last executing test programs: 59.177518193s ago: executing program 1 (id=260): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) 58.865911397s ago: executing program 1 (id=265): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) unshare(0x30000a00) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/85, 0x55) 55.729755716s ago: executing program 1 (id=293): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000000)) 55.523486709s ago: executing program 1 (id=295): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x206e) 55.175138534s ago: executing program 1 (id=300): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$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") getpid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) getdents64(r0, &(0x7f0000001f80)=""/4089, 0xff9) 52.053209873s ago: executing program 1 (id=317): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 52.053048153s ago: executing program 2 (id=318): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x5, 0x7fff8000}]}) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 51.795316657s ago: executing program 32 (id=317): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 51.095667807s ago: executing program 2 (id=321): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0xfffffffa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0xd, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 50.96532738s ago: executing program 2 (id=325): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 50.830253352s ago: executing program 2 (id=326): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x206e) 49.731964499s ago: executing program 2 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 49.105760749s ago: executing program 2 (id=336): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5404, 0x0, 0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x1) sendfile(r0, r0, 0x0, 0x51aa) 49.004755251s ago: executing program 33 (id=336): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5404, 0x0, 0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x1) sendfile(r0, r0, 0x0, 0x51aa) 15.455934401s ago: executing program 5 (id=477): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000000)="dbac4c47eb4fa815a661764923e68bda", 0x10) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="58708e06000300000000000000dbdf2502106088a018e31cc414d98b2f7831799a8f668ea45d1c079d9fdd3126a956ed2ccb06d323898c357ca0bb7bc475e2db17a6fc7f985431f728074dddcc461f26987d53766dedc17af6d7a92be1355dabdc731f92ed6d456d0602f0dad5882fe02753baa492f9a2a69b9f50e2d0f4e6ce9f0ee294c8", @ANYRES32=0x0, @ANYBLOB="0800010064010102080009000300000008000900020000000800080000040000080009001d09000008000100e000000108000100000000000800010000000000"], 0x58}}, 0x0) writev(r0, 0x0, 0x0) 13.53222101s ago: executing program 5 (id=482): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 13.071540877s ago: executing program 5 (id=485): r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, "2a7606b83d57c59a", "d5d4b1f2ec11858de0f53ac1c4569a99e8f287cdf9768a7d882914429316251c", "e3ef8cd6", "634b6f89ebd017b6"}, 0x38) recvmmsg(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 11.951934565s ago: executing program 5 (id=487): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 11.951546105s ago: executing program 4 (id=488): ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000110001002dbd7000fbdbdf2500000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11.071800078s ago: executing program 4 (id=492): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.990541865s ago: executing program 4 (id=493): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 9.767978119s ago: executing program 4 (id=495): syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x60, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016000000000062ad0ca650af8e0cf5dd875e16e7d330cf59fed3455d495c2214d7313cf2c5c7b78efbb5cf0bd1762736cd0a76f2ea7ca230fd5831c59b9397d3c94b9d47c4a387ce5cbfdc74da4b2b21d9dbb786e44b642e96"], 0x68}, 0x1, 0x7}, 0x0) 9.733257569s ago: executing program 3 (id=496): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) listxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000005c0)=""/245, 0xf5) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) 8.634664716s ago: executing program 6 (id=499): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20085e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x3920e, r0, 0x2, 0x0, 0x2}) 8.608867246s ago: executing program 3 (id=500): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x80207450, 0x0) 8.35981389s ago: executing program 3 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) unshare(0x2040600) unshare(0x2000400) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) sendmmsg$inet6(r5, 0x0, 0x0, 0x4001c00) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) fsmount(r4, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x40000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r6, 0xa6750000) 8.359029151s ago: executing program 6 (id=502): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@grpquota}, {@nolazytime}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x56d, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000000140)='./file1\x00', 0x14927e, 0x191) fallocate(r0, 0x0, 0xf17, 0x1001f0) open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x91) 7.292049217s ago: executing program 0 (id=503): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000140)=0x1, 0x4) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget(0x2, 0x4, 0x200) semget(0x2, 0x4, 0x50e) write$sndseq(r0, 0x0, 0x0) 7.216350598s ago: executing program 6 (id=504): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r6, 0x851, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000a00)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x8, 0x7, 0x5, 0x5, 0x1ff, '\"'}}, 0x119) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x1d00c15, 0x0, 0x6, 0x0, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0x4000423) 6.988844152s ago: executing program 3 (id=505): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r4, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0xa, 0x1, 0x2010, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x7, @void, @value, @void, @value}, 0x50) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r6, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="76a02823", @ANYRES16=r0, @ANYBLOB="00fbbad37b3c238300a50b"], 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') 6.292226382s ago: executing program 0 (id=506): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000008000100", 0x20) 6.146107475s ago: executing program 0 (id=507): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) getsockopt(r0, 0x29, 0x3, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x160) 4.345478293s ago: executing program 3 (id=508): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(0x0, 0x0, 0x80) io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r3, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) 4.345140662s ago: executing program 0 (id=509): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) preadv(r0, &(0x7f000000b6c0)=[{&(0x7f0000000880)=""/62, 0x3e}], 0x1, 0x21, 0x69f) 4.344639142s ago: executing program 6 (id=510): syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8000000) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r1, 0x7ffffe, &(0x7f0000000540)) socket$netlink(0x10, 0x3, 0xa) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 4.143742666s ago: executing program 0 (id=511): r0 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@ssd}]}, 0x1, 0x5599, &(0x7f0000005680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000b90c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000c0780)={{0x0, 0x1000, 0x1, 0xd13f, 0x7, 0x401, 0x4, 0x0, 0xc, 0x2, 0xfffffffa, 0x400, 0x4, 0x9, 0x6}}) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000c2780)={0x5862, [], 0x8c, "a265e13eaa4372"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) 4.143069666s ago: executing program 6 (id=512): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x1, @empty}}, 0x0, 0x0, 0x3fb, 0x0, 0x32, 0xfffffffd}, 0x9c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaac6d2b9ee31aaaaaabbbbbbbbbbbb81000000080045fc001c000000000033907800"/46], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 3.672152083s ago: executing program 5 (id=513): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xfe, 0x7ffc1ffb}]}) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r0) 3.573940845s ago: executing program 3 (id=514): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="08e280ca0c035952498ea6845c511ccbf002006856ed63e27eb47a7ff1cad9d07fd08200", @ANYRES32=r1, @ANYBLOB="400802000000000014001a80100005800c0005800800000000000000e001038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675c00018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000140005003e59d5028c24a2a76f3d09b17d4815fc6000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c8008002c000000000005000600000000001400190002dd96197aca85b64424a37dbda7b69414000800eb052fcd3dd4d3e8bbcbf1de857c0e1c3c0001800800010000000000080001000000000014000400b2112a97bf9704ee57915340334b827114000500e8635392a70f36f95f4b9b352920ebec1100240083eddaf31b5dd7248be50575e9000000c8001a8020000a80050008000000000014000700fe8000000000000000000000000000aa40000a8014000700fe8000000000000000000000000000aa1400070000000000000000000000ffffffffffff14000700ff0100000000000000000000000000010400070060000a80050008000000000014000700fe8000000000000000000000000000bb14000700000000000000000000000000000000010500080000000000050008000000000005000800f900000014000700fc0100"/728], 0x2f0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f00000000c0)=""/2, &(0x7f0000001b00)=0x2) 3.573374945s ago: executing program 4 (id=515): openat$uhid(0xffffff9c, &(0x7f00000002c0), 0x802, 0x0) pselect6(0x40, &(0x7f0000000680)={0x8, 0x7, 0x0, 0xfffffffffffffff9, 0x916, 0xae3, 0x7, 0x8}, 0x0, 0x0, &(0x7f0000000740), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b48, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @timestamp, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r3 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0205710, &(0x7f00000004c0)={0x1000000, 0xff, 0x10, 0x0, 0x3}) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 967.988866ms ago: executing program 5 (id=516): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000001e40)) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@nobh}, {@debug}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@usrquota}, {@user_xattr}]}, 0x3, 0x4e1, &(0x7f0000000a00)="$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") io_setup(0x8, &(0x7f0000000600)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2800040, &(0x7f00000007c0)={[{@stripe={'stripe', 0x3d, 0x7a}}, {@nodiscard}, {@noquota}, {@init_itable}, {@dax_never}, {@abort}, {@sysvgroups}, {@noacl}, {@usrquota}]}, 0xc, 0x4d2, &(0x7f00000002c0)="$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") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc47", @ANYRES16=r1], 0x398}}, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) 725.393119ms ago: executing program 6 (id=517): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x3}}, {@errors_remount}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@noload}, {@resuid}, {@oldalloc}, {@delalloc}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x100001) 708.988209ms ago: executing program 0 (id=518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x3a9000, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xa, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000140)="13146000000370", 0x7}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000ffff000000000a14000000020a0901000000000000000000000000000000000a00"/57], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): problem. [ 307.384106][ T4065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.400420][ T4066] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.402453][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.405493][ T4066] device bridge_slave_0 entered promiscuous mode [ 307.408742][ T4075] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.410670][ T4075] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.414899][ T4075] device bridge_slave_0 entered promiscuous mode [ 307.418168][ T4070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.420044][ T4070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.433080][ T4070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.437025][ T4065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.438958][ T4065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.446318][ T4065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.461329][ T4066] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.463463][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.466021][ T4066] device bridge_slave_1 entered promiscuous mode [ 307.468612][ T4075] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.470592][ T4075] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.473613][ T4075] device bridge_slave_1 entered promiscuous mode [ 307.481664][ T4070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.484200][ T4070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.491260][ T4070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.504952][ T4076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.529706][ T4075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.541176][ T4076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.553818][ T4066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.558256][ T4066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.562372][ T4075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.625410][ T4070] device hsr_slave_0 entered promiscuous mode [ 307.683317][ T4070] device hsr_slave_1 entered promiscuous mode [ 307.731670][ T4076] team0: Port device team_slave_0 added [ 307.785023][ T4065] device hsr_slave_0 entered promiscuous mode [ 307.823304][ T4065] device hsr_slave_1 entered promiscuous mode [ 307.863115][ T4065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.865367][ T4065] Cannot create hsr debugfs directory [ 307.879481][ T4076] team0: Port device team_slave_1 added [ 307.883281][ T4075] team0: Port device team_slave_0 added [ 307.887959][ T4066] team0: Port device team_slave_0 added [ 307.908995][ T4075] team0: Port device team_slave_1 added [ 307.911832][ T4066] team0: Port device team_slave_1 added [ 307.935722][ T4076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.937649][ T4076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.945071][ T4076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.973437][ T4076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.981267][ T4076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.988589][ T4076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.021451][ T4075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.029268][ T4075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.036345][ T4075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.042729][ T4066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.044941][ T4066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.051857][ T4066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.057924][ T4066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.059813][ T4066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.067527][ T4066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.078697][ T4075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.080692][ T4075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.088334][ T4075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.175602][ T4076] device hsr_slave_0 entered promiscuous mode [ 308.223381][ T4076] device hsr_slave_1 entered promiscuous mode [ 308.263072][ T4076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.265104][ T4076] Cannot create hsr debugfs directory [ 308.344987][ T4075] device hsr_slave_0 entered promiscuous mode [ 308.383247][ T4075] device hsr_slave_1 entered promiscuous mode [ 308.442981][ T4075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.445217][ T4075] Cannot create hsr debugfs directory [ 308.495032][ T4066] device hsr_slave_0 entered promiscuous mode [ 308.543270][ T4066] device hsr_slave_1 entered promiscuous mode [ 308.583115][ T4066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.585198][ T4066] Cannot create hsr debugfs directory [ 308.693646][ T4015] Bluetooth: hci1: command 0x0409 tx timeout [ 308.695874][ T4015] Bluetooth: hci0: command 0x0409 tx timeout [ 308.695951][ T3605] Bluetooth: hci4: command 0x0409 tx timeout [ 308.703312][ T3605] Bluetooth: hci2: command 0x0409 tx timeout [ 308.744636][ T4070] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 308.782827][ T4070] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.784962][ T3605] Bluetooth: hci3: command 0x0409 tx timeout [ 308.836983][ T4070] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 308.875415][ T4070] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.959881][ T4076] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 309.021937][ T4076] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 309.092392][ T4076] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 309.149488][ T4076] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 309.226951][ T4065] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 309.269864][ T4065] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 309.311901][ T4065] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 309.384884][ T4065] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 309.459730][ T4070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.471011][ T4075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 309.508086][ T4075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.545258][ T4075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 309.597645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.601313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.604595][ T4075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 309.649542][ T4066] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 309.695210][ T4066] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 309.735476][ T4066] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 309.792279][ T4070] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.797760][ T4066] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 309.858090][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.861362][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.870651][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.872729][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.877725][ T4076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.890255][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.917666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.920652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.924444][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.926374][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.932813][ T4065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.951786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.954718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.957217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.962422][ T4076] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.971377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.984419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.987709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.990477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.993852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.996846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.999560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.002235][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.004294][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.017410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.019993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.022590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.026229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.029073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.031677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.034827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.037312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.043453][ T4065] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.055854][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.060515][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.071426][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.074617][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.076525][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.078810][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.081482][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.086008][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.088028][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.090432][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.117317][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.120077][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.122696][ T1714] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.124656][ T1714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.131132][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.135890][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.139793][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.146329][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.165301][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.168287][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.189675][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.192681][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.197118][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.220667][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.223974][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.231959][ T4075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.245610][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.248896][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.251669][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.255789][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.258270][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.260966][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.269991][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.272710][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.276057][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.279970][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.282522][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.289377][ T4075] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.295438][ T4066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.300211][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.308778][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.313314][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.321855][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.325615][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.328320][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.330331][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.332769][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.335872][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.338113][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.355177][ T4065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.357787][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.360280][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.364589][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.367300][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.369934][ T1714] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.371915][ T1714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.375955][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.379962][ T4066] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.384451][ T4070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.395094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.406702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.409991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.412808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.420359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.430128][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.432029][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.435359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.437941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.449680][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.452514][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.456570][ T4124] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.458563][ T4124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.481857][ T4075] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.497066][ T4075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.502355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.506535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.509424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.513513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.516378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.518965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.522302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.526145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.528877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.539392][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.543683][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.576449][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.579289][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 310.582070][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.593549][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.595692][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.616078][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.618951][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.621731][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.630516][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.632685][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.639127][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.641954][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.645582][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.649362][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.652083][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.657994][ T4070] device veth0_vlan entered promiscuous mode [ 310.661831][ T4076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.673745][ T4065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.688892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.691572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.702634][ T4066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.712685][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 310.716247][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.734425][ T4070] device veth1_vlan entered promiscuous mode [ 310.754412][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 310.757193][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.759852][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.770936][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 310.773698][ T4114] Bluetooth: hci2: command 0x041b tx timeout [ 310.775706][ T4114] Bluetooth: hci4: command 0x041b tx timeout [ 310.777435][ T4114] Bluetooth: hci0: command 0x041b tx timeout [ 310.779112][ T4114] Bluetooth: hci1: command 0x041b tx timeout [ 310.781991][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.791310][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.795304][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.811808][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 310.815437][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.817529][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.819781][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.822546][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.827247][ T4076] device veth0_vlan entered promiscuous mode [ 310.834423][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.836936][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.844180][ T4076] device veth1_vlan entered promiscuous mode [ 310.847222][ T4065] device veth0_vlan entered promiscuous mode [ 310.853465][ T4114] Bluetooth: hci3: command 0x041b tx timeout [ 310.868029][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 310.871574][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.879255][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.890338][ T4075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.899005][ T4070] device veth0_macvtap entered promiscuous mode [ 310.914519][ T4066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.918036][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 310.920781][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.924505][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.926620][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.932149][ T4065] device veth1_vlan entered promiscuous mode [ 310.939032][ T4070] device veth1_macvtap entered promiscuous mode [ 310.955571][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 310.959314][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.976592][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.979468][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.986670][ T4076] device veth0_macvtap entered promiscuous mode [ 311.006063][ T4076] device veth1_macvtap entered promiscuous mode [ 311.016781][ T4070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.032528][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 311.036944][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 311.039579][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 311.042569][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 311.051253][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.055772][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.058610][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 311.061470][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 311.071410][ T4076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.074778][ T4076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.078667][ T4076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.083601][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.086292][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.091350][ T4076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.108376][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.111334][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.116221][ T4065] device veth0_macvtap entered promiscuous mode [ 311.121172][ T4065] device veth1_macvtap entered promiscuous mode [ 311.131240][ T4070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.135015][ T4070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.138655][ T4070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.147594][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 311.150342][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 311.154541][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.157404][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.167584][ T4070] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.170229][ T4070] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.172566][ T4070] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.177495][ T4070] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.187280][ T4076] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.189666][ T4076] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.191957][ T4076] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.195675][ T4076] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.209131][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 311.211785][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.216624][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.219085][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.241571][ T4066] device veth0_vlan entered promiscuous mode [ 311.254018][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 311.256903][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 311.267071][ T4065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.269876][ T4065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.276436][ T4065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.279442][ T4065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.288439][ T4065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.298801][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.301651][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.321354][ T4065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.325171][ T4065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.327909][ T4065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.330879][ T4065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.336373][ T4065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.351069][ T1714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.354269][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.356983][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.358664][ T1714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.367453][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 311.395745][ T4065] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.398255][ T4065] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.400915][ T4065] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.403947][ T4065] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.409908][ T4066] device veth1_vlan entered promiscuous mode [ 311.434158][ T1714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.436374][ T1714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.439292][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 311.442511][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 311.470594][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 311.474453][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 311.477231][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.480188][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.482605][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.487611][ T4075] device veth0_vlan entered promiscuous mode [ 311.497021][ T4075] device veth1_vlan entered promiscuous mode [ 311.508521][ T4124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.510848][ T4124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.544329][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 311.547291][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 311.630801][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.637954][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.641715][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 311.654087][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 311.664447][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 311.667263][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 311.696617][ T4066] device veth0_macvtap entered promiscuous mode [ 311.705472][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 311.708390][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 311.711615][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 311.727972][ T4075] device veth0_macvtap entered promiscuous mode [ 311.745650][ T4066] device veth1_macvtap entered promiscuous mode [ 311.758954][ T4075] device veth1_macvtap entered promiscuous mode [ 311.779633][ T1714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.781988][ T1714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.795760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 311.798441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 311.801771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 311.810741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 311.837501][ T4149] loop3: detected capacity change from 0 to 512 [ 311.868704][ T4075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.871633][ T4075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.875851][ T4075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.878661][ T4075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.881408][ T4075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.892299][ T4075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.899542][ T4075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.906154][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.908419][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.914196][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 311.916883][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.919713][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.934819][ T4066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.937859][ T4066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.940619][ T4066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.950141][ T4066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.956419][ T4066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.959488][ T4066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.962006][ T4066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.982438][ T4066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.987251][ T4066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.015523][ T4066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.018226][ T4066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.020768][ T4066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.031881][ T4066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.041607][ T4066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.046909][ T4066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.047493][ T4149] EXT4-fs (loop3): Test dummy encryption mode enabled [ 312.051142][ T4066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.051622][ T4149] EXT4-fs (loop3): inline encryption not supported [ 312.055192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.058699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.061781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.068408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.089285][ T4075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.092269][ T4075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.100940][ T4075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.106060][ T4149] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.4: inode #1: comm syz.3.4: iget: illegal inode # [ 312.126579][ T4075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.129054][ T4149] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4: error while reading EA inode 1 err=-117 [ 312.133569][ T4075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.136397][ T4075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.138999][ T4075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.141802][ T4075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.146354][ T4075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.148989][ T4149] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 312.154855][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.158237][ T4149] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.4: inode #1: comm syz.3.4: iget: illegal inode # [ 312.167246][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.174718][ T4149] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4: error while reading EA inode 1 err=-117 [ 312.181843][ T4149] EXT4-fs (loop3): 1 orphan inode deleted [ 312.185655][ T4149] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,nombcache,min_batch_time=0x00000000000005a9,noinit_itable,test_dummy_encryption,minixdf,inlinecrypt,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none. [ 312.193421][ T4075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.196225][ T4075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.198579][ T4075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.200882][ T4075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.220279][ T4066] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.222790][ T4066] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.239546][ T4066] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.249690][ T4066] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.508370][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.510865][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.511539][ T380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.516771][ T380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.519669][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 312.522208][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 312.539098][ T4166] usb usb1: check_ctrlrecip: process 4166 (syz.3.7) requesting ep 01 but needs 81 [ 312.541665][ T4166] usb usb1: usbfs: process 4166 (syz.3.7) did not claim interface 0 before use [ 312.611037][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.620474][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.623444][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.625552][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.629498][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 312.650409][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 312.856767][ T4145] Bluetooth: hci1: command 0x040f tx timeout [ 312.860001][ T4145] Bluetooth: hci0: command 0x040f tx timeout [ 312.861993][ T4145] Bluetooth: hci4: command 0x040f tx timeout [ 312.870776][ T4145] Bluetooth: hci2: command 0x040f tx timeout [ 312.973839][ T4181] loop4: detected capacity change from 0 to 164 [ 313.100267][ T4174] loop2: detected capacity change from 0 to 16 [ 313.715956][ T4174] erofs: (device loop2): mounted with root inode @ nid 36. [ 313.753805][ T4145] Bluetooth: hci3: command 0x040f tx timeout [ 313.817716][ T4187] loop0: detected capacity change from 0 to 1024 [ 314.023963][ T4193] udc-core: couldn't find an available UDC or it's busy [ 314.025917][ T4193] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 314.036927][ T4195] loop2: detected capacity change from 0 to 512 [ 314.118946][ T4195] EXT4-fs (loop2): Ignoring removed oldalloc option [ 314.174767][ T4195] EXT4-fs (loop2): 1 truncate cleaned up [ 314.176308][ T4195] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 314.214286][ T4200] loop1: detected capacity change from 0 to 736 [ 314.271651][ T4200] ======================================================= [ 314.271651][ T4200] WARNING: The mand mount option has been deprecated and [ 314.271651][ T4200] and is ignored by this kernel. Remove the mand [ 314.271651][ T4200] option from the mount to silence this warning. [ 314.271651][ T4200] ======================================================= [ 314.622128][ T4221] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 0, id = 0 [ 314.642059][ T4222] loop3: detected capacity change from 0 to 512 [ 314.695212][ T4222] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 314.714169][ T4222] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 314.726229][ T4222] EXT4-fs (loop3): 1 truncate cleaned up [ 314.731428][ T4222] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 314.974894][ T4220] loop4: detected capacity change from 0 to 16 [ 314.990279][ T3605] Bluetooth: hci2: command 0x0419 tx timeout [ 314.992622][ T3605] Bluetooth: hci4: command 0x0419 tx timeout [ 315.043448][ T3605] Bluetooth: hci0: command 0x0419 tx timeout [ 315.046936][ T3605] Bluetooth: hci1: command 0x0419 tx timeout [ 315.235455][ T4220] erofs: (device loop4): mounted with root inode @ nid 36. [ 315.548128][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.550096][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.634034][ T4236] loop1: detected capacity change from 0 to 512 [ 315.747755][ T4236] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 315.796361][ T4236] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 315.813773][ T3605] Bluetooth: hci3: command 0x0419 tx timeout [ 315.821303][ T4244] loop2: detected capacity change from 0 to 512 [ 315.873837][ T4248] af_packet: tpacket_rcv: packet too big, clamped from 102 to 4294967286. macoff=82 [ 315.879353][ T4244] EXT4-fs (loop2): Value of option "test_dummy_encryption=discard" is unrecognized [ 315.974571][ T4250] netlink: 'syz.3.32': attribute type 2 has an invalid length. [ 315.976881][ T4250] netlink: 'syz.3.32': attribute type 8 has an invalid length. [ 315.979172][ T4250] netlink: 132 bytes leftover after parsing attributes in process `syz.3.32'. [ 316.868595][ T4258] loop4: detected capacity change from 0 to 512 [ 316.914955][ T4258] EXT4-fs (loop4): Ignoring removed oldalloc option [ 316.916943][ T4258] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 316.939464][ T4258] EXT4-fs (loop4): 1 truncate cleaned up [ 316.941089][ T4258] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 317.030836][ T4271] udc-core: couldn't find an available UDC or it's busy [ 317.032768][ T4271] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 317.037758][ T4270] loop0: detected capacity change from 0 to 512 [ 317.077455][ T4273] binder: 4272:4273 tried to acquire reference to desc 0, got 1 instead [ 317.118013][ T4273] binder: 4272:4273 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 317.121755][ T4273] binder: 4273 RLIMIT_NICE not set [ 317.141663][ T4273] binder: 4273 RLIMIT_NICE not set [ 317.147596][ T4273] binder: release 4272:4273 transaction 5 in, still active [ 317.158494][ T4270] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 317.179989][ T4270] EXT4-fs (loop0): 1 truncate cleaned up [ 317.181646][ T4270] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 317.219004][ T4273] binder: send failed reply for transaction 5 to 4272:4273 [ 317.709236][ T4280] input: syz0 as /devices/virtual/input/input2 [ 318.125669][ T3605] binder: undelivered TRANSACTION_COMPLETE [ 318.127696][ T3605] binder: undelivered TRANSACTION_ERROR: 29189 [ 318.385093][ T4286] netlink: 'syz.2.50': attribute type 2 has an invalid length. [ 318.387290][ T4286] netlink: 'syz.2.50': attribute type 8 has an invalid length. [ 318.389448][ T4286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.50'. [ 320.374852][ T4304] loop4: detected capacity change from 0 to 512 [ 320.406691][ T4309] loop1: detected capacity change from 0 to 2048 [ 320.463294][ T4304] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 320.470962][ T4304] EXT4-fs (loop4): invalid journal inode [ 320.482989][ T4304] EXT4-fs (loop4): can't get journal size [ 320.485681][ T4314] udc-core: couldn't find an available UDC or it's busy [ 320.487615][ T4314] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 320.490883][ T4309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.506890][ T4304] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 320.509399][ T4304] System zones: 1-12, 13-13 [ 320.644791][ T4304] EXT4-fs (loop4): 1 truncate cleaned up [ 320.646417][ T4304] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback. [ 322.183566][ T4326] input: syz0 as /devices/virtual/input/input3 [ 322.508131][ T4304] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.57: bg 0: block 255: padding at end of block bitmap is not set [ 322.543326][ T4304] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 322.884252][ T4332] binder: 4331:4332 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 322.887926][ T4332] binder: 4332 RLIMIT_NICE not set [ 322.889312][ T4332] binder: 4331:4332 ioctl c0306201 20001440 returned -11 [ 324.608145][ T4364] loop2: detected capacity change from 0 to 2048 [ 325.530949][ T4381] udc-core: couldn't find an available UDC or it's busy [ 325.540785][ T4381] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 325.541442][ T4382] loop1: detected capacity change from 0 to 8 [ 325.652008][ T4364] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 325.664476][ T4382] SQUASHFS error: Failed to read block 0x6e6: -5 [ 325.666367][ T4382] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 325.668330][ T4382] SQUASHFS error: Unable to read inode 0xa7 [ 326.832139][ T4364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 326.852230][ T4397] loop3: detected capacity change from 0 to 512 [ 327.036005][ T4399] capability: warning: `syz.0.92' uses deprecated v2 capabilities in a way that may be insecure [ 327.087035][ T4399] loop0: detected capacity change from 0 to 512 [ 327.264793][ T4397] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.91: inode #2214592512: comm syz.3.91: iget: illegal inode # [ 327.268856][ T4397] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.91: error while reading EA inode 2214592512 err=-117 [ 327.324074][ T4397] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.91: inode #2214592512: comm syz.3.91: iget: illegal inode # [ 327.753915][ T4397] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.91: error while reading EA inode 2214592512 err=-117 [ 328.106968][ T4399] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 328.110809][ T4397] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.91: inode #1: comm syz.3.91: iget: illegal inode # [ 328.114821][ T4397] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.91: error while reading EA inode 1 err=-117 [ 328.133364][ T4397] EXT4-fs (loop3): 1 orphan inode deleted [ 328.134958][ T4397] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,auto_da_alloc=0x0000000000000008,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 328.186087][ T4409] loop1: detected capacity change from 0 to 1024 [ 328.251925][ T4409] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 328.634120][ T4425] loop4: detected capacity change from 0 to 8 [ 330.008598][ T4015] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 330.397239][ T4425] SQUASHFS error: Unable to read inode 0x11f [ 332.689730][ T4447] netlink: 'syz.3.103': attribute type 2 has an invalid length. [ 332.692035][ T4447] netlink: 'syz.3.103': attribute type 8 has an invalid length. [ 332.694318][ T4447] netlink: 132 bytes leftover after parsing attributes in process `syz.3.103'. [ 333.416363][ T4015] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 333.418677][ T4015] usb 1-1: can't read configurations, error -71 [ 333.544294][ T4452] loop4: detected capacity change from 0 to 2048 [ 334.588828][ T4452] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 334.710185][ T4470] loop2: detected capacity change from 0 to 512 [ 334.752037][ T4452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 334.770159][ T4472] loop0: detected capacity change from 0 to 512 [ 334.937726][ T4470] EXT4-fs (loop2): Test dummy encryption mode enabled [ 334.943725][ T4470] EXT4-fs (loop2): inline encryption not supported [ 335.735184][ T4470] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.114: inode #1: comm syz.2.114: iget: illegal inode # [ 335.746559][ T4470] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.114: error while reading EA inode 1 err=-117 [ 335.769214][ T4470] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.114: inode #1: comm syz.2.114: iget: illegal inode # [ 335.778121][ T4472] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 335.809421][ T4470] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.114: error while reading EA inode 1 err=-117 [ 335.814550][ T4470] EXT4-fs (loop2): 1 orphan inode deleted [ 335.816136][ T4470] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,nombcache,min_batch_time=0x00000000000005a9,noinit_itable,test_dummy_encryption,minixdf,inlinecrypt,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none. [ 336.870866][ T4484] process 'syz.3.117' launched './file0' with NULL argv: empty string added [ 337.602282][ T4493] loop2: detected capacity change from 0 to 1024 [ 338.729374][ T4510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 340.509218][ T4526] loop4: detected capacity change from 0 to 2048 [ 340.513440][ T4529] loop3: detected capacity change from 0 to 512 [ 341.400689][ T4544] loop2: detected capacity change from 0 to 128 [ 341.409006][ T4526] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 341.437248][ T4529] EXT4-fs (loop3): 1 orphan inode deleted [ 341.438875][ T4529] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 341.485500][ T4544] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 341.607283][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 341.662280][ T4550] loop1: detected capacity change from 0 to 1764 [ 342.545287][ T4555] loop2: detected capacity change from 0 to 1024 [ 342.585880][ T4558] loop3: detected capacity change from 0 to 512 [ 342.670326][ T4558] EXT4-fs (loop3): Ignoring removed nobh option [ 342.688441][ T4555] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 342.867456][ T4566] loop0: detected capacity change from 0 to 512 [ 342.888851][ T4558] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue. Quota mode: writeback. [ 342.904248][ T4566] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 342.906968][ T4566] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 343.130384][ T4566] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8002e019, mo2=0000] [ 343.513834][ T4566] EXT4-fs (loop0): 1 truncate cleaned up [ 343.515470][ T4566] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,auto_da_alloc=0x0000000000000002,nodiscard,jqfmt=vfsold,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 343.551196][ T380] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 343.554723][ T380] EXT4-fs error (device loop0): ext4_release_dquot:6240: comm kworker/u4:4: Failed to release dquot type 1 [ 343.888474][ T380] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 343.891782][ T380] EXT4-fs error (device loop0): ext4_release_dquot:6240: comm kworker/u4:4: Failed to release dquot type 1 [ 344.854833][ T4589] loop0: detected capacity change from 0 to 512 [ 344.945677][ T4589] EXT4-fs (loop0): Test dummy encryption mode enabled [ 344.947653][ T4589] EXT4-fs (loop0): inline encryption not supported [ 344.956905][ T4578] fuse: Bad value for 'fd' [ 345.023831][ T4593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 345.048738][ T4589] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.147: inode #1: comm syz.0.147: iget: illegal inode # [ 345.054609][ T4589] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.147: error while reading EA inode 1 err=-117 [ 345.316106][ T4589] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.147: inode #1: comm syz.0.147: iget: illegal inode # [ 345.332491][ T4589] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.147: error while reading EA inode 1 err=-117 [ 345.346956][ T4589] EXT4-fs (loop0): 1 orphan inode deleted [ 345.348645][ T4589] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,nombcache,min_batch_time=0x00000000000005a9,noinit_itable,test_dummy_encryption,minixdf,inlinecrypt,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none. [ 345.546039][ T4601] loop4: detected capacity change from 0 to 2048 [ 345.868401][ T4611] loop1: detected capacity change from 0 to 512 [ 346.763319][ T4616] binder: 4615:4616 tried to acquire reference to desc 0, got 1 instead [ 346.775384][ T1533] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.814200][ T4616] binder: 4615:4616 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 346.834285][ T4611] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.156: inode #1: comm syz.1.156: iget: illegal inode # [ 346.834723][ T4616] binder: 4616 RLIMIT_NICE not set [ 346.839249][ T4616] binder: 4616 RLIMIT_NICE not set [ 346.851964][ T4611] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.156: error while reading EA inode 1 err=-117 [ 346.865064][ T4601] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.888359][ T4611] EXT4-fs (loop1): 1 orphan inode deleted [ 346.890038][ T4611] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.972305][ T4616] binder: release 4615:4616 transaction 11 in, still active [ 346.974407][ T4616] binder: send failed reply for transaction 11 to 4615:4616 [ 346.993111][ T4611] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.156: unexpected EA_INODE flag [ 347.004007][ T7] binder: undelivered TRANSACTION_COMPLETE [ 347.005616][ T7] binder: undelivered TRANSACTION_ERROR: 29189 [ 347.102891][ T4601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.152'. [ 347.858169][ T4628] loop2: detected capacity change from 0 to 1764 [ 348.890769][ T4145] Bluetooth: hci0: command 0x0406 tx timeout [ 348.951535][ T4635] loop1: detected capacity change from 0 to 1024 [ 348.992479][ T4635] EXT4-fs (loop1): Ignoring removed nobh option [ 348.996567][ T4635] EXT4-fs (loop1): Ignoring removed bh option [ 349.110257][ T4635] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 349.165752][ T4645] loop4: detected capacity change from 0 to 1024 [ 349.267710][ T4647] fuse: Bad value for 'fd' [ 349.961105][ T4635] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 350.037349][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'. [ 350.045562][ T4645] EXT4-fs (loop4): Test dummy encryption mode enabled [ 350.049932][ T4645] EXT4-fs (loop4): inline encryption not supported [ 350.066003][ T4645] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 350.176967][ T4658] binder: 4657:4658 tried to acquire reference to desc 0, got 1 instead [ 350.191911][ T4658] binder: 4657:4658 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 350.214243][ T4658] binder: 4658 RLIMIT_NICE not set [ 350.217204][ T4658] binder: 4658 RLIMIT_NICE not set [ 350.224190][ T4658] binder: release 4657:4658 transaction 16 in, still active [ 350.232965][ T4658] binder: send failed reply for transaction 16 to 4657:4658 [ 350.293618][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 350.294228][ T4116] binder: undelivered TRANSACTION_COMPLETE [ 350.297401][ T4116] binder: undelivered TRANSACTION_ERROR: 29189 [ 350.368915][ T4663] loop2: detected capacity change from 0 to 512 [ 350.429159][ T4663] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 350.487246][ T4671] loop4: detected capacity change from 0 to 512 [ 350.500590][ T4673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.175'. [ 350.568756][ T4676] loop3: detected capacity change from 0 to 512 [ 350.593659][ T4671] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.174: inode #13: comm syz.4.174: iget: illegal inode # [ 350.598517][ T4671] EXT4-fs (loop4): Remounting filesystem read-only [ 350.600983][ T4671] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.174: couldn't read orphan inode 13 (err -117) [ 350.628490][ T4671] EXT4-fs (loop4): Remounting filesystem read-only [ 350.630459][ T4671] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,abort,errors=remount-ro,nodioread_nolock,abort,auto_da_alloc=0x0000000000000001,. Quota mode: none. [ 350.791201][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.796935][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.799783][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.803826][ T4676] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 351.995394][ T4676] EXT4-fs (loop3): invalid journal inode [ 351.997079][ T4676] EXT4-fs (loop3): can't get journal size [ 352.030666][ T4676] EXT4-fs (loop3): 1 truncate cleaned up [ 352.032596][ T4676] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 352.280817][ T4689] binder: 4688:4689 ioctl c018620c 20000000 returned -1 [ 352.300070][ T13] usb 1-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 352.303006][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.320161][ T13] usb 1-1: config 0 descriptor?? [ 352.417190][ T4695] loop4: detected capacity change from 0 to 736 [ 352.501706][ T4697] binder: 4696:4697 tried to acquire reference to desc 0, got 1 instead [ 352.519687][ T4697] binder: 4696:4697 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 352.527370][ T4699] loop3: detected capacity change from 0 to 256 [ 352.536601][ T4697] binder: 4697 RLIMIT_NICE not set [ 352.540290][ T4697] binder: 4697 RLIMIT_NICE not set [ 352.551107][ T4697] binder: release 4696:4697 transaction 21 in, still active [ 352.553136][ T4697] binder: send failed reply for transaction 21 to 4696:4697 [ 352.560064][ T4113] binder: undelivered TRANSACTION_COMPLETE [ 352.562038][ T4113] binder: undelivered TRANSACTION_ERROR: 29189 [ 352.646628][ T4707] loop1: detected capacity change from 0 to 512 [ 353.732406][ T4714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.734793][ T4714] IPv6: NLM_F_CREATE should be set when creating new route [ 353.796732][ T4707] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 353.834036][ T13] usbhid 1-1:0.0: can't add hid device: -71 [ 353.835922][ T13] usbhid: probe of 1-1:0.0 failed with error -71 [ 353.840440][ T13] usb 1-1: USB disconnect, device number 4 [ 353.969276][ T4726] udc-core: couldn't find an available UDC or it's busy [ 353.971179][ T4726] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 354.081253][ T4729] loop3: detected capacity change from 0 to 256 [ 356.193150][ T4729] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 357.851261][ T4766] loop1: detected capacity change from 0 to 512 [ 357.884337][ T4766] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 358.083714][ T4766] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.207: invalid indirect mapped block 10 (level 1) [ 359.163893][ T4774] sched: RT throttling activated [ 359.744808][ T4766] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.207: invalid indirect mapped block 8 (level 1) [ 359.803512][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 359.814895][ T4766] EXT4-fs (loop1): 1 truncate cleaned up [ 359.816729][ T4766] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 359.923956][ T4785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.210'. [ 359.948103][ T4786] udc-core: couldn't find an available UDC or it's busy [ 359.981699][ T4786] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 359.988821][ T4789] binder: 4787:4789 tried to acquire reference to desc 0, got 1 instead [ 359.999695][ T4789] binder: 4787:4789 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 360.013552][ T4789] binder: 4789 RLIMIT_NICE not set [ 360.014973][ T4789] binder: 4789 RLIMIT_NICE not set [ 360.016654][ T4789] binder: release 4787:4789 transaction 26 in, still active [ 360.018685][ T4789] binder: send failed reply for transaction 26 to 4787:4789 [ 360.046127][ T4113] binder: undelivered TRANSACTION_COMPLETE [ 360.047781][ T4113] binder: undelivered TRANSACTION_ERROR: 29189 [ 360.141940][ T4794] loop3: detected capacity change from 0 to 1024 [ 360.178461][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.181264][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.185018][ T4794] hfsplus: unable to parse mount options [ 360.287537][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 360.290167][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 360.292270][ T25] usb 1-1: SerialNumber: syz [ 360.544378][ T4798] netlink: 'syz.3.217': attribute type 2 has an invalid length. [ 360.544421][ T4799] loop1: detected capacity change from 0 to 1024 [ 360.546639][ T4798] netlink: 'syz.3.217': attribute type 8 has an invalid length. [ 360.546658][ T4798] netlink: 132 bytes leftover after parsing attributes in process `syz.3.217'. [ 360.867137][ T25] usb 1-1: 0:2 : does not exist [ 362.023683][ T25] usb 1-1: unit 110 not found! [ 362.077257][ T25] usb 1-1: USB disconnect, device number 5 [ 363.200438][ T4822] loop4: detected capacity change from 0 to 1024 [ 363.256018][ T4822] hfsplus: unable to parse mount options [ 363.273988][ T4827] loop3: detected capacity change from 0 to 512 [ 363.320168][ T4828] loop0: detected capacity change from 0 to 2048 [ 363.393699][ T4833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.231'. [ 363.406945][ T4828] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000007,,errors=continue. Quota mode: none. [ 363.442904][ T4827] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 363.685912][ T4847] udc-core: couldn't find an available UDC or it's busy [ 363.687993][ T4847] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 363.794346][ T4295] udevd[4295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.956395][ T4852] netlink: 'syz.2.236': attribute type 2 has an invalid length. [ 363.958603][ T4852] netlink: 'syz.2.236': attribute type 8 has an invalid length. [ 363.960787][ T4852] netlink: 132 bytes leftover after parsing attributes in process `syz.2.236'. [ 364.704631][ T4854] input: syz1 as /devices/virtual/input/input9 [ 364.943239][ T4858] loop2: detected capacity change from 0 to 1024 [ 365.003452][ T4858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.076072][ T4866] udc-core: couldn't find an available UDC or it's busy [ 365.077993][ T4866] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 365.232969][ T4870] loop4: detected capacity change from 0 to 512 [ 365.266654][ T4877] loop3: detected capacity change from 0 to 512 [ 365.271384][ T4876] loop0: detected capacity change from 0 to 1024 [ 365.274568][ T4876] hfsplus: unable to parse mount options [ 365.294201][ T4877] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.247: casefold flag without casefold feature [ 365.315980][ T4877] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.247: couldn't read orphan inode 15 (err -117) [ 365.320228][ T4877] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 365.411284][ T4870] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 365.635040][ T4888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.250'. [ 365.638486][ T4887] netlink: 'syz.0.249': attribute type 2 has an invalid length. [ 365.642111][ T4887] netlink: 'syz.0.249': attribute type 8 has an invalid length. [ 365.644132][ T4887] netlink: 132 bytes leftover after parsing attributes in process `syz.0.249'. [ 365.700831][ T4890] loop3: detected capacity change from 0 to 1024 [ 365.720322][ T4890] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 365.765787][ T4890] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 365.797494][ T4890] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 365.831408][ T4890] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 365.841479][ T4890] EXT4-fs (loop3): This should not happen!! Data will be lost [ 365.841479][ T4890] [ 365.844270][ T4890] EXT4-fs (loop3): Total free blocks count 0 [ 365.845923][ T4890] EXT4-fs (loop3): Free/Dirty block details [ 365.849089][ T4890] EXT4-fs (loop3): free_blocks=20480 [ 365.850719][ T4890] EXT4-fs (loop3): dirty_blocks=32 [ 365.852190][ T4890] EXT4-fs (loop3): Block reservation details [ 365.853923][ T4890] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 365.859215][ T4901] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 365.861532][ T4900] loop4: detected capacity change from 0 to 512 [ 365.866349][ T4901] EXT4-fs (loop3): This should not happen!! Data will be lost [ 365.866349][ T4901] [ 365.894160][ T4900] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 365.932684][ T4900] EXT4-fs (loop4): invalid journal inode [ 365.934381][ T4900] EXT4-fs (loop4): can't get journal size [ 365.946384][ T4900] EXT4-fs (loop4): 1 truncate cleaned up [ 365.956278][ T4900] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 365.989892][ T4906] loop1: detected capacity change from 0 to 2048 [ 366.117361][ T4906] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 366.214436][ T4627] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 366.221543][ T4627] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 366.241848][ T4627] EXT4-fs (loop1): This should not happen!! Data will be lost [ 366.241848][ T4627] [ 366.244612][ T4627] EXT4-fs (loop1): Total free blocks count 0 [ 366.246280][ T4627] EXT4-fs (loop1): Free/Dirty block details [ 366.247823][ T4627] EXT4-fs (loop1): free_blocks=2415919504 [ 366.249423][ T4627] EXT4-fs (loop1): dirty_blocks=32 [ 366.250878][ T4627] EXT4-fs (loop1): Block reservation details [ 366.252452][ T4627] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 366.273725][ T4856] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1025 with max blocks 1 with error 28 [ 366.284923][ T4856] EXT4-fs (loop1): This should not happen!! Data will be lost [ 366.284923][ T4856] [ 366.416931][ T4914] loop4: detected capacity change from 0 to 1024 [ 366.460557][ T4924] loop2: detected capacity change from 0 to 1024 [ 366.479862][ T4926] udc-core: couldn't find an available UDC or it's busy [ 366.521306][ T4926] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 366.599595][ T4934] loop0: detected capacity change from 0 to 512 [ 366.627230][ T4934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 366.654405][ T4934] EXT4-fs (loop0): 1 truncate cleaned up [ 366.656292][ T4934] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nojournal_checksum,stripe=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 366.702269][ T4940] loop4: detected capacity change from 0 to 512 [ 366.715063][ T4940] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 366.734698][ T4940] EXT4-fs (loop4): invalid journal inode [ 366.736361][ T4940] EXT4-fs (loop4): can't get journal size [ 366.749374][ T4940] EXT4-fs (loop4): 1 truncate cleaned up [ 366.750925][ T4940] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 366.904800][ T4943] loop0: detected capacity change from 0 to 1764 [ 367.084153][ T4943] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 367.131316][ T4946] netlink: 'syz.4.272': attribute type 2 has an invalid length. [ 367.133518][ T4946] netlink: 'syz.4.272': attribute type 8 has an invalid length. [ 367.135736][ T4946] netlink: 132 bytes leftover after parsing attributes in process `syz.4.272'. [ 367.407900][ T4952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.274'. [ 367.871155][ T4961] loop4: detected capacity change from 0 to 1024 [ 368.031736][ T4967] loop2: detected capacity change from 0 to 2048 [ 368.123372][ T4967] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 368.224039][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 368.392234][ T4971] loop4: detected capacity change from 0 to 512 [ 368.538966][ T4971] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 368.563644][ T4971] EXT4-fs (loop4): invalid journal inode [ 368.566346][ T4971] EXT4-fs (loop4): can't get journal size [ 368.587915][ T4971] EXT4-fs (loop4): 1 truncate cleaned up [ 368.603518][ T4971] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 368.837495][ T4982] loop3: detected capacity change from 0 to 2048 [ 368.857064][ T4983] loop4: detected capacity change from 0 to 8 [ 368.879003][ T4985] loop0: detected capacity change from 0 to 1024 [ 368.901084][ T4982] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 368.903150][ T4982] UDF-fs: Scanning with blocksize 512 failed [ 368.915164][ T4983] SQUASHFS error: zlib decompression failed, data probably corrupt [ 368.917524][ T4983] SQUASHFS error: Failed to read block 0x9b: -5 [ 368.919209][ T4983] SQUASHFS error: Unable to read metadata cache entry [99] [ 368.927553][ T4983] SQUASHFS error: Unable to read inode 0x127 [ 368.937399][ T4982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.974921][ T4985] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 369.217853][ T4989] loop4: detected capacity change from 0 to 1764 [ 369.579972][ T4997] netlink: 'syz.0.288': attribute type 2 has an invalid length. [ 369.582218][ T4997] netlink: 'syz.0.288': attribute type 8 has an invalid length. [ 369.584919][ T4997] netlink: 132 bytes leftover after parsing attributes in process `syz.0.288'. [ 369.629827][ T5002] udc-core: couldn't find an available UDC or it's busy [ 369.650164][ T5002] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 369.921042][ T5008] loop1: detected capacity change from 0 to 256 [ 369.938977][ T5010] loop4: detected capacity change from 0 to 512 [ 369.954876][ T5008] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 369.974811][ T5012] loop0: detected capacity change from 0 to 1024 [ 369.999318][ T5010] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 370.007598][ T5010] EXT4-fs (loop4): invalid journal inode [ 370.009253][ T5010] EXT4-fs (loop4): can't get journal size [ 370.021652][ T5012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.036178][ T5010] EXT4-fs (loop4): 1 truncate cleaned up [ 370.037812][ T5010] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 370.579112][ T5027] loop3: detected capacity change from 0 to 1764 [ 371.985177][ T5044] loop2: detected capacity change from 0 to 512 [ 372.791025][ T5044] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 372.803064][ T5044] EXT4-fs (loop2): invalid journal inode [ 372.808059][ T5044] EXT4-fs (loop2): can't get journal size [ 372.926360][ T5044] EXT4-fs (loop2): 1 truncate cleaned up [ 372.928163][ T5044] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 372.974405][ T5053] netlink: 'syz.3.308': attribute type 2 has an invalid length. [ 372.976562][ T5053] netlink: 'syz.3.308': attribute type 8 has an invalid length. [ 372.978597][ T5053] netlink: 132 bytes leftover after parsing attributes in process `syz.3.308'. [ 373.082583][ T5062] tmpfs: Bad value for 'size' [ 373.242288][ T5066] udc-core: couldn't find an available UDC or it's busy [ 373.244333][ T5066] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 373.341423][ T5070] loop3: detected capacity change from 0 to 764 [ 373.360147][ T5070] rock: directory entry would overflow storage [ 373.365931][ T5070] rock: sig=0x4654, size=5, remaining=4 [ 373.668442][ T5074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.166828][ T4626] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.173755][ T5077] binder: tried to use weak ref as strong ref [ 374.175836][ T5077] binder: 5076:5077 Acquire 1 refcount change on invalid ref 0 ret -22 [ 374.224989][ T5077] binder: 5076:5077 got transaction to invalid handle, 1 [ 374.227007][ T5077] binder: 5076:5077 transaction failed 29201/-22, size 0-0 line 2917 [ 374.264756][ T5077] binder: 5076:5077 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 374.299031][ T5077] binder: 5077 RLIMIT_NICE not set [ 374.321988][ T5081] loop4: detected capacity change from 0 to 512 [ 374.357935][ T5081] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 374.360622][ T5081] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 374.371701][ T4626] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.474061][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 374.561747][ T5081] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8002e019, mo2=0000] [ 374.571424][ T5092] loop2: detected capacity change from 0 to 256 [ 374.587743][ T4626] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.600580][ T5081] EXT4-fs (loop4): 1 truncate cleaned up [ 374.826522][ T5081] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,auto_da_alloc=0x0000000000000002,nodiscard,jqfmt=vfsold,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 374.906449][ T4856] Quota error (device loop4): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 375.053401][ T4856] EXT4-fs error (device loop4): ext4_release_dquot:6240: comm kworker/u4:16: Failed to release dquot type 1 [ 375.389135][ T5092] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 375.395679][ T4626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.514888][ T4856] Quota error (device loop4): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 375.518007][ T4856] EXT4-fs error (device loop4): ext4_release_dquot:6240: comm kworker/u4:16: Failed to release dquot type 1 [ 375.650780][ T5106] loop3: detected capacity change from 0 to 1024 [ 375.695429][ T5106] hfsplus: unable to parse mount options [ 375.702157][ T5105] loop4: detected capacity change from 0 to 2048 [ 375.812641][ T4117] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 375.827529][ T5105] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 375.951041][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 376.061330][ T4117] usb 1-1: Using ep0 maxpacket: 8 [ 376.183378][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.185224][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.230892][ T4117] usb 1-1: unable to get BOS descriptor or descriptor too short [ 376.237245][ T5127] binder: 5126:5127 tried to acquire reference to desc 0, got 1 instead [ 376.265206][ T5127] binder_alloc: 5126: binder_alloc_buf, no vma [ 376.267125][ T5127] binder: 5126:5127 transaction failed 29189/-3, size 0-0 line 3085 [ 376.287434][ T5127] binder: 5126:5127 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 376.310709][ T4117] usb 1-1: config 11 has an invalid interface number: 255 but max is 0 [ 376.312967][ T4117] usb 1-1: config 11 has no interface number 0 [ 376.314700][ T4117] usb 1-1: too many endpoints for config 11 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 376.318368][ T4117] usb 1-1: config 11 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 376.329735][ T5127] binder: 5127 RLIMIT_NICE not set [ 376.337975][ T5127] binder: 5126:5127 ioctl c0306201 20001440 returned -11 [ 376.341042][ T4117] usb 1-1: config 11 interface 255 has no altsetting 0 [ 376.391671][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.393703][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.397394][ T5087] device bridge_slave_0 entered promiscuous mode [ 376.430410][ T4114] binder: undelivered TRANSACTION_ERROR: 29189 [ 376.560038][ T4117] usb 1-1: New USB device found, idVendor=0a5c, idProduct=bd17, bcdDevice=c6.87 [ 376.562604][ T4117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.564776][ T4117] usb 1-1: Product: syz [ 376.565969][ T4117] usb 1-1: Manufacturer: syz [ 376.567202][ T4117] usb 1-1: SerialNumber: syz [ 376.645457][ T4637] Bluetooth: hci1: command 0x0409 tx timeout [ 376.650904][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.656096][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.673497][ T5087] device bridge_slave_1 entered promiscuous mode [ 377.571945][ T5153] loop3: detected capacity change from 0 to 512 [ 377.608795][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.613632][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.639895][ T4117] usb 1-1: USB disconnect, device number 6 [ 377.651226][ T5153] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 377.657920][ T5153] EXT4-fs (loop3): invalid journal inode [ 377.659441][ T5153] EXT4-fs (loop3): can't get journal size [ 377.703066][ T5153] EXT4-fs (loop3): 1 truncate cleaned up [ 377.704661][ T5153] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 377.755798][ T5087] team0: Port device team_slave_0 added [ 377.808658][ T5087] team0: Port device team_slave_1 added [ 377.882141][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.884029][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.895508][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.001317][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.003287][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.029806][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.064784][ T4626] IPVS: stopping master sync thread 4221 ... [ 378.273115][ T5174] loop0: detected capacity change from 0 to 2048 [ 378.292655][ T5178] loop3: detected capacity change from 0 to 1024 [ 378.368941][ T5178] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 378.371251][ T5178] EXT4-fs (loop3): too many log groups per flexible block group [ 378.374635][ T5178] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 378.376655][ T5178] EXT4-fs (loop3): mount failed [ 378.387467][ T5087] device hsr_slave_0 entered promiscuous mode [ 378.401905][ T5174] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 378.525823][ T5087] device hsr_slave_1 entered promiscuous mode [ 378.528892][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 378.553765][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.555886][ T5087] Cannot create hsr debugfs directory [ 378.645388][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 378.653279][ T4637] Bluetooth: hci1: command 0x041b tx timeout [ 379.138429][ T4626] device hsr_slave_0 left promiscuous mode [ 379.263152][ T4626] device hsr_slave_1 left promiscuous mode [ 379.345407][ T5207] loop4: detected capacity change from 0 to 1024 [ 379.530813][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 379.594426][ T4626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.608348][ T4626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.132421][ T4626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.134670][ T4626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.157491][ T4626] device bridge_slave_1 left promiscuous mode [ 380.180462][ T4626] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.191846][ T5207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.297430][ T4626] device bridge_slave_0 left promiscuous mode [ 380.303636][ T4626] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.458698][ T5223] binder: BINDER_SET_CONTEXT_MGR already set [ 380.460514][ T5223] binder: 5222:5223 ioctl 4018620d 20000040 returned -16 [ 380.463368][ T5223] binder: tried to use weak ref as strong ref [ 380.465736][ T5223] binder: 5222:5223 Acquire 1 refcount change on invalid ref 0 ret -22 [ 380.470560][ T5223] binder: 5222:5223 got transaction to invalid handle, 1 [ 380.472600][ T5223] binder: 5222:5223 transaction failed 29201/-22, size 0-0 line 2917 [ 380.475454][ T5223] binder: 5222:5223 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 380.479731][ T5223] binder: 5223 RLIMIT_NICE not set [ 380.481238][ T5223] binder: 5222:5223 ioctl c0306201 20001440 returned -11 [ 380.493506][ T4626] device veth1_macvtap left promiscuous mode [ 380.495501][ T4626] device veth0_macvtap left promiscuous mode [ 380.497266][ T4626] device veth1_vlan left promiscuous mode [ 380.502886][ T4626] device veth0_vlan left promiscuous mode [ 380.558498][ T4113] binder: undelivered TRANSACTION_ERROR: 29201 [ 380.715893][ T5228] loop4: detected capacity change from 0 to 2048 [ 380.727859][ T4113] Bluetooth: hci1: command 0x040f tx timeout [ 380.788254][ T5228] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 380.834018][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.354'. [ 380.968483][ T4626] team0 (unregistering): Port device team_slave_1 removed [ 380.981005][ T4626] team0 (unregistering): Port device team_slave_0 removed [ 380.993955][ T4626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.057894][ T4626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.235635][ T4626] bond0 (unregistering): Released all slaves [ 381.451702][ T5234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.355'. [ 381.465176][ T5142] chnl_net:caif_netlink_parms(): no params data found [ 381.691446][ T4114] Bluetooth: hci0: command 0x041b tx timeout [ 382.622234][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.624920][ T5142] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.627650][ T5142] device bridge_slave_0 entered promiscuous mode [ 382.722227][ T5087] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 382.749256][ T5256] loop4: detected capacity change from 0 to 2048 [ 382.774665][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.776714][ T5142] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.779433][ T5142] device bridge_slave_1 entered promiscuous mode [ 382.802689][ T1533] Bluetooth: hci1: command 0x0419 tx timeout [ 382.825535][ T5256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.961137][ T5142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.966848][ T5267] udc-core: couldn't find an available UDC or it's busy [ 382.968858][ T5267] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 383.001640][ T5087] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 383.053973][ T5087] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 383.229782][ T5142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.989949][ T5087] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 384.018310][ T4114] Bluetooth: hci0: command 0x040f tx timeout [ 384.055634][ T5280] loop3: detected capacity change from 0 to 1024 [ 384.088491][ T5142] team0: Port device team_slave_0 added [ 384.112141][ T5278] loop4: detected capacity change from 0 to 512 [ 384.117602][ T5142] team0: Port device team_slave_1 added [ 384.159821][ T5278] EXT4-fs (loop4): bad s_want_extra_isize: 11962 [ 384.161840][ T5280] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 384.164466][ T5280] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 384.179728][ T5280] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #5: comm syz.3.365: unexpected bad inode w/o EXT4_IGET_BAD [ 384.198760][ T5280] EXT4-fs (loop3): no journal found [ 384.200321][ T5280] EXT4-fs (loop3): can't get journal size [ 384.210877][ T5280] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11c, mo2=0002] [ 384.213091][ T5280] EXT4-fs (loop3): failed to initialize system zone (-117) [ 384.215070][ T5280] EXT4-fs (loop3): mount failed [ 384.243926][ T5142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.245919][ T5142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.279274][ T5142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.417438][ T5142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.419548][ T5142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.443217][ T5142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.465399][ T5287] loop4: detected capacity change from 0 to 2048 [ 384.580859][ T5287] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 385.606512][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 385.689762][ T5142] device hsr_slave_0 entered promiscuous mode [ 385.726730][ T5142] device hsr_slave_1 entered promiscuous mode [ 385.756386][ T5142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.758500][ T5142] Cannot create hsr debugfs directory [ 385.782506][ T5303] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.806432][ T5303] device bridge_slave_1 left promiscuous mode [ 385.836133][ T5303] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.950295][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.039391][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 386.042091][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 386.076057][ T4637] Bluetooth: hci0: command 0x0419 tx timeout [ 386.121748][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.153445][ T5316] loop4: detected capacity change from 0 to 1024 [ 386.165346][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 386.171914][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 386.174803][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.176782][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.199279][ T5318] udc-core: couldn't find an available UDC or it's busy [ 386.201396][ T5318] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 386.215973][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 386.218758][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 386.221174][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.223054][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.272019][ T5316] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 386.274074][ T5316] EXT4-fs (loop4): Ignoring removed bh option [ 386.280614][ T5316] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 386.297654][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 386.321731][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 386.342377][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 386.373232][ T5316] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,block_validity,data_err=ignore,max_dir_size_kb=0x0000000000000004,data_err=ignore,grpquota,mblk_io_submit,nodiscard,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 386.393192][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 386.397228][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 386.400087][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 386.402899][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 386.456308][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 386.475037][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 386.543256][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 386.547322][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 386.550035][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 386.555592][ T5316] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.372: Allocating blocks 497-513 which overlap fs metadata [ 386.595454][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 386.609367][ T5316] EXT4-fs (loop4): pa 000000003848d168: logic 128, phys. 385, len 8 [ 386.611911][ T5316] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 386.746095][ T5142] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 386.806612][ T5142] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 386.841614][ T5142] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.905594][ T5142] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 387.025131][ T5343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 387.058528][ T5340] loop0: detected capacity change from 0 to 2048 [ 387.084291][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 387.086590][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 387.126397][ T5340] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000007,,errors=continue. Quota mode: none. [ 387.135203][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.188551][ T5142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.198086][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.200764][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.206811][ T5142] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.215960][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.218725][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.260262][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.262299][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.290494][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.305550][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.320506][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.337373][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.339417][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.368327][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 387.371275][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 387.400801][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 387.407753][ T5354] loop3: detected capacity change from 0 to 512 [ 387.421967][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.440871][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 387.448116][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 387.465651][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 387.532981][ T5354] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 387.535700][ T5354] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 387.570516][ T5354] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8002e019, mo2=0000] [ 387.589386][ T5354] EXT4-fs (loop3): 1 truncate cleaned up [ 387.590998][ T5354] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,auto_da_alloc=0x0000000000000002,nodiscard,jqfmt=vfsold,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 387.603443][ T153] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 387.624853][ T153] EXT4-fs error (device loop3): ext4_release_dquot:6240: comm kworker/u4:3: Failed to release dquot type 1 [ 387.636703][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 387.639496][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 387.659621][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 387.664188][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.407444][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.524909][ T5368] udc-core: couldn't find an available UDC or it's busy [ 388.526948][ T5368] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 388.680982][ T5365] loop4: detected capacity change from 0 to 2048 [ 388.789518][ T5380] loop0: detected capacity change from 0 to 1024 [ 388.811951][ T5365] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 388.840804][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 388.843738][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.877436][ T5365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'. [ 388.887788][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 388.895374][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 388.915502][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 388.928735][ T5380] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 388.940531][ T5380] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 388.958851][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 388.977205][ T5380] EXT4-fs error (device loop0): ext4_get_journal_inode:5160: inode #5: comm syz.0.382: unexpected bad inode w/o EXT4_IGET_BAD [ 388.993427][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 388.995642][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 388.999372][ T5380] EXT4-fs (loop0): no journal found [ 389.001649][ T5380] EXT4-fs (loop0): can't get journal size [ 389.003877][ T5087] device veth0_vlan entered promiscuous mode [ 389.023881][ T5380] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11c, mo2=0002] [ 389.026185][ T5380] EXT4-fs (loop0): failed to initialize system zone (-117) [ 389.028191][ T5380] EXT4-fs (loop0): mount failed [ 389.035544][ T5142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.074509][ T5087] device veth1_vlan entered promiscuous mode [ 389.180917][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.183673][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 389.186300][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.200270][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.204292][ T5087] device veth0_macvtap entered promiscuous mode [ 389.209446][ T5087] device veth1_macvtap entered promiscuous mode [ 389.291053][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.294005][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.310279][ T5402] loop4: detected capacity change from 0 to 128 [ 389.310605][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.314893][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.327834][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.336104][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.343557][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.346526][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.351331][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.358825][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 389.362778][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 389.372019][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 389.395153][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 389.395392][ T5402] attempt to access beyond end of device [ 389.395392][ T5402] loop4: rw=0, want=255510, limit=128 [ 389.410200][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.413271][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.416050][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.418912][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.442751][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.449293][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.451977][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.454819][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.491271][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.677290][ T5409] syz.4.383 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 390.019772][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 390.079071][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 390.172582][ T5087] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.175432][ T5087] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.177866][ T5087] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.194782][ T5087] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.308512][ T5414] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 390.363357][ T4626] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.529701][ T4626] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.574619][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 391.577786][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 391.686727][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 391.689687][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 391.692790][ T5142] device veth0_vlan entered promiscuous mode [ 391.719893][ T5442] loop3: detected capacity change from 0 to 2048 [ 391.724770][ T4626] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.743656][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 391.747666][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 391.753665][ T5142] device veth1_vlan entered promiscuous mode [ 391.758841][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.761162][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.778650][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 391.781353][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 391.802031][ T5442] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 391.825644][ T4626] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.894897][ T4168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.898036][ T4168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.902137][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 391.904891][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 391.921173][ T5442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 391.934558][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 391.956457][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 391.964737][ T5142] device veth0_macvtap entered promiscuous mode [ 392.006676][ T5142] device veth1_macvtap entered promiscuous mode [ 392.166512][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.169411][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.172485][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.185197][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.188095][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.206294][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.208943][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.244740][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.258130][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.261029][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.297207][ T5142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.309133][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 392.312040][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 392.316265][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 392.330189][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.347698][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.350572][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.353400][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.404740][ T4115] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 392.465290][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.468044][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.470883][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.502146][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.513226][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.516314][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.519722][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.523856][ T5142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.527929][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.532884][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.549988][ T5142] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.552524][ T5142] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.564327][ T5142] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.566723][ T5142] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.674405][ T4115] usb 1-1: Using ep0 maxpacket: 16 [ 393.243464][ T4115] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 393.245828][ T4115] usb 1-1: config 0 has no interface number 0 [ 393.247614][ T4115] usb 1-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 393.250596][ T4115] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 393.299361][ T5478] binder: 5477:5478 got transaction to invalid handle, 1 [ 393.301430][ T5478] binder: 5477:5478 transaction failed 29201/-22, size 0-0 line 2917 [ 393.361022][ T5478] binder: 5477:5478 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 393.364672][ T5478] binder: 5478 RLIMIT_NICE not set [ 393.366101][ T5478] binder: 5477:5478 ioctl c0306201 20001440 returned -11 [ 393.473655][ T4115] usb 1-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 393.476158][ T4115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.484315][ T4117] binder: undelivered TRANSACTION_ERROR: 29201 [ 393.486284][ T4115] usb 1-1: Product: syz [ 393.487438][ T4115] usb 1-1: Manufacturer: syz [ 393.509169][ T4115] usb 1-1: SerialNumber: syz [ 393.516635][ T4115] usb 1-1: config 0 descriptor?? [ 393.534538][ T5460] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 393.582665][ T4686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.586028][ T4686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.591245][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 393.623794][ T4686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.626265][ T4686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.648086][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 394.629575][ T5505] loop6: detected capacity change from 0 to 2048 [ 394.637265][ T5504] loop3: detected capacity change from 0 to 2048 [ 394.678818][ T5505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.798790][ T5504] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 394.871250][ T5504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 395.060040][ T5522] loop4: detected capacity change from 0 to 1024 [ 395.910095][ T4114] usb 1-1: USB disconnect, device number 7 [ 395.969794][ T5532] binder: 5530:5532 got transaction to invalid handle, 1 [ 395.971794][ T5532] binder: 5530:5532 transaction failed 29201/-22, size 0-0 line 2917 [ 395.996318][ T5532] binder: 5530:5532 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 396.029114][ T5532] binder: 5532 RLIMIT_NICE not set [ 396.042918][ T5532] binder: 5530:5532 ioctl c0306201 20001440 returned -11 [ 396.068760][ T5522] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 396.149607][ T4168] hfsplus: b-tree write err: -5, ino 4 [ 396.160612][ T4117] binder: undelivered TRANSACTION_ERROR: 29201 [ 396.176886][ T5542] loop0: detected capacity change from 0 to 2048 [ 396.277297][ T5542] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 396.283482][ T5551] loop3: detected capacity change from 0 to 1024 [ 396.294525][ T4626] device hsr_slave_0 left promiscuous mode [ 396.384549][ T5549] loop6: detected capacity change from 0 to 2048 [ 396.440498][ T4626] device hsr_slave_1 left promiscuous mode [ 396.464443][ T5551] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nodiscard,noauto_da_alloc,norecovery,discard,lazytime,noload,journal_ioprio=0x0000000000000002,noauto_da_alloc,,errors=continue. Quota mode: none. [ 396.477910][ T5549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.509197][ T4626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.511632][ T4626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.515947][ T4626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.518182][ T4626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.527430][ T4626] device bridge_slave_1 left promiscuous mode [ 396.529644][ T4626] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.581126][ T4626] device bridge_slave_0 left promiscuous mode [ 396.582971][ T4626] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.763765][ T4626] device veth1_macvtap left promiscuous mode [ 396.765664][ T4626] device veth0_macvtap left promiscuous mode [ 396.767382][ T4626] device veth1_vlan left promiscuous mode [ 396.779438][ T4626] device veth0_vlan left promiscuous mode [ 397.888684][ T5583] loop3: detected capacity change from 0 to 2048 [ 397.904564][ T26] audit: type=1326 audit(398.559:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.5.425" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff85def8a8 code=0x0 [ 398.936184][ T5583] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 398.949966][ T5596] loop6: detected capacity change from 0 to 512 [ 398.998009][ T5596] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 399.000620][ T5596] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 399.242975][ T5596] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8002e019, mo2=0000] [ 399.249227][ T5596] EXT4-fs (loop6): 1 truncate cleaned up [ 399.250804][ T5596] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,auto_da_alloc=0x0000000000000002,nodiscard,jqfmt=vfsold,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 399.275420][ T1714] Quota error (device loop6): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 399.279124][ T1714] EXT4-fs error (device loop6): ext4_release_dquot:6240: comm kworker/u4:6: Failed to release dquot type 1 [ 399.402348][ T153] Quota error (device loop6): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 399.406671][ T153] EXT4-fs error (device loop6): ext4_release_dquot:6240: comm kworker/u4:3: Failed to release dquot type 1 [ 399.633035][ T5610] loop5: detected capacity change from 0 to 1764 [ 399.667401][ T5612] loop3: detected capacity change from 0 to 1024 [ 399.691950][ T4626] team0 (unregistering): Port device team_slave_1 removed [ 399.717096][ T5612] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 399.951674][ T4626] team0 (unregistering): Port device team_slave_0 removed [ 399.989581][ T4626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.077389][ T4626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.104228][ T5624] loop3: detected capacity change from 0 to 128 [ 400.156019][ T5624] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 400.167850][ T5624] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 400.171185][ T5624] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00400002) [ 400.173947][ T5624] FAT-fs (loop3): Filesystem has been set read-only [ 400.214165][ T5627] loop4: detected capacity change from 0 to 1024 [ 400.356622][ T5629] loop3: detected capacity change from 0 to 128 [ 400.414965][ T4626] bond0 (unregistering): Released all slaves [ 400.432021][ T5631] loop4: detected capacity change from 0 to 2048 [ 400.495603][ T5631] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.500929][ T5635] loop3: detected capacity change from 0 to 512 [ 400.621009][ T5635] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 400.644639][ T5635] EXT4-fs (loop3): invalid journal inode [ 400.646224][ T5635] EXT4-fs (loop3): can't get journal size [ 400.678463][ T5635] EXT4-fs (loop3): 1 truncate cleaned up [ 400.680071][ T5635] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 400.717247][ T5645] binder: 5643:5645 ERROR: BC_REGISTER_LOOPER called without request [ 400.719630][ T5645] binder: 5643:5645 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 401.204921][ T5657] binder: BINDER_SET_CONTEXT_MGR already set [ 401.206621][ T5657] binder: 5656:5657 ioctl 4018620d 20000040 returned -16 [ 401.277167][ T5657] binder: 5656:5657 got transaction to invalid handle, 1 [ 401.279197][ T5657] binder: 5656:5657 transaction failed 29201/-22, size 0-0 line 2917 [ 401.304465][ T5657] binder: 5656:5657 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 401.349272][ T5657] binder: 5657 RLIMIT_NICE not set [ 401.358420][ T5657] binder: 5656:5657 ioctl c0306201 20001440 returned -11 [ 401.466915][ T4115] binder: undelivered TRANSACTION_ERROR: 29201 [ 401.761655][ T5674] netlink: 136 bytes leftover after parsing attributes in process `syz.4.451'. [ 402.700495][ T5674] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 402.774637][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 403.537949][ T5706] hub 9-0:1.0: USB hub found [ 403.542655][ T5706] hub 9-0:1.0: 8 ports detected [ 404.015344][ T5710] loop4: detected capacity change from 0 to 2048 [ 404.996402][ T5710] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 405.116662][ T5723] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input14 [ 405.588306][ T4067] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 405.613018][ T5733] loop4: detected capacity change from 0 to 2048 [ 405.661602][ T5738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 405.690363][ T5733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.011299][ T5769] loop4: detected capacity change from 0 to 2048 [ 409.131816][ T5769] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 409.271965][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.471'. [ 410.224487][ T5805] netlink: 'syz.4.476': attribute type 2 has an invalid length. [ 410.226797][ T5805] netlink: 'syz.4.476': attribute type 8 has an invalid length. [ 410.228962][ T5805] netlink: 132 bytes leftover after parsing attributes in process `syz.4.476'. [ 411.705080][ T5812] ODEBUG: Out of memory. ODEBUG disabled [ 411.871500][ T5817] loop4: detected capacity change from 0 to 512 [ 411.921336][ T5818] loop5: detected capacity change from 0 to 1024 [ 411.964973][ T5817] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 412.137416][ T5817] EXT4-fs (loop4): invalid journal inode [ 412.139065][ T5817] EXT4-fs (loop4): can't get journal size [ 412.141685][ T5818] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 412.151385][ T5817] EXT4-fs (loop4): 1 truncate cleaned up [ 412.152922][ T5817] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 412.349809][ T5830] loop3: detected capacity change from 0 to 1024 [ 412.632101][ T5840] netlink: 'syz.4.486': attribute type 27 has an invalid length. [ 412.722581][ T5843] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 413.407964][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.488'. [ 413.605493][ T5854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.488'. [ 413.694752][ T5860] loop3: detected capacity change from 0 to 1024 [ 413.734516][ T5860] EXT4-fs (loop3): Ignoring removed oldalloc option [ 413.783536][ T5860] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000003,errors=remount-ro,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,noload,resuid=0x0000000000000000,oldalloc,delalloc,. Quota mode: none. [ 414.295810][ T5875] loop3: detected capacity change from 0 to 1024 [ 415.700578][ T5898] loop3: detected capacity change from 0 to 512 [ 416.147090][ T5898] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 416.568310][ T5898] EXT4-fs (loop3): invalid journal inode [ 416.569917][ T5898] EXT4-fs (loop3): can't get journal size [ 416.615136][ T5898] EXT4-fs (loop3): 1 truncate cleaned up [ 416.616736][ T5898] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 416.672200][ T5898] 9pnet: Insufficient options for proto=fd [ 416.807204][ T5915] loop6: detected capacity change from 0 to 512 [ 416.888617][ T5915] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 417.178486][ T5925] loop6: detected capacity change from 0 to 1024 [ 418.050032][ T5925] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,grpquota,nolazytime,norecovery,barrier=0x000000000000004c,lazytime,init_itable=0x0000000000000005,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 418.689149][ T4116] Bluetooth: hci0: command 0x0401 tx timeout [ 419.108977][ T5942] loop6: detected capacity change from 0 to 512 [ 419.244919][ T5942] EXT4-fs (loop6): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 419.450398][ T5958] bridge0: port 2(syz_tun) entered blocking state [ 419.452397][ T5958] bridge0: port 2(syz_tun) entered disabled state [ 419.455269][ T5958] device syz_tun entered promiscuous mode [ 419.457723][ T5958] bridge0: port 2(syz_tun) entered blocking state [ 419.459767][ T5958] bridge0: port 2(syz_tun) entered forwarding state [ 420.764445][ T4117] hid-generic 0008:0007:0005.0001: item fetching failed at offset 0/1 [ 420.853222][ T4117] hid-generic: probe of 0008:0007:0005.0001 failed with error -22 [ 421.848274][ T26] audit: type=1326 audit(422.520:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85def8a8 code=0x7ffc0000 [ 421.872195][ T26] audit: type=1326 audit(422.540:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff85def8a8 code=0x7ffc0000 [ 423.957354][ T26] audit: type=1326 audit(422.560:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85def8a8 code=0x7ffc0000 [ 424.514238][ T26] audit: type=1326 audit(422.560:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=50 compat=0 ip=0xffff85def8a8 code=0x7ffc0000 [ 424.548153][ T26] audit: type=1326 audit(422.560:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85def8a8 code=0x7ffc0000 [ 424.556420][ T5996] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.515'. [ 424.773302][ T6004] loop6: detected capacity change from 0 to 1024 [ 424.815867][ T5998] loop5: detected capacity change from 0 to 2048 [ 425.012381][ T6004] EXT4-fs (loop6): Ignoring removed oldalloc option [ 425.374067][ T6012] [ 425.374744][ T6012] ====================================================== [ 425.376698][ T6012] WARNING: possible circular locking dependency detected [ 425.378546][ T6012] 5.15.185-syzkaller #0 Not tainted [ 425.379964][ T6012] ------------------------------------------------------ [ 425.382012][ T6012] syz.0.518/6012 is trying to acquire lock: [ 425.383680][ T6012] ffff0000d9744be0 ((work_completion)(&hdev->discov_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 425.386765][ T6012] [ 425.386765][ T6012] but task is already holding lock: [ 425.388790][ T6012] ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 425.391494][ T6012] [ 425.391494][ T6012] which lock already depends on the new lock. [ 425.391494][ T6012] [ 425.394368][ T6012] [ 425.394368][ T6012] the existing dependency chain (in reverse order) is: [ 425.396845][ T6012] [ 425.396845][ T6012] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 425.399154][ T6012] __mutex_lock_common+0x194/0x1edc [ 425.400765][ T6012] mutex_lock_nested+0xac/0x11c [ 425.402245][ T6012] rfkill_register+0x44/0x77c [ 425.403676][ T6012] hci_register_dev+0x3d8/0x854 [ 425.405246][ T6012] vhci_create_device+0x2bc/0x564 [ 425.406775][ T6012] vhci_write+0x30c/0x3ac [ 425.408284][ T6012] vfs_write+0x7c8/0xa2c [ 425.409576][ T6012] ksys_write+0x120/0x210 [ 425.410871][ T6012] __arm64_sys_write+0x7c/0x90 [ 425.412308][ T6012] invoke_syscall+0x98/0x2b8 [ 425.413729][ T6012] el0_svc_common+0x138/0x258 [ 425.415141][ T6012] do_el0_svc+0x58/0x14c [ 425.416507][ T6012] el0_svc+0x78/0x1e0 [ 425.417764][ T6012] el0t_64_sync_handler+0xcc/0xe4 [ 425.419372][ T6012] el0t_64_sync+0x1a0/0x1a4 [ 425.420742][ T6012] [ 425.420742][ T6012] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 425.422928][ T6012] __mutex_lock_common+0x194/0x1edc [ 425.424542][ T6012] mutex_lock_nested+0xac/0x11c [ 425.426071][ T6012] vhci_send_frame+0x88/0x118 [ 425.427518][ T6012] hci_send_frame+0x194/0x2f0 [ 425.428942][ T6012] hci_tx_work+0x7e4/0x1394 [ 425.430390][ T6012] process_one_work+0x79c/0x1140 [ 425.431888][ T6012] worker_thread+0x8f4/0x101c [ 425.433396][ T6012] kthread+0x374/0x454 [ 425.434708][ T6012] ret_from_fork+0x10/0x20 [ 425.436016][ T6012] [ 425.436016][ T6012] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 425.438554][ T6012] __flush_work+0xf4/0x1bc [ 425.439907][ T6012] flush_work+0x24/0x38 [ 425.441242][ T6012] hci_dev_do_close+0x164/0x105c [ 425.442745][ T6012] hci_power_off+0x28/0x7c [ 425.444103][ T6012] process_one_work+0x79c/0x1140 [ 425.445625][ T6012] worker_thread+0x8f4/0x101c [ 425.447110][ T6012] kthread+0x374/0x454 [ 425.448397][ T6012] ret_from_fork+0x10/0x20 [ 425.449775][ T6012] [ 425.449775][ T6012] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 425.451947][ T6012] __mutex_lock_common+0x194/0x1edc [ 425.453536][ T6012] mutex_lock_nested+0xac/0x11c [ 425.455016][ T6012] discov_update+0x134/0x6d8 [ 425.456431][ T6012] process_one_work+0x79c/0x1140 [ 425.457914][ T6012] worker_thread+0x8f4/0x101c [ 425.459360][ T6012] kthread+0x374/0x454 [ 425.460656][ T6012] ret_from_fork+0x10/0x20 [ 425.462011][ T6012] [ 425.462011][ T6012] -> #0 ((work_completion)(&hdev->discov_update)){+.+.}-{0:0}: [ 425.464718][ T6012] __lock_acquire+0x2928/0x651c [ 425.466213][ T6012] lock_acquire+0x1f4/0x620 [ 425.467595][ T6012] __flush_work+0xf4/0x1bc [ 425.468929][ T6012] __cancel_work_timer+0x2ec/0x448 [ 425.470493][ T6012] cancel_work_sync+0x24/0x38 [ 425.471904][ T6012] hci_request_cancel_all+0xb4/0x2d0 [ 425.473496][ T6012] hci_dev_do_close+0x54/0x105c [ 425.474931][ T6012] hci_rfkill_set_block+0xdc/0x1d0 [ 425.476470][ T6012] rfkill_set_block+0x18c/0x374 [ 425.478025][ T6012] rfkill_fop_write+0x4a4/0x5cc [ 425.479492][ T6012] do_iter_write+0x348/0x670 [ 425.480908][ T6012] do_writev+0x1e0/0x380 [ 425.482224][ T6012] __arm64_sys_writev+0x80/0x94 [ 425.483706][ T6012] invoke_syscall+0x98/0x2b8 [ 425.485135][ T6012] el0_svc_common+0x138/0x258 [ 425.486745][ T6012] do_el0_svc+0x58/0x14c [ 425.488134][ T6012] el0_svc+0x78/0x1e0 [ 425.489410][ T6012] el0t_64_sync_handler+0xcc/0xe4 [ 425.490928][ T6012] el0t_64_sync+0x1a0/0x1a4 [ 425.492333][ T6012] [ 425.492333][ T6012] other info that might help us debug this: [ 425.492333][ T6012] [ 425.495190][ T6012] Chain exists of: [ 425.495190][ T6012] (work_completion)(&hdev->discov_update) --> &data->open_mutex --> rfkill_global_mutex [ 425.495190][ T6012] [ 425.499506][ T6012] Possible unsafe locking scenario: [ 425.499506][ T6012] [ 425.501564][ T6012] CPU0 CPU1 [ 425.502998][ T6012] ---- ---- [ 425.504460][ T6012] lock(rfkill_global_mutex); [ 425.505748][ T6012] lock(&data->open_mutex); [ 425.507713][ T6012] lock(rfkill_global_mutex); [ 425.509864][ T6012] lock((work_completion)(&hdev->discov_update)); [ 425.511698][ T6012] [ 425.511698][ T6012] *** DEADLOCK *** [ 425.511698][ T6012] [ 425.513978][ T6012] 1 lock held by syz.0.518/6012: [ 425.515365][ T6012] #0: ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 425.518154][ T6012] [ 425.518154][ T6012] stack backtrace: [ 425.519808][ T6012] CPU: 0 PID: 6012 Comm: syz.0.518 Not tainted 5.15.185-syzkaller #0 [ 425.522059][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.524833][ T6012] Call trace: [ 425.525753][ T6012] dump_backtrace+0x0/0x43c [ 425.527000][ T6012] show_stack+0x2c/0x3c [ 425.528139][ T6012] __dump_stack+0x30/0x40 [ 425.529355][ T6012] dump_stack_lvl+0xf8/0x160 [ 425.530585][ T6012] dump_stack+0x1c/0x5c [ 425.531750][ T6012] print_circular_bug+0x148/0x1b0 [ 425.533173][ T6012] check_noncircular+0x240/0x2d4 [ 425.534550][ T6012] __lock_acquire+0x2928/0x651c [ 425.535838][ T6012] lock_acquire+0x1f4/0x620 [ 425.537034][ T6012] __flush_work+0xf4/0x1bc [ 425.538295][ T6012] __cancel_work_timer+0x2ec/0x448 [ 425.539742][ T6012] cancel_work_sync+0x24/0x38 [ 425.541014][ T6012] hci_request_cancel_all+0xb4/0x2d0 [ 425.542480][ T6012] hci_dev_do_close+0x54/0x105c [ 425.543805][ T6012] hci_rfkill_set_block+0xdc/0x1d0 [ 425.545214][ T6012] rfkill_set_block+0x18c/0x374 [ 425.546542][ T6012] rfkill_fop_write+0x4a4/0x5cc [ 425.547916][ T6012] do_iter_write+0x348/0x670 [ 425.549234][ T6012] do_writev+0x1e0/0x380 [ 425.550275][ T6012] __arm64_sys_writev+0x80/0x94 [ 425.551662][ T6012] invoke_syscall+0x98/0x2b8 [ 425.552933][ T6012] el0_svc_common+0x138/0x258 [ 425.554233][ T6012] do_el0_svc+0x58/0x14c [ 425.555416][ T6012] el0_svc+0x78/0x1e0 [ 425.556487][ T6012] el0t_64_sync_handler+0xcc/0xe4 [ 425.557888][ T6012] el0t_64_sync+0x1a0/0x1a4 [ 425.561472][ T5998] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 425.565666][ T6004] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000003,errors=remount-ro,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,noload,resuid=0x0000000000000000,oldalloc,delalloc,. Quota mode: none. [ 425.714950][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.516'.