][ T27] audit: type=1326 audit(131.500:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 131.530058][ T27] audit: type=1326 audit(131.500:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 131.530494][ T6531] loop5: detected capacity change from 0 to 256 [ 131.534503][ T27] audit: type=1326 audit(131.500:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=231 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 131.576431][ T27] audit: type=1326 audit(131.500:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 131.599009][ T27] audit: type=1326 audit(131.500:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 131.762334][ T6538] loop5: detected capacity change from 0 to 256 [ 131.767811][ T6538] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 132.905000][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.5.724'. [ 133.027111][ T5600] EXT4-fs (loop1): unmounting filesystem. [ 133.260449][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 133.264014][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 133.266295][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 133.276408][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 133.278871][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 133.280620][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 133.458449][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 134.066527][ T6550] loop4: detected capacity change from 0 to 512 [ 134.085767][ T6550] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.098081][ T6550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 134.156018][ T6550] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 134.161189][ T6550] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 28 [ 134.164257][ T6550] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.164257][ T6550] [ 134.166421][ T6550] EXT4-fs (loop4): Total free blocks count 0 [ 134.167597][ T6550] EXT4-fs (loop4): Free/Dirty block details [ 134.169965][ T6550] EXT4-fs (loop4): free_blocks=39626 [ 134.171237][ T6550] EXT4-fs (loop4): dirty_blocks=17 [ 134.172324][ T6550] EXT4-fs (loop4): Block reservation details [ 134.173638][ T6550] EXT4-fs (loop4): i_reserved_data_blocks=17 [ 134.534613][ T6550] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 135.033051][ T4674] team0 (unregistering): Port device team_slave_1 removed [ 135.231284][ T4674] team0 (unregistering): Port device team_slave_0 removed [ 135.308519][ T4305] Bluetooth: hci5: command 0x0409 tx timeout [ 135.439931][ T4674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.548755][ T4305] Bluetooth: hci1: command 0x0419 tx timeout [ 135.640016][ T4674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.379853][ T47] Bluetooth: hci5: command 0x041b tx timeout [ 137.914905][ T6569] loop4: detected capacity change from 0 to 1024 [ 137.916715][ T6569] EXT4-fs: Ignoring removed orlov option [ 137.932200][ T6569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 137.968039][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 138.040711][ T4674] bond0 (unregistering): Released all slaves [ 138.370139][ T6579] loop5: detected capacity change from 0 to 512 [ 138.381697][ T6579] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 138.394068][ T6579] EXT4-fs (loop5): invalid journal inode [ 138.395348][ T6579] EXT4-fs (loop5): can't get journal size [ 138.402413][ T6579] EXT4-fs (loop5): 1 truncate cleaned up [ 138.403797][ T6579] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 138.456764][ T6579] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 2147483659 (only 1 groups) [ 138.511390][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 138.639208][ T6354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.754055][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.756037][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.782440][ T6354] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.882241][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.884609][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.886597][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.887942][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.899313][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.901702][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.904087][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.905664][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.907622][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.914274][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.919109][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.925470][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.929533][ T6607] loop4: detected capacity change from 0 to 256 [ 138.933276][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.939143][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.970975][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.973182][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.975444][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.977668][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.014934][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.017270][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.020963][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.091803][ T6614] loop4: detected capacity change from 0 to 512 [ 139.100275][ T6545] chnl_net:caif_netlink_parms(): no params data found [ 139.147861][ T6614] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.743: invalid indirect mapped block 256 (level 2) [ 139.163140][ T6614] EXT4-fs (loop4): Remounting filesystem read-only [ 139.178539][ T6614] EXT4-fs (loop4): 2 truncates cleaned up [ 139.179757][ T6614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.401873][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.425911][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.428231][ T6545] device bridge_slave_0 entered promiscuous mode [ 139.458496][ T4305] Bluetooth: hci5: command 0x040f tx timeout [ 139.479302][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.481936][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.494593][ T6545] device bridge_slave_1 entered promiscuous mode [ 139.504182][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.505936][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.545656][ T6354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.591050][ T6545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.601165][ T6545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.705219][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 139.956781][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.962473][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.035117][ T4674] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.044977][ T6654] loop5: detected capacity change from 0 to 1024 [ 140.053821][ T6545] team0: Port device team_slave_0 added [ 140.061545][ T6654] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.063310][ T6654] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 140.069708][ T6545] team0: Port device team_slave_1 added [ 140.177990][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.187171][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.200137][ T6660] Bluetooth: MGMT ver 1.22 [ 140.210622][ T4674] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.220036][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.221510][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.227006][ T6545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.237125][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.239048][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.244661][ T6545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.303468][ T6664] loop5: detected capacity change from 0 to 512 [ 140.315384][ T6664] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 140.353721][ T4674] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.418782][ T6667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.420959][ T6667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.460489][ T4674] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.500392][ T6545] device hsr_slave_0 entered promiscuous mode [ 140.540459][ T6545] device hsr_slave_1 entered promiscuous mode [ 140.559140][ T6545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.561133][ T6545] Cannot create hsr debugfs directory [ 140.596063][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.598833][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.783855][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.786090][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.789624][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.792215][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.835372][ T6354] device veth0_vlan entered promiscuous mode [ 140.907715][ T6354] device veth1_vlan entered promiscuous mode [ 140.945817][ T6689] loop4: detected capacity change from 0 to 256 [ 141.017328][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.023619][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.097011][ T6697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.098995][ T6697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.179039][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.181205][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.183333][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.186393][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.192597][ T6354] device veth0_macvtap entered promiscuous mode [ 141.196559][ T6354] device veth1_macvtap entered promiscuous mode [ 141.277512][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.290026][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.292093][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.294167][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.296144][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.298304][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.308173][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.310352][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.318292][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.320394][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.330221][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.342907][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.345054][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.349153][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.353470][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.460074][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.462175][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.464135][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.466167][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.478289][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.488003][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.502898][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.505147][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.507184][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.522669][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.529645][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.538426][ T4305] Bluetooth: hci5: command 0x0419 tx timeout [ 141.663620][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.666162][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.681834][ T6354] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.683645][ T6354] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.685483][ T6354] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.687182][ T6354] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.697271][ T6545] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 141.750774][ T6545] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 141.839414][ T6545] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 141.898780][ T6736] loop5: detected capacity change from 0 to 8 [ 141.966571][ T6545] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 141.987202][ T6739] loop4: detected capacity change from 0 to 128 [ 141.992441][ T6739] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.057561][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 142.297011][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.308940][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.322843][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.324733][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.427084][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.433338][ T6756] loop4: detected capacity change from 0 to 164 [ 142.559859][ T4510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.561799][ T4510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.578522][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.854302][ T6545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.864418][ T6777] loop5: detected capacity change from 0 to 512 [ 142.873170][ T6545] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.880862][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.883092][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.902667][ T6777] EXT4-fs (loop5): 1 truncate cleaned up [ 142.903906][ T6777] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 142.926264][ T6777] 9pnet: p9_errstr2errno: server reported unknown error loc_perc [ 142.954515][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 142.975326][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.993160][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.998887][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.000395][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.026673][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.030863][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.033511][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.036952][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.038452][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.044627][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.209566][ T6790] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 143.255326][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.280151][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.341440][ T6799] loop5: detected capacity change from 0 to 256 [ 143.349377][ T6798] loop7: detected capacity change from 0 to 512 [ 143.369198][ T5195] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.397340][ T5408] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.421056][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.423346][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.425956][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.428099][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.457990][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.465162][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.467390][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.473158][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.486218][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.489304][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.493164][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.564118][ T4674] device hsr_slave_0 left promiscuous mode [ 143.589298][ T4674] device hsr_slave_1 left promiscuous mode [ 143.618438][ T47] Bluetooth: hci5: command 0x0405 tx timeout [ 143.675679][ T6812] loop7: detected capacity change from 0 to 256 [ 143.676143][ T4674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.677716][ T6812] exfat: Bad value for 'uid' [ 143.679064][ T4674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.683966][ T4674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.685216][ T6812] loop7: detected capacity change from 0 to 128 [ 143.685476][ T4674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.697963][ T4674] device bridge_slave_1 left promiscuous mode [ 143.700847][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.703961][ T6812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 143.705752][ T6812] System zones: 1-3, 19-19, 35-36 [ 143.707708][ T6812] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 143.734520][ T6354] EXT4-fs (loop7): unmounting filesystem. [ 143.760084][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.807453][ T27] audit: type=1326 audit(143.780:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.7.799" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6952ba8 code=0x0 [ 143.898746][ T4674] device veth1_vlan left promiscuous mode [ 143.900203][ T4674] device veth0_vlan left promiscuous mode [ 143.912463][ T6822] loop7: detected capacity change from 0 to 8 [ 143.917142][ T6822] SQUASHFS error: zlib decompression failed, data probably corrupt [ 143.919879][ T6822] SQUASHFS error: Failed to read block 0x9b: -5 [ 143.921330][ T6822] SQUASHFS error: Unable to read metadata cache entry [99] [ 143.923007][ T6822] SQUASHFS error: Unable to read inode 0x127 [ 143.965338][ T5195] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.145956][ T6832] loop4: detected capacity change from 0 to 8192 [ 145.278097][ T6839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.281825][ T6839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.511810][ T4674] team0 (unregistering): Port device team_slave_1 removed [ 146.681152][ T4674] team0 (unregistering): Port device team_slave_0 removed [ 146.880174][ T4674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.130799][ T4674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.740396][ T4674] bond0 (unregistering): Released all slaves [ 149.966785][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.794'. [ 150.593287][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.595279][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.672678][ T6545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.675214][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.677040][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.003997][ T6909] loop5: detected capacity change from 0 to 1024 [ 151.205793][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.208240][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.210620][ T6909] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 151.280699][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.283229][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.285878][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.288009][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.304474][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 151.309661][ T6545] device veth0_vlan entered promiscuous mode [ 151.316056][ T6545] device veth1_vlan entered promiscuous mode [ 151.508626][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.511216][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.562203][ T6945] mmap: syz.5.844 (6945) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.684791][ T6545] device veth0_macvtap entered promiscuous mode [ 151.686948][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.690640][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.693892][ T6948] loop5: detected capacity change from 0 to 512 [ 151.717465][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.718133][ T6948] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.739248][ T6545] device veth1_macvtap entered promiscuous mode [ 151.805159][ T6948] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 151.867982][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.876649][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.898566][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.900772][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.902896][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.905012][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.951503][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.961419][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.969813][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.982944][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.995928][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.016802][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.019062][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.021451][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.024445][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.026687][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.032766][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.041211][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.047269][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.061382][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.068786][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.075879][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.083288][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.090092][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.104330][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 152.105201][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.130594][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.133096][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.140696][ T6545] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.147152][ T6545] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.154575][ T6545] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.160979][ T6545] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.450097][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.452083][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.480540][ T6988] loop5: detected capacity change from 0 to 1024 [ 152.494677][ T6988] EXT4-fs (loop5): #clusters per group too big: 598016 [ 152.496681][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.618961][ T4510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.620964][ T4510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.633482][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.113343][ T7015] loop5: detected capacity change from 0 to 512 [ 153.125182][ T7015] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.136949][ T7015] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.864: invalid indirect mapped block 4294967295 (level 1) [ 153.169919][ T7015] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.864: invalid indirect mapped block 4294967295 (level 1) [ 153.211610][ T7015] EXT4-fs (loop5): 2 truncates cleaned up [ 153.218784][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.222495][ T7015] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 153.223037][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.286098][ T7015] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #2: comm syz.5.864: directory missing '.' [ 153.392920][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 154.383143][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.385214][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.926990][ T7062] netlink: 'syz.5.878': attribute type 4 has an invalid length. [ 154.999329][ T7068] netlink: 'syz.5.878': attribute type 4 has an invalid length. [ 155.361281][ T7088] binder: 7084 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 155.361308][ T7088] binder: 7084:7088 ioctl c018620c 20000140 returned -22 [ 155.488547][ T7093] loop8: detected capacity change from 0 to 1024 [ 155.490471][ T7093] EXT4-fs: Ignoring removed nobh option [ 155.491973][ T7093] EXT4-fs: Ignoring removed bh option [ 155.513341][ T7097] loop4: detected capacity change from 0 to 512 [ 155.534684][ T7093] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.538303][ T7097] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 155.603710][ T7093] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 156.568652][ T7097] EXT4-fs (loop4): failed to open journal device unknown-block(4,137) -6 [ 156.574707][ T6545] EXT4-fs (loop8): unmounting filesystem. [ 156.669677][ T4304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.678671][ T4304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.681982][ T4304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.684126][ T4304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.686098][ T4304] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.687802][ T4304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.760152][ T7122] loop5: detected capacity change from 0 to 512 [ 156.813668][ T7122] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 156.831503][ T7126] loop4: detected capacity change from 0 to 512 [ 156.832072][ T7122] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #2: comm syz.5.896: corrupted inode contents [ 156.848918][ T7126] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.857217][ T7122] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #2: comm syz.5.896: mark_inode_dirty error [ 156.876638][ T7122] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #2: comm syz.5.896: corrupted inode contents [ 156.881960][ T7126] EXT4-fs (loop4): 1 truncate cleaned up [ 156.883189][ T7126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.938543][ T7132] loop8: detected capacity change from 0 to 512 [ 156.945323][ T7126] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.897: corrupted in-inode xattr [ 156.954637][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 156.978085][ T7126] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1723: inode #15: comm syz.4.897: unable to update i_inline_off [ 157.018701][ T7126] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.897: corrupted in-inode xattr [ 157.023522][ T7132] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 157.025734][ T7132] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 157.027758][ T7132] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.899: Failed to acquire dquot type 0 [ 157.068571][ T7132] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 157.070718][ T7132] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 157.072669][ T7132] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.899: Failed to acquire dquot type 0 [ 157.104957][ T7132] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 157.107174][ T7132] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 157.140693][ T7132] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.899: Failed to acquire dquot type 0 [ 157.144364][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 157.145857][ T7132] EXT4-fs (loop8): 1 orphan inode deleted [ 157.242916][ T7132] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 157.298911][ T7132] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 157.301383][ T7132] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 157.303345][ T7132] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.899: Failed to acquire dquot type 0 [ 157.547136][ T7157] loop5: detected capacity change from 0 to 256 [ 157.900807][ T7157] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb8397d31, utbl_chksum : 0xe619d30d) [ 158.169030][ T6545] EXT4-fs (loop8): unmounting filesystem. [ 158.312669][ T7171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.314600][ T7171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.422505][ T5836] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.613148][ T5836] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.619706][ T7179] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 158.630158][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.632863][ T7179] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.738597][ T4305] Bluetooth: hci2: command 0x0406 tx timeout [ 158.738695][ T4304] Bluetooth: hci1: command 0x0409 tx timeout [ 158.739788][ T4305] Bluetooth: hci4: command 0x0406 tx timeout [ 158.809998][ T7192] loop8: detected capacity change from 0 to 8192 [ 158.829756][ T7192] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.922384][ T5836] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.060919][ T5836] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.072129][ T7115] chnl_net:caif_netlink_parms(): no params data found [ 159.123476][ T7204] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.126072][ T7204] isofs_fill_super: bread failed, dev=loop8, iso_blknum=16, block=32 [ 159.156360][ T7206] usb usb8: usbfs: process 7206 (syz.5.921) did not claim interface 0 before use [ 159.181366][ T7115] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.185902][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.188020][ T7115] device bridge_slave_0 entered promiscuous mode [ 159.209603][ T7115] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.215657][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.224848][ T7115] device bridge_slave_1 entered promiscuous mode [ 159.341162][ T7115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.371802][ T7115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.502357][ T7226] loop5: detected capacity change from 0 to 512 [ 159.513764][ T7226] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.535890][ T7226] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 159.541011][ T7226] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.925: invalid indirect mapped block 2683928664 (level 1) [ 159.561504][ T7226] EXT4-fs (loop5): 1 truncate cleaned up [ 159.568056][ T7226] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 159.584048][ T7115] team0: Port device team_slave_0 added [ 159.588041][ T7232] fuse: Bad value for 'fd' [ 159.595950][ T7115] team0: Port device team_slave_1 added [ 159.650132][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 159.746063][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.747553][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.772976][ T7115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.788827][ T7239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.793405][ T7239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.850876][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.852450][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.858544][ T7115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.897576][ T7243] loop8: detected capacity change from 0 to 1024 [ 160.041258][ T7115] device hsr_slave_0 entered promiscuous mode [ 160.078979][ T7115] device hsr_slave_1 entered promiscuous mode [ 160.098776][ T7115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.100319][ T7115] Cannot create hsr debugfs directory [ 160.436926][ T7270] input: syz0 as /devices/virtual/input/input10 [ 160.828934][ T4313] Bluetooth: hci1: command 0x041b tx timeout [ 161.637306][ T7301] netlink: 'syz.4.949': attribute type 2 has an invalid length. [ 161.641994][ T7301] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 162.812854][ T7319] loop4: detected capacity change from 0 to 8 [ 162.895953][ T7329] loop8: detected capacity change from 0 to 512 [ 162.899066][ T4304] Bluetooth: hci1: command 0x040f tx timeout [ 162.903193][ T7329] ext4: Unknown parameter 'smackfsdef' [ 162.982972][ T7329] loop8: detected capacity change from 0 to 2048 [ 162.986715][ T7337] loop4: detected capacity change from 0 to 128 [ 163.024003][ T7329] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 163.026755][ T7337] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.032168][ T7329] EXT4-fs (loop8): Online resizing not supported with bigalloc [ 163.057831][ T7115] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 163.089995][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 163.117944][ T6545] EXT4-fs (loop8): unmounting filesystem. [ 163.169807][ T7115] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 163.202194][ T7115] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 163.220891][ T7115] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 163.231910][ T7352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.238814][ T7352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.340239][ T7356] loop4: detected capacity change from 0 to 512 [ 163.357131][ T7356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.415961][ T7356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 163.499025][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 163.582312][ T7364] loop4: detected capacity change from 0 to 1024 [ 163.685492][ T5836] device hsr_slave_0 left promiscuous mode [ 163.737059][ T5836] device hsr_slave_1 left promiscuous mode [ 163.838716][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.840311][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.843181][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.844708][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.854206][ T5836] device bridge_slave_1 left promiscuous mode [ 163.855601][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.944629][ T5836] device bridge_slave_0 left promiscuous mode [ 163.946237][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.052657][ T7393] loop5: detected capacity change from 0 to 8 [ 164.136330][ T5836] device veth1_macvtap left promiscuous mode [ 164.137695][ T5836] device veth0_macvtap left promiscuous mode [ 164.144247][ T5836] device veth1_vlan left promiscuous mode [ 164.145538][ T5836] device veth0_vlan left promiscuous mode [ 164.407904][ T7411] loop5: detected capacity change from 0 to 512 [ 164.424236][ T7411] ext4: Unknown parameter 'noacl' [ 164.449161][ T7185] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.979403][ T4313] Bluetooth: hci1: command 0x0419 tx timeout [ 167.215732][ T5836] team0 (unregistering): Port device team_slave_1 removed [ 167.411680][ T5836] team0 (unregistering): Port device team_slave_0 removed [ 167.610753][ T5836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.860682][ T5836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.497784][ T5836] bond0 (unregistering): Released all slaves [ 170.885360][ T7115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.919802][ T7429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.936193][ T7429] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 170.950841][ T7435] loop5: detected capacity change from 0 to 512 [ 170.969555][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.971821][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.978207][ T7115] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.064830][ T7115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.066971][ T7115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.077910][ T7435] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.987: casefold flag without casefold feature [ 171.083057][ T7435] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.987: couldn't read orphan inode 15 (err -117) [ 171.085859][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.094885][ T7435] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 171.099048][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.123625][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.125284][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.149043][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.166922][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.177277][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.178912][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.221965][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.224532][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.227009][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.243419][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.250754][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.257560][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.269056][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.277019][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.277029][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 171.280289][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.312108][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.320848][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.323063][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.329771][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.516189][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.518079][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.548623][ T7115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.835330][ T7491] loop5: detected capacity change from 0 to 2048 [ 171.886217][ T7491] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 171.907933][ T7491] EXT4-fs error (device loop5): __ext4_new_inode:1075: comm syz.5.1006: reserved inode found cleared - inode=1 [ 172.004152][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 172.096021][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.107234][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.163447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.165559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.167781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.176391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.185678][ T7115] device veth0_vlan entered promiscuous mode [ 172.229518][ T7115] device veth1_vlan entered promiscuous mode [ 172.292063][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.294546][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.319090][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.337100][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.350218][ T7115] device veth0_macvtap entered promiscuous mode [ 172.356668][ T7115] device veth1_macvtap entered promiscuous mode [ 172.401216][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.403340][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.405052][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.407159][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.438792][ T7517] loop4: detected capacity change from 0 to 512 [ 172.441781][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.444247][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.451994][ T7517] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 172.458771][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.461399][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.465891][ T7517] EXT4-fs (loop4): invalid journal inode [ 172.474059][ T7517] EXT4-fs (loop4): can't get journal size [ 172.475117][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.488496][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.490844][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.500874][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.511217][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.526618][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.529926][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.531934][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.534063][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.540374][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.542737][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.544936][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.547162][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.551655][ T7517] EXT4-fs (loop4): 1 truncate cleaned up [ 172.552881][ T7517] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.611979][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.614575][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.619835][ T7517] syz.4.1014 uses obsolete (PF_INET,SOCK_PACKET) [ 172.628834][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.632280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.634677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.672295][ T7115] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.674111][ T7115] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.686773][ T7115] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.693349][ T7115] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.734693][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 172.842192][ T7535] loop8: detected capacity change from 0 to 1024 [ 172.878130][ T5113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.881262][ T5113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.886536][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.958288][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.960558][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.965707][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.234977][ T7562] loop8: detected capacity change from 0 to 256 [ 173.290828][ T7567] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1030'. [ 173.487560][ T7577] loop9: detected capacity change from 0 to 1024 [ 173.509964][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.512060][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.994100][ T7609] binder: 7608:7609 tried to acquire reference to desc 0, got 1 instead [ 173.998164][ T7609] binder: 7608:7609 got transaction with unaligned buffers size, 4348 [ 174.027018][ T7609] binder: 7608:7609 transaction async to 7608:0 failed 7/29201/-22, size 0-0 line 3295 [ 174.046051][ T7614] loop4: detected capacity change from 0 to 512 [ 174.049465][ T1964] binder: undelivered TRANSACTION_ERROR: 29201 [ 174.061625][ T7614] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.106996][ T7614] EXT4-fs (loop4): 1 truncate cleaned up [ 174.108273][ T7614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 174.117213][ T7615] loop8: detected capacity change from 0 to 1024 [ 174.122826][ T7614] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1045: bg 0: block 328: padding at end of block bitmap is not set [ 174.155404][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.168807][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.172881][ T7615] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 174.468941][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 175.091160][ T6545] EXT4-fs (loop8): unmounting filesystem. [ 175.223713][ T7637] loop8: detected capacity change from 0 to 1024 [ 175.258180][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.286902][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.344782][ T7642] loop4: detected capacity change from 0 to 2048 [ 175.358992][ T7642] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.469204][ T7642] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 175.497142][ T7642] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1054: bg 0: block 234: padding at end of block bitmap is not set [ 175.557290][ T7642] EXT4-fs (loop4): Remounting filesystem read-only [ 175.557909][ T7660] loop4: Can't mount, would change RO state [ 175.577143][ T27] audit: type=1326 audit(175.550:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaab52ba8 code=0x7ffc0000 [ 175.583708][ T27] audit: type=1326 audit(175.560:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=145 compat=0 ip=0xffffaab52ba8 code=0x7ffc0000 [ 175.588779][ T27] audit: type=1326 audit(175.560:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaab52ba8 code=0x7ffc0000 [ 175.737289][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 175.813695][ T7671] loop4: detected capacity change from 0 to 128 [ 175.854726][ T7671] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 175.945055][ T7675] loop5: detected capacity change from 0 to 512 [ 175.962580][ T7671] syz.4.1061: attempt to access beyond end of device [ 175.962580][ T7671] loop4: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 175.974501][ T7671] syz.4.1061: attempt to access beyond end of device [ 175.974501][ T7671] loop4: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 175.977421][ T7675] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1062: bad orphan inode 15 [ 176.007487][ T7675] ext4_test_bit(bit=14, block=5) = 0 [ 176.052559][ T7675] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 176.200372][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 176.440212][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.563507][ T7705] loop8: detected capacity change from 0 to 2048 [ 176.634320][ T7705] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 176.835048][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.843439][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.870836][ T6545] EXT4-fs (loop8): unmounting filesystem. [ 177.380445][ T7743] 9pnet_fd: Insufficient options for proto=fd [ 177.518129][ T7749] loop9: detected capacity change from 0 to 512 [ 178.349452][ T7789] device pim6reg1 entered promiscuous mode [ 178.692023][ T7799] device pim6reg1 entered promiscuous mode [ 178.896455][ T7813] device pim6reg1 entered promiscuous mode [ 179.100605][ T7831] device pim6reg1 entered promiscuous mode [ 187.380356][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.381761][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.856365][ T7903] device pim6reg1 entered promiscuous mode [ 191.656718][ T7947] device pim6reg1 entered promiscuous mode [ 191.819203][ T7960] bridge0: port 4(veth1_to_hsr) entered blocking state [ 191.820849][ T7960] bridge0: port 4(veth1_to_hsr) entered disabled state [ 191.823258][ T7960] device veth1_to_hsr entered promiscuous mode [ 191.824856][ T7960] bridge0: port 4(veth1_to_hsr) entered blocking state [ 191.826506][ T7960] bridge0: port 4(veth1_to_hsr) entered forwarding state [ 193.865969][ T8024] vhci_hcd: invalid port number 157 [ 193.867240][ T8024] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 195.044715][ T8038] loop9: detected capacity change from 0 to 512 [ 195.169422][ T8038] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 195.218420][ T8038] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 195.486339][ T7115] EXT4-fs (loop9): unmounting filesystem. [ 195.751176][ T8051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.753032][ T8051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.083359][ T8060] tipc: Failed to remove unknown binding: 66,1,1/0:3685385364/3685385366 [ 196.108498][ T8060] tipc: Failed to remove unknown binding: 66,1,1/0:3685385364/3685385366 [ 196.699673][ T8078] Unsupported ieee802154 address type: 0 [ 198.770679][ T8095] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1192'. [ 199.081736][ T8103] loop8: detected capacity change from 0 to 16 [ 199.147483][ T8103] erofs: (device loop8): mounted with root inode @ nid 36. [ 200.169654][ T8112] loop8: detected capacity change from 0 to 1024 [ 200.188394][ T8112] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 200.346437][ T8122] loop9: detected capacity change from 0 to 2048 [ 200.534558][ T8122] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 200.583798][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'. [ 200.910709][ T7115] EXT4-fs (loop9): unmounting filesystem. [ 201.784965][ T8158] syz.2.1208 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 202.252465][ T8169] tipc: Started in network mode [ 202.253520][ T8169] tipc: Node identity c60d9e8e20e9, cluster identity 4711 [ 202.266391][ T8169] tipc: Enabled bearer , priority 0 [ 202.276869][ T8168] tipc: Resetting bearer [ 202.578738][ T8150] loop4: detected capacity change from 0 to 40427 [ 202.623201][ T8150] F2FS-fs (loop4): invalid crc value [ 202.657400][ T8150] F2FS-fs (loop4): Found nat_bits in checkpoint [ 202.705936][ T8150] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 202.733929][ T8150] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 203.688486][ T4343] tipc: Node number set to 3873742478 [ 203.697359][ T4306] syz-executor: attempt to access beyond end of device [ 203.697359][ T4306] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.047100][ T8191] loop8: detected capacity change from 0 to 40427 [ 204.055976][ T8191] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 204.057721][ T8191] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 204.072355][ T8191] F2FS-fs (loop8): invalid crc value [ 204.075368][ T8191] F2FS-fs (loop8): Found nat_bits in checkpoint [ 204.103519][ T8191] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 204.105062][ T8191] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 205.176253][ T8220] loop5: detected capacity change from 0 to 1024 [ 205.185187][ T8220] EXT4-fs: Ignoring removed nobh option [ 205.189026][ T8220] EXT4-fs: Ignoring removed bh option [ 205.193017][ T8220] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.235990][ T8220] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 205.288763][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 205.319807][ T8218] loop4: detected capacity change from 0 to 40427 [ 205.330984][ T8218] F2FS-fs (loop4): invalid crc value [ 205.346779][ T8218] F2FS-fs (loop4): Found nat_bits in checkpoint [ 205.387834][ T8218] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 205.405498][ T8218] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 206.307858][ T4306] syz-executor: attempt to access beyond end of device [ 206.307858][ T4306] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 206.665289][ T8236] loop4: detected capacity change from 0 to 128 [ 208.025302][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.027440][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.402939][ T8252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.404919][ T8252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.606489][ T8250] loop4: detected capacity change from 0 to 40427 [ 209.609965][ T8250] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 209.611574][ T8250] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 209.614409][ T8250] F2FS-fs (loop4): invalid crc value [ 209.636270][ T8250] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 209.664803][ T8250] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 209.666281][ T8250] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 210.034104][ T8267] loop4: detected capacity change from 0 to 512 [ 210.049317][ T8267] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 210.087957][ T8267] EXT4-fs (loop4): 1 truncate cleaned up [ 210.090471][ T8267] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 211.086107][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 211.126529][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.134771][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.755776][ T8285] loop4: detected capacity change from 0 to 1024 [ 211.776831][ T8285] EXT4-fs: Ignoring removed nobh option [ 211.778150][ T8285] EXT4-fs: Ignoring removed bh option [ 211.781365][ T8285] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.800955][ T8285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 211.838911][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 211.892283][ T8290] loop4: detected capacity change from 0 to 512 [ 211.925180][ T8290] EXT4-fs: Ignoring removed i_version option [ 211.931473][ T8290] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.932922][ T8290] ext4: Unknown parameter 'seclabel' [ 212.446178][ T8295] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 212.447978][ T8295] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 216.827050][ T8168] tipc: Disabling bearer [ 216.915662][ T8212] device veth1_macvtap left promiscuous mode [ 216.916843][ T8212] device macsec0 entered promiscuous mode [ 218.642876][ T4304] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.647546][ T4304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.650706][ T4304] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.653957][ T4304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.656100][ T4304] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.659415][ T4304] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.803848][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.807513][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.992538][ T8336] loop4: detected capacity change from 0 to 128 [ 219.035287][ T4385] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.039418][ T8336] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 219.353455][ T4385] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.414605][ T8341] loop5: detected capacity change from 0 to 512 [ 219.425678][ T8341] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 219.442932][ T4385] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.469616][ T8341] EXT4-fs (loop5): orphan cleanup on readonly fs [ 219.477646][ T8341] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 219.488269][ T8341] EXT4-fs warning (device loop5): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 219.547937][ T8341] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 219.567795][ T8341] EXT4-fs (loop5): 1 truncate cleaned up [ 219.578459][ T8341] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 219.671837][ T4385] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.712348][ T8341] device syzkaller0 entered promiscuous mode [ 219.716429][ T8327] chnl_net:caif_netlink_parms(): no params data found [ 219.893117][ T8343] loop9: detected capacity change from 0 to 40427 [ 219.912544][ T8343] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x16481 [ 219.925491][ T8343] F2FS-fs (loop9): invalid crc value [ 219.928037][ T8343] F2FS-fs (loop9): Found nat_bits in checkpoint [ 219.957296][ T8343] F2FS-fs (loop9): Start checkpoint disabled! [ 219.966361][ T8343] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 220.738546][ T4304] Bluetooth: hci2: command 0x0409 tx timeout [ 221.200266][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1262'. [ 222.839370][ T4304] Bluetooth: hci2: command 0x041b tx timeout [ 224.899365][ T4305] Bluetooth: hci2: command 0x040f tx timeout [ 225.472870][ T8383] loop8: detected capacity change from 0 to 512 [ 225.484914][ T8383] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 225.495641][ T8383] EXT4-fs (loop8): 1 orphan inode deleted [ 225.496831][ T8383] EXT4-fs (loop8): 1 truncate cleaned up [ 225.498113][ T8383] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 225.533711][ T6545] EXT4-fs (loop8): unmounting filesystem. [ 225.845746][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1268'. [ 226.978453][ T4305] Bluetooth: hci2: command 0x0419 tx timeout [ 232.876834][ T5206] EXT4-fs (loop5): unmounting filesystem. [ 233.209331][ T8411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.211369][ T8411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.220110][ T8327] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.221904][ T8327] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.267463][ T8327] device bridge_slave_0 entered promiscuous mode [ 233.271845][ T8327] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.274124][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 233.274414][ T8327] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.277489][ T8327] device bridge_slave_1 entered promiscuous mode [ 233.361192][ T4305] Bluetooth: hci3: sending frame failed (-49) [ 233.364885][ T4304] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 233.402576][ T8327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.406435][ T8327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.623211][ T8426] loop5: detected capacity change from 0 to 256 [ 233.727884][ T8327] team0: Port device team_slave_0 added [ 233.738012][ T8327] team0: Port device team_slave_1 added [ 233.880461][ T8327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.880735][ T8432] binder: 8431 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 233.882002][ T8327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.883975][ T8432] binder: 8431:8432 ioctl c018620c 20000140 returned -22 [ 233.917106][ T8327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.008479][ T8327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.009941][ T8327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.026246][ T8327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.218073][ T8442] loop9: detected capacity change from 0 to 512 [ 235.224471][ T8440] loop5: detected capacity change from 0 to 512 [ 235.239038][ T8442] ext4: Unknown parameter 'noacl' [ 235.323728][ T8402] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.324212][ T8416] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.488009][ T8327] device hsr_slave_0 entered promiscuous mode [ 235.727305][ T8327] device hsr_slave_1 entered promiscuous mode [ 236.743371][ T8467] device ip6tnl1 entered promiscuous mode [ 236.943684][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 236.945565][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.038756][ T8471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.207289][ T8466] loop9: detected capacity change from 0 to 40427 [ 237.237083][ T8466] F2FS-fs (loop9): invalid crc value [ 237.329633][ T8466] F2FS-fs (loop9): Found nat_bits in checkpoint [ 238.183404][ T8466] F2FS-fs (loop9): Cannot turn on quotas: -2 on 1 [ 238.221711][ T8466] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 238.262923][ T8484] loop4: detected capacity change from 0 to 512 [ 238.288530][ T8484] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 238.340171][ T8484] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1288: invalid indirect mapped block 4294967295 (level 1) [ 238.348694][ T8484] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1288: invalid indirect mapped block 4294967295 (level 1) [ 238.360744][ T8484] EXT4-fs (loop4): 2 truncates cleaned up [ 238.362023][ T8484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 238.402730][ T8327] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.425077][ T8484] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.1288: directory missing '.' [ 238.604248][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 239.219796][ T8327] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.378541][ T7115] syz-executor: attempt to access beyond end of device [ 239.378541][ T7115] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 239.460348][ T8501] loop8: detected capacity change from 0 to 256 [ 239.610361][ T8501] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 240.511492][ T8327] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.575794][ T8486] loop5: detected capacity change from 0 to 40427 [ 240.616016][ T8486] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 240.627739][ T8486] F2FS-fs (loop5): invalid crc value [ 240.673033][ T8486] F2FS-fs (loop5): Found nat_bits in checkpoint [ 240.711917][ T8486] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 240.757089][ T8520] loop4: detected capacity change from 0 to 128 [ 240.791351][ T8520] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 241.140938][ T8327] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.169333][ T4385] device hsr_slave_0 left promiscuous mode [ 241.211813][ T4385] device hsr_slave_1 left promiscuous mode [ 241.278578][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.280188][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.282356][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.285198][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.290788][ T4385] device bridge_slave_1 left promiscuous mode [ 241.295694][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.340231][ T8535] loop8: detected capacity change from 0 to 8192 [ 241.370710][ T8535] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.544523][ T4385] device bridge_slave_0 left promiscuous mode [ 241.547628][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.328697][ T4385] device veth1_macvtap left promiscuous mode [ 243.330029][ T4385] device veth0_macvtap left promiscuous mode [ 243.331433][ T4385] device veth1_vlan left promiscuous mode [ 243.332984][ T4385] device veth0_vlan left promiscuous mode [ 245.263070][ T5206] syz-executor: attempt to access beyond end of device [ 245.263070][ T5206] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.604164][ T4385] team0 (unregistering): Port device team_slave_1 removed [ 245.821139][ T4385] team0 (unregistering): Port device team_slave_0 removed [ 246.020203][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.266837][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.793123][ T4385] bond0 (unregistering): Released all slaves [ 248.819388][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.820684][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.407147][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 251.451584][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1308'. [ 251.486427][ T8327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.510178][ T8327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.566549][ T8603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.572097][ T8327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.578998][ T8603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.631316][ T8327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.942750][ T8327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.960154][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.962511][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.967504][ T8327] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.910356][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.912537][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.914466][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.915914][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.917808][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.953945][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.956018][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.957532][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.997243][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.044031][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.046360][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.051396][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.070433][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.077042][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.088845][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.105700][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.124125][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.137743][ T8327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.140881][ T8327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.159849][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.162152][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.189817][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.300314][ T8637] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.301876][ T8637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.303576][ T8637] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.305171][ T8637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.347650][ T8637] device bridge0 entered promiscuous mode [ 254.769820][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.771797][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.869646][ T8327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.871930][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.873629][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.929728][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.942495][ T8654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.944728][ T8654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.961690][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.964324][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.030648][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.033129][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.047009][ T8658] loop4: detected capacity change from 0 to 128 [ 255.047109][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.063942][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.070498][ T8327] device veth0_vlan entered promiscuous mode [ 255.081782][ T8658] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 255.095909][ T8327] device veth1_vlan entered promiscuous mode [ 255.147062][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.153106][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 255.159543][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.177908][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.187429][ T8327] device veth0_macvtap entered promiscuous mode [ 255.191780][ T8327] device veth1_macvtap entered promiscuous mode [ 255.211307][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.213504][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.216994][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.227285][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.229781][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.231989][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.243867][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.246204][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.248900][ T8390] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 255.250019][ T8327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.265609][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.267797][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.270499][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.289210][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.293080][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.295344][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.297705][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.317284][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.319945][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.335136][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.358835][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.361052][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.363207][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.365439][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.380328][ T8327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.386384][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.389122][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.411059][ T8327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.413290][ T8327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.423372][ T8327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.425167][ T8327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.591083][ T4565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.593046][ T4565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.597233][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.765399][ T8390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.767319][ T8390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.774746][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.775140][ T8672] loop4: detected capacity change from 0 to 8192 [ 256.029297][ T4305] Bluetooth: hci5: command 0x0406 tx timeout [ 257.020821][ T8699] loop8: detected capacity change from 0 to 16 [ 257.183837][ T8699] erofs: (device loop8): mounted with root inode @ nid 36. [ 257.945945][ T8711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.947892][ T8711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.302736][ T8752] loop8: detected capacity change from 0 to 1024 [ 261.339468][ T8752] EXT4-fs: Ignoring removed i_version option [ 261.340684][ T8752] EXT4-fs: inline encryption not supported [ 261.353973][ T8752] EXT4-fs (loop8): Test dummy encryption mode enabled [ 261.390589][ T8752] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 261.395549][ T8729] loop5: detected capacity change from 0 to 40427 [ 261.467450][ T8729] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 261.496366][ T8729] F2FS-fs (loop5): invalid crc value [ 261.516372][ T8729] F2FS-fs (loop5): Found nat_bits in checkpoint [ 261.525579][ T8766] loop9: detected capacity change from 0 to 256 [ 261.579366][ T8729] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 261.584392][ T6545] EXT4-fs (loop8): unmounting filesystem. [ 261.605441][ T8766] FAT-fs (loop9): Directory bread(block 64) failed [ 261.606933][ T8766] FAT-fs (loop9): Directory bread(block 65) failed [ 261.608251][ T8766] FAT-fs (loop9): Directory bread(block 66) failed [ 261.616701][ T8766] FAT-fs (loop9): Directory bread(block 67) failed [ 261.618100][ T8766] FAT-fs (loop9): Directory bread(block 68) failed [ 261.634885][ T8766] FAT-fs (loop9): Directory bread(block 69) failed [ 261.637502][ T8766] FAT-fs (loop9): Directory bread(block 70) failed [ 261.642215][ T8766] FAT-fs (loop9): Directory bread(block 71) failed [ 261.643544][ T8766] FAT-fs (loop9): Directory bread(block 72) failed [ 261.645328][ T8766] FAT-fs (loop9): Directory bread(block 73) failed [ 261.649502][ T8729] syz.5.1342: attempt to access beyond end of device [ 261.649502][ T8729] loop5: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 261.695913][ T8776] tipc: Started in network mode [ 261.697166][ T8776] tipc: Node identity 56d5ea765661, cluster identity 4711 [ 261.715370][ T8776] tipc: Enabled bearer , priority 7 [ 261.717261][ T8776] ªªªªªª: renamed from syzkaller0 [ 261.747252][ T5206] syz-executor: attempt to access beyond end of device [ 261.747252][ T5206] loop5: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 261.765405][ T8776] tipc: Disabling bearer [ 261.947727][ T8787] loop9: detected capacity change from 0 to 2048 [ 262.068599][ T8787] loop9: p3 < > p4 < > [ 262.069535][ T8787] loop9: partition table partially beyond EOD, truncated [ 262.072034][ T8787] loop9: p3 start 4284289 is beyond EOD, truncated [ 263.028965][ T8802] loop4: detected capacity change from 0 to 512 [ 263.197322][ T8802] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.1355: invalid block [ 263.212398][ T8802] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1355: invalid indirect mapped block 10 (level 1) [ 263.218352][ T8802] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1355: invalid indirect mapped block 8 (level 1) [ 263.230385][ T8802] EXT4-fs (loop4): 1 truncate cleaned up [ 263.231638][ T8802] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 263.336236][ T27] audit: type=1326 audit(263.250:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 263.371640][ T27] audit: type=1326 audit(263.250:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 263.485274][ T27] audit: type=1326 audit(263.260:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 263.805511][ T27] audit: type=1326 audit(263.260:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 263.838439][ T27] audit: type=1326 audit(263.260:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 263.878542][ T27] audit: type=1326 audit(263.270:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 263.883238][ T27] audit: type=1326 audit(263.270:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 263.969656][ T27] audit: type=1326 audit(263.270:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 263.974276][ T27] audit: type=1326 audit(263.270:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 263.978622][ T27] audit: type=1326 audit(263.270:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.4.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f52ba8 code=0x7ffc0000 [ 264.123588][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.982086][ T4304] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.985784][ T4304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.988286][ T4304] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.991434][ T4304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.993384][ T4304] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 264.995777][ T4304] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 265.293546][ T8830] loop8: detected capacity change from 0 to 1024 [ 265.299905][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 265.329535][ T8830] EXT4-fs: Ignoring removed i_version option [ 265.331144][ T8830] EXT4-fs: Ignoring removed bh option [ 265.339461][ T8830] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 265.459179][ T8837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.461101][ T8837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.465524][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.494572][ T8830] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 266.321053][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.503860][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.680306][ T8823] chnl_net:caif_netlink_parms(): no params data found [ 266.911097][ T8823] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.912676][ T8823] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.915012][ T8823] device bridge_slave_0 entered promiscuous mode [ 266.964611][ T8823] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.966186][ T8823] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.983609][ T8823] device bridge_slave_1 entered promiscuous mode [ 267.058703][ T4305] Bluetooth: hci2: command 0x0409 tx timeout [ 267.079735][ T8823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.083538][ T8823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.213536][ T8823] team0: Port device team_slave_0 added [ 268.107299][ T8823] team0: Port device team_slave_1 added [ 268.119374][ T8882] device pim6reg1 entered promiscuous mode [ 268.253614][ T8823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.255219][ T8823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.265094][ T8823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.272116][ T8823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.275805][ T8823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.287525][ T8823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.339254][ T4305] Bluetooth: hci2: command 0x041b tx timeout [ 269.449970][ T8901] loop4: detected capacity change from 0 to 512 [ 269.830090][ T8901] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 269.832536][ T8901] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 269.834653][ T8901] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1375: Corrupt directory, running e2fsck is recommended [ 269.854063][ T8901] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 269.863305][ T8901] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.1375: corrupted in-inode xattr [ 269.869069][ T8901] EXT4-fs (loop4): Remounting filesystem read-only [ 269.870804][ T8901] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1375: couldn't read orphan inode 15 (err -117) [ 269.874852][ T8901] EXT4-fs (loop4): Remounting filesystem read-only [ 269.876316][ T8901] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 270.810372][ T8823] device hsr_slave_0 entered promiscuous mode [ 270.858992][ T8823] device hsr_slave_1 entered promiscuous mode [ 270.898737][ T8823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.900366][ T8823] Cannot create hsr debugfs directory [ 271.378661][ T4304] Bluetooth: hci2: command 0x040f tx timeout [ 271.608279][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 271.689000][ T8922] loop9: detected capacity change from 0 to 256 [ 271.690980][ T8922] exfat: Unknown parameter 'nameª}t' [ 271.710419][ T6545] EXT4-fs (loop8): unmounting filesystem. [ 271.761922][ T8589] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 271.913671][ T8928] tmpfs: Unknown parameter 'nolazytimeå' [ 272.803356][ T8939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.813287][ T8939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.817342][ T8935] ------------[ cut here ]------------ [ 272.818875][ T8935] WARNING: CPU: 1 PID: 8935 at mm/page_alloc.c:5581 __alloc_pages+0x32c/0x730 [ 272.820761][ T8935] Modules linked in: [ 272.821569][ T8935] CPU: 1 PID: 8935 Comm: syz.8.1382 Tainted: G W 6.1.122-syzkaller #0 [ 272.823402][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.825412][ T8935] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 272.827107][ T8935] pc : __alloc_pages+0x32c/0x730 [ 272.828156][ T8935] lr : __alloc_pages+0xc8/0x730 [ 272.829187][ T8935] sp : ffff800022097760 [ 272.830149][ T8935] x29: ffff800022097850 x28: ffff800022097780 x27: dfff800000000000 [ 272.831861][ T8935] x26: ffff700004412ef0 x25: 0000000000000000 x24: ffff8000220977a0 [ 272.833619][ T8935] x23: 0000000000000000 x22: 0000000000040d40 x21: 1ffff00004412ef4 [ 272.835275][ T8935] x20: ffff8000220977c0 x19: 0000000000000014 x18: 1fffe000367a0176 [ 272.836912][ T8935] x17: ffff800015a8d000 x16: ffff80001227ea00 x15: ffff800008ad29a4 [ 272.838598][ T8935] x14: ffff800008acf714 x13: ffff80000805c5c4 x12: 0000000000000005 [ 272.840306][ T8935] x11: 1ffff00004412ef8 x10: 0000000000000000 x9 : 0000000000000001 [ 272.842028][ T8935] x8 : ffff80001840d000 x7 : 0000000000000000 x6 : ffff80000805c5c4 [ 272.843606][ T8935] x5 : ffff0000fcbe9338 x4 : 0000000000000000 x3 : 0000000000000020 [ 272.845171][ T8935] x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff8000220977c0 [ 272.846707][ T8935] Call trace: [ 272.847390][ T8935] __alloc_pages+0x32c/0x730 [ 272.848392][ T8935] __kmalloc_large_node+0xbc/0x21c [ 272.849512][ T8935] __kmalloc+0x130/0x1c4 [ 272.850440][ T8935] __v9fs_get_acl+0x58/0x150 [ 272.851458][ T8935] v9fs_get_acl+0xb8/0x2c8 [ 272.852456][ T8935] v9fs_mount+0x77c/0xa5c [ 272.853248][ T8935] legacy_get_tree+0xd4/0x16c [ 272.854190][ T8935] vfs_get_tree+0x90/0x274 [ 272.855176][ T8935] do_new_mount+0x278/0x8fc [ 272.856117][ T8935] path_mount+0x590/0xe5c [ 272.857019][ T8935] __arm64_sys_mount+0x45c/0x594 [ 272.858040][ T8935] invoke_syscall+0x98/0x2bc [ 272.859020][ T8935] el0_svc_common+0x138/0x258 [ 272.859859][ T8935] do_el0_svc+0x58/0x13c [ 272.860717][ T8935] el0_svc+0x58/0x168 [ 272.861563][ T8935] el0t_64_sync_handler+0x84/0xf0 [ 272.862630][ T8935] el0t_64_sync+0x18c/0x190 [ 272.863574][ T8935] irq event stamp: 1260 [ 272.864494][ T8935] hardirqs last enabled at (1259): [] kasan_quarantine_put+0xdc/0x204 [ 272.866560][ T8935] hardirqs last disabled at (1260): [] el1_dbg+0x24/0x80 [ 272.868490][ T8935] softirqs last enabled at (1014): [] bdi_register_va+0x508/0x880 [ 272.870377][ T8935] softirqs last disabled at (1012): [] bdi_register_va+0x2f0/0x880 [ 272.872265][ T8935] ---[ end trace 0000000000000000 ]--- [ 273.316493][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1383'. [ 273.320609][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1383'. [ 273.458441][ T4305] Bluetooth: hci2: command 0x0419 tx timeout [ 274.183237][ T55] device hsr_slave_0 left promiscuous mode [ 274.198970][ T55] device hsr_slave_1 left promiscuous mode [ 274.288484][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.290230][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.292239][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.293848][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.308821][ T55] device bridge_slave_1 left promiscuous mode [ 274.310219][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.358062][ T55] device bridge_slave_0 left promiscuous mode [ 274.359615][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.528660][ T55] device veth1_macvtap left promiscuous mode [ 274.530003][ T55] device veth0_macvtap left promiscuous mode [ 274.531452][ T55] device veth1_vlan left promiscuous mode [ 274.532834][ T55] device veth0_vlan left promiscuous mode [ 276.543446][ T55] team0 (unregistering): Port device team_slave_1 removed [ 276.742501][ T55] team0 (unregistering): Port device team_slave_0 removed [ 276.929271][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.171542][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.649855][ T55] bond0 (unregistering): Released all slaves [ 279.913193][ T8823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.980825][ T8823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.022014][ T8823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.057470][ T8823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.186889][ T8823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.194971][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.197037][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.206176][ T8823] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.220728][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.222858][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.224763][ T1609] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.226141][ T1609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.229277][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.233585][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.235839][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.237875][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.239387][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.245058][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.251545][ T8898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.257847][ T8898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.262897][ T8898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.265211][ T8898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.295003][ T8823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.297225][ T8823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.301275][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.303568][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.305722][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.307836][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.311177][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.313221][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.324644][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.418523][ T8898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.420290][ T8898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.433681][ T8823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.454862][ T8898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.457155][ T8898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.485495][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.487793][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.501330][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.503991][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.510878][ T8823] device veth0_vlan entered promiscuous mode [ 280.517301][ T8823] device veth1_vlan entered promiscuous mode [ 280.536349][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.538692][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.540900][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.543149][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.547210][ T8823] device veth0_macvtap entered promiscuous mode [ 280.552504][ T8823] device veth1_macvtap entered promiscuous mode [ 280.573058][ T8823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.575265][ T8823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.577356][ T8823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.580665][ T8823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.582686][ T8823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.584769][ T8823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.586677][ T8823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.589615][ T8823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.592826][ T8823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.596182][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.599565][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.601684][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.603948][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.608130][ T8823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.611412][ T8823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.613669][ T8823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.616047][ T8823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.618168][ T8823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.627994][ T8823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.630902][ T8823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.633196][ T8823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.635178][ T8823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.637272][ T8823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.641767][ T8823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.685938][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.689706][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.693846][ T8823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.695689][ T8823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.698012][ T8823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.706548][ T8823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.808782][ T4510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.810663][ T4510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.819044][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.841723][ T8898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.843731][ T8898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.849143][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready