last executing test programs: 1m14.558768364s ago: executing program 1 (id=161): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000d40)='./file1\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x1, 0x7b9, &(0x7f0000000d80)="$eJzs3U1sHGf5APBnXDtxXCmq+v+rRFGaTpIiJSK4u+vWxeqhbNdjZ1p71+yuUXJAbdU4VRT3Q60qaA6UXFpAIMSJY+m14sINxAGJA3BCogcuHJAq9YSKBBICISSjmd2NP7K28+WkH7/fKvvOzrzzvs/MTubZWe/MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQSWO2UqkmsZA3l8+m22vMtluLO0wftPfrTcUO/UYkxb8YH49DvVGH/n998gPF0/E40nt1JMaLYjwu3/vAfU/83+jIYP4dArpZx66zXhLxnSKoS8+vrq68tgeB3EHf/9UNz/LvteJ5PmvmnVa+WJ/P0rzTSmempyuPnJnrpHP5QtY51+lmi2mjndW7rXZ6snEqrc7MTKXZ5LnWcnN+tr6QDUY+/uVapTKdPj25lNXbnVbzkacnO40z+cJC3pwv69Qq34yizuPFhvhM3k27WX0xTS9cXF2Z2i3UolJ105j9mzacIw/f99EbH/7j4kqxQW7XSNLfMGvVaq1WnX5s5rHHK5XRWqW2eURli7haI0Yiihp7stHyKXL7dt5wi0b6+T8WIo9mLMfZSCONkfJ5/TEW4zEb7WjFYvH6T2Nbpl+T/7/4yN/+sFO/G/P/IMsfWp98OMr8f7T36ug2+b/YKW+NY68e91yNbePY1+PNuByX4vlYjdVYidfuWDw3+Ri5ve3NRxbNyGN/ROSxGPVyTBp5dKIVaczEdExHJZ6NMzEXnUhjLvJYiCw6cS460Y2s3KIa0Y4s6tGNVrQjjZPRiFORRjVmYiamIo0sJuNctGI5mjEfs1EvW7kQF8v1PrUlrge+/dwvX/zjR+8Ww1crVXdYkKT4MFdU+vsOlfrJ/KG4ifw/qCH/f9aMD/YL1+m27bvhVq2V+X/0bocBAAAA7KGk/PY9iYixeLAcmsu/dreDAgAAAG6r8nfNR4pirBh6MJK5fCGrDKn5wR2PDQAAALg9kvIcuyQiJuKh3tDgdKlhXwIAAAAAn0Ll3/+PFsVExFvlCMf/AAAA8Bnz3e2usf/hvv41ejtL+5PBxW+Xzj6cvFQvhuov9cf1i69fbbE7dzg52G+kLKZHL9+bRMRoIzuSDK5++d/9vfLj8vnw+gUIt7vWf9JujyVXtg8gdg6gfBU/iGO9OsfO98rzgym9Xibm8oVsstFaeKKa9L8c6b7x8sVvRRS9f6+5eDCJCxdXVyZfeGX1fBnLlaKVKy/1Lw+f3EAsa/01EA8OX+Kx8kSMfr8TvX4rG5d/pDf7yM59Jhv7fDuO9+ocn+iVE5uXf7zoszr5RDXq9YMj3exs9421DUvfj6J6i0v+dpzo1Tlx8kSvGBJFbVMUL18bRW1jFNe3Lq47inePvXX2n79tJdnUblFM3WIUAHfLhfKqP+tZ6ECZhf6z1lPk/y1598Ag4d7IXu7C+qeMA/3aG3LdaNxQdh8kmyF79JO9Oid7nydGDw/JK5Uhe/RXL776u/4e/dH3f/LTbxz9/c9vPru9H6d6dfpF3P+bbXJsscw/3JJV3yvmeG+bfouXtSTGevdOWJ+88uLKy7Xa1HTl0UrlsVqMlR8V+oXcA8AQu95j5zruwvPo8KPqGGS8+6/+pGAyXohXYjXOx+nybIOIeGh4qxMbfoZwepej1okNd3g5vfOx5aH10xtqW+vuP5HEvftiSLubUuUXflwW/9qztwQA9tzxXfLwDvl/bJD/T+9y3L05l5/q3Th3cHQc2+fyYb6y1ysEAD4HsvbHyUT3naTdzpeerc7MVOvdM1nabjWeSdv57HyW5s1u1m4MvmludVuNwdHwbNZJO8tLS612N51rtdOlVic/W975Pe3f+r2TLdab3bzRWVrI6p0sbbSa3Xqjm87mnUa6tPzUQt45k7XLmTtLWSOfyxv1bt5qpp3WcruRTaZpJ8s2VMxns2Y3n8uLwWa61M4X6+0rEbGwvJils1mn0c6Xuq1eg4O+8uZcq71YNjt57eL/9U6uawD4pHj9zcuXnl9dXXlt88BasnXM8IE/v3n50uBP9NtWjli7y0sJAGy0MUsDAAAAAAAAAAAAAACfTNeerleM3e20v00DY3EDlbcM7N/+rMHP5cCXftZ7W25Hg7fSzoFN7+m+/sayJ4t8T0Ts3Vp97sknL21X56m3Dp35y/7r6X34/5Rhp7q+czBi3y9+1Bvz1Tu12XzQX4cxekOzryU71LlruyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Nb/AgAA///rrkcE") open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) 1m14.447235862s ago: executing program 1 (id=165): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r2 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 1m13.864718746s ago: executing program 1 (id=176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1m13.727739166s ago: executing program 1 (id=177): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) syz_clone3(&(0x7f0000000580)={0x20090000, &(0x7f00000000c0), &(0x7f0000000340), &(0x7f0000000380), {0x21}, &(0x7f0000000400)=""/115, 0x73, &(0x7f0000000480)=""/167, 0x0}, 0x58) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) 1m12.666943744s ago: executing program 1 (id=185): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) write$9p(r0, &(0x7f0000001400)=';', 0x1) sendfile(r0, r2, 0x0, 0x7ffff000) 1m12.507490646s ago: executing program 1 (id=189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 57.174413693s ago: executing program 32 (id=189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 22.440735736s ago: executing program 3 (id=527): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, 0x0, 0x0) bind$packet(r0, &(0x7f0000000280)={0x11, 0xf8, 0x0, 0x1, 0x45, 0x6, @remote}, 0x14) 22.25730153s ago: executing program 3 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_dev$rtc(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b48, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x563, &(0x7f00000009c0)="$eJzs3U1rVFcfAPD/nbz4Ep/HCCJtFyXgohbrxCR9sdCFXbdSod3bIbkGycSRzERMKlQXddNNkUIpFUo/QPddSr9AP4XQClIktIsuOuVO7uhoZpJJHJPR+f3g6jn3Jeeeufd/5pw5d5gABtZE9k8h4tWI+CaJONyybTjyjRPr+609vD6bLUnU65/+mUSSr2vun+T/j+WZVyLi168iThY2lltdWV0olcvpUp6frC1emayurJ66tFiaT+fTy9MzM2femZl+/713e1bXN8///f0nd0fj6+Nr3/18/8jtJM7GoXxbaz2ewY3WzERM5K/JSJx9asepHhTWT5K9PgF2ZCiP85HI2oDDMZRHPfDy+zIi6sCASsQ/DKhmP6A5tu/ROPiF8eDD9QHQxvon65+NxP7G2OjgWvLEyCgb7473oPysjF/+uHM7W6J3n0MAbOnGzYg4PTzcuf3budNd7PN0Gdo/2D13s/7PW+36P4VH/Z9o0/8ZaxO7O7F1/Bfu96CYjrL+3wdt+7+PJq3Gh/Lc/xp9vpHk4qVymrVt/4+IEzGyL8tvNp9zZu1evdO21v5ftmTlN/uC+XncH9735DFzpVrpWerc6sHNiNe26P8mba5/9nqc77KMY+md1ztt27r+z1f9p4g32l7/xzNayebzk5ON+2GyeVds9NetY791Kn+v659d/4Ob1388aZ2vrW6/jB/3/5N22jaR5JOm27z/R5PPGunRfN21Uq22NBUxmny8cf3042Ob+eb+Wf1PHN+8/Wt3/x+IiM+7rP+to7c67toP139uW9d/+4l7H33xQ6fyu2v/3m6kTuRrumn/uj3BZ3ntAAAAAAAAoN8UIuJQJIXio3ShUCyuP99xNA4WypVq7eTFyvLluWh8V3Y8RgrNme6xluchpvLnYZv56afyMxFxJCK+HTrQyBdnK+W5va48AAAAAAAAAAAAAAAAAAAA9ImxDt//z/w+tNdnBzx3fvIbBteW8d+LX3oC+pL3fxhc4h8Gl/iHwSX+YXCJfxhcHeP/3/rungiw67z/w+AS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5b62sPrs1l+7urK8kLl6qm5tLpQXFyeLc5Wlq4U5yuV+XJanK0sbvX3ypXKlanpWL42WUurtcnqyuqFxcry5dqFS4ul+fRCOrIrtQIAAAAAAAAAAAAAAAAAAIAXS3VldaFULqdL20okEbH9oyRexsRwf5zGACVORsQODt+Xh3yXR+1xwwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4LAAD//2EXMHQ=") r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0x81000f4) 7.571507488s ago: executing program 3 (id=622): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x22048c70}, 0x20000800) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfebf) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r2], 0x3c}}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 7.423680259s ago: executing program 0 (id=626): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000340)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}, {@barrier}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 7.27488172s ago: executing program 3 (id=628): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) syz_clone3(0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) 6.230561028s ago: executing program 3 (id=631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) 6.107824887s ago: executing program 3 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_dev$rtc(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b48, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x563, &(0x7f00000009c0)="$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") r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0x81000f4) 3.112255419s ago: executing program 5 (id=653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 3.111241529s ago: executing program 4 (id=654): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) syz_clone3(0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) 2.851906168s ago: executing program 5 (id=655): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014006500b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) setrlimit(0x3, 0x0) 1.970821713s ago: executing program 5 (id=657): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006c000100"/20, @ANYRES32=r3, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) 1.912935318s ago: executing program 4 (id=658): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1200000, &(0x7f0000019440)={[{@noblock_validity}, {@nobh}, {@sysvgroups}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x81}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x80, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.815928085s ago: executing program 2 (id=659): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.815653145s ago: executing program 0 (id=660): syz_emit_ethernet(0x2a, &(0x7f0000000580)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x18}}}}}, 0x0) close(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib6_table_lookup\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='workqueue_activate_work\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/52, 0x34}], 0x1, 0x96, 0xc) pwritev2(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="85", 0x1}], 0x1, 0x1200, 0x0, 0x3) r5 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) 1.74477983s ago: executing program 5 (id=661): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x4, r1, r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_virt_wifi\x00'}) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 1.714755702s ago: executing program 4 (id=662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x5}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40080) 1.651856387s ago: executing program 0 (id=663): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x22048c70}, 0x20000800) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfebf) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r2], 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0), 0x0, 0x0) 1.651726657s ago: executing program 2 (id=664): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[]) 1.577297483s ago: executing program 5 (id=665): mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0x9) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) unshare(0x400) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000a00)={&(0x7f0000000700)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x80}, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000500)}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x7f, 0x6, 0x743c, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x7, 0x40, 0x5fdf7930, 0x8}}) fstat(r0, &(0x7f00000001c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x180}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@updsa={0xf0, 0x1a, 0x800, 0x70bd2b, 0x25dfdbff, {{@in=@private=0xa010102, @in=@remote, 0x4e20, 0x0, 0x4e22, 0x5, 0x2, 0x80, 0x0, 0x3c, r6, r4}, {@in6=@local, 0x4d2, 0x3c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x4, 0xe, 0x8, 0x0, 0x8, 0x2, 0x1, 0x101}, {0x100000000, 0x2, 0x9ea4, 0xfff}, {0x2, 0xfff, 0x5}, 0x70bd29, 0x3503, 0xa, 0x0, 0x10, 0x28}}, 0xf0}, 0x1, 0x0, 0x0, 0x40800}, 0xc004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)={[{@nolazytime}]}, 0xfe, 0x507, &(0x7f0000000f40)="$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") 1.562898834s ago: executing program 2 (id=666): quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1.480586549s ago: executing program 4 (id=667): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') preadv(r2, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x0, 0x0) 1.371722808s ago: executing program 0 (id=668): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) syz_clone3(0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) 1.369801948s ago: executing program 4 (id=669): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 1.272989975s ago: executing program 4 (id=670): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000340)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}, {@barrier}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$eJzs281vG0UbAPBn7SR9+/FSU5WPpgUCBRHxkTRpKT1wAYHEASQkOJRjSNIq1G1QEyRaRRAQKkdUiTviiMRfwAkuCDghcYU7qlShXFrgYrTZ3cR27LQOTlzw7ydtMrM7zszj3bFnZ7IB9K2R9EcSsS8ifomI/Vm2scBI9uvmytL0HytL00nUaq//nqyWu7GyNF0ULV63t8gMRJQ+TuJwi3oXLl0+N1Wtzl7M8+OL598ZX7h0+em581NnZ8/OXpg8derE8YlnT04+05U407huDL8/f+TQy29efXX69NW3fvgqKeJviqNLRjY7+Fit1uXqeuv/delkoIcNoSPlrJvG4Gr/3x/lWD95++Olj3raOGBb1Wq12r3tDy/XgP+wJHrdAqA3ii/69P632HZo6HFHuP58dgOUxn0z37IjA1HKyww23d9200hEnF7+8/N0i+2ZhwAAaPBNOv55Kh//NSz8lKJ+XuiufA2lEhF3R8SBiDgZEQcj4p6I1bL3RcT9HdbfvEiycfxTutbhn+xIOv57Ll/bahz/FaO/qJQj/iqGy5UYTM7MVWeP5e/JaAzuSvMTm9Tx7Ys/f9ruWP34L93S+ouxYN6OawO7Gl8zM7U49U9irnf9w4jhgVbxJ2srAellcSgihrdYx9wTXx5pd+zW8Tcaqs90YZ2p9kXE49n5X46m+AvJ5uuT4/+L6uyx8eKq2OjHn6681q7+TuPvtvT872l5/a/FX0nq12sXOq/jyq+ftL2n2er1P5S80bDvvanFxYsTEUPJK1mj6/dPNpWbXC+fxj96tHX/PxDr78ThiEgv4gci4sGIeChv+8MR8UhEHN0k/u9fePTtxj1JB/FvrzT+mY7O/3piKJr3tE6Uz333dUOllegg/vT8n1hNjeZ7bufz73batbWrGQAAAP59ShGxL5LS2Fq6VBoby/6H/2DsKVXnFxafPDP/7oWZ7BmBSgyWipmubD44mw+dyG/ri/xkU/54Pm/8WXn3an5ser460+vgoc/tbdP/U7+Ve906YNt5Xgv6l/4P/Uv/h/6l/0P/atH/d/eiHcDOa/X9/0EP2gHsvKb+b9kP+oj7f+hf+j/0L/0f+tLC7rj1Q/ISEhsSUbojmiGxTYlefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD///1B6is=") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 1.265170226s ago: executing program 2 (id=671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x507}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}]}]}, 0x50}}, 0x0) 319.899466ms ago: executing program 2 (id=672): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1200000, &(0x7f0000019440)={[{@noblock_validity}, {@nobh}, {@sysvgroups}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x81}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x80, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 294.982868ms ago: executing program 0 (id=673): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xa, 0x1}]}) 137.228089ms ago: executing program 0 (id=674): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000203e622500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101c02, 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000004010000000000000002003e000000000003000000000000004000000000000000980100000000000000000000000038000100000002000000030000000200000002000000000000000000000000000000070000000000000004"], 0x1fc) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000906010200000000007cbf00000000000500010004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10000047}, 0x44044) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x7}, 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000000240)={0x0, 0x2, 0x80000}) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r4, 0x5, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x1, '\x00', 0x0, r1, 0x4, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 61.088195ms ago: executing program 2 (id=675): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(r1) 0s ago: executing program 5 (id=676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xa8}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0x6}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. syzkaller login: [ 35.758221][ T4285] cgroup: Unknown subsys name 'net' [ 35.972788][ T4285] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.303478][ T4285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.471586][ T4300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.479841][ T4301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.482878][ T4305] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.485813][ T4305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.488705][ T4305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.490708][ T4305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.492512][ T4305] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.496119][ T4310] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.499805][ T4311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.501873][ T4311] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.501994][ T4307] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.504221][ T4312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.506657][ T4307] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 37.510218][ T4307] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.512699][ T4307] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.515490][ T4307] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.515674][ T4311] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.518088][ T4307] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.520939][ T4312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.522289][ T4307] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.524011][ T4312] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.526869][ T4307] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 37.528689][ T4312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.532107][ T4312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.535241][ T4311] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.537768][ T4312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.552564][ T4312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 37.572899][ T4312] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 37.575163][ T4312] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 37.581034][ T4312] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.804984][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 37.846987][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 37.878793][ T4308] chnl_net:caif_netlink_parms(): no params data found [ 37.915384][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.917736][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.920541][ T4296] device bridge_slave_0 entered promiscuous mode [ 37.940921][ T4299] chnl_net:caif_netlink_parms(): no params data found [ 37.946985][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.948880][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.951497][ T4296] device bridge_slave_1 entered promiscuous mode [ 37.999990][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.024235][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.032598][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.034380][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.036905][ T4295] device bridge_slave_0 entered promiscuous mode [ 38.053661][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.055570][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.058252][ T4295] device bridge_slave_1 entered promiscuous mode [ 38.060681][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.062584][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.065342][ T4308] device bridge_slave_0 entered promiscuous mode [ 38.069454][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.071335][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.073645][ T4308] device bridge_slave_1 entered promiscuous mode [ 38.100734][ T4304] chnl_net:caif_netlink_parms(): no params data found [ 38.104279][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.106143][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.108782][ T4299] device bridge_slave_0 entered promiscuous mode [ 38.113315][ T4296] team0: Port device team_slave_0 added [ 38.118060][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.122183][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.140314][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.142248][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.145191][ T4299] device bridge_slave_1 entered promiscuous mode [ 38.148519][ T4296] team0: Port device team_slave_1 added [ 38.168228][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.188344][ T4295] team0: Port device team_slave_0 added [ 38.196089][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.210324][ T4299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.213631][ T4295] team0: Port device team_slave_1 added [ 38.228492][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.230344][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.242784][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.248293][ T4299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.265127][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.267023][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.277279][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.290303][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.292359][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.294799][ T4304] device bridge_slave_0 entered promiscuous mode [ 38.298382][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.300165][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.302695][ T4304] device bridge_slave_1 entered promiscuous mode [ 38.306852][ T4308] team0: Port device team_slave_0 added [ 38.316694][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.324069][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.332185][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.346938][ T4308] team0: Port device team_slave_1 added [ 38.356912][ T4299] team0: Port device team_slave_0 added [ 38.365545][ T4299] team0: Port device team_slave_1 added [ 38.367971][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.369796][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.376676][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.385301][ T4304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.413486][ T4304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.416306][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.423520][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.430959][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.469352][ T4296] device hsr_slave_0 entered promiscuous mode [ 38.507690][ T4296] device hsr_slave_1 entered promiscuous mode [ 38.553507][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.555396][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.567329][ T4299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.575848][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.578255][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.585375][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.600148][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.601831][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.608813][ T4299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.689144][ T4295] device hsr_slave_0 entered promiscuous mode [ 38.737838][ T4295] device hsr_slave_1 entered promiscuous mode [ 38.777462][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.779630][ T4295] Cannot create hsr debugfs directory [ 38.786023][ T4304] team0: Port device team_slave_0 added [ 38.815229][ T4304] team0: Port device team_slave_1 added [ 38.879116][ T4308] device hsr_slave_0 entered promiscuous mode [ 38.917565][ T4308] device hsr_slave_1 entered promiscuous mode [ 38.957270][ T4308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.959302][ T4308] Cannot create hsr debugfs directory [ 39.059313][ T4299] device hsr_slave_0 entered promiscuous mode [ 39.097716][ T4299] device hsr_slave_1 entered promiscuous mode [ 39.147298][ T4299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.149270][ T4299] Cannot create hsr debugfs directory [ 39.154427][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.156246][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.163311][ T4304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.178483][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.180230][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.186825][ T4304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.328972][ T4304] device hsr_slave_0 entered promiscuous mode [ 39.368096][ T4304] device hsr_slave_1 entered promiscuous mode [ 39.407305][ T4304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.409281][ T4304] Cannot create hsr debugfs directory [ 39.541570][ T4296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.559227][ T4296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.608058][ T4312] Bluetooth: hci0: command 0x0409 tx timeout [ 39.608068][ T4305] Bluetooth: hci4: command 0x0409 tx timeout [ 39.608246][ T4305] Bluetooth: hci1: command 0x0409 tx timeout [ 39.610036][ T4312] Bluetooth: hci3: command 0x0409 tx timeout [ 39.611571][ T4305] Bluetooth: hci2: command 0x0409 tx timeout [ 39.631142][ T4296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.692643][ T4296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.750725][ T4295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.800654][ T4295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.832505][ T4295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.870320][ T4295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.979835][ T4308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.009100][ T4308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.049614][ T4308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.102578][ T4308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.156985][ T4299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.184905][ T4299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.228798][ T4299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.272527][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.274622][ T4299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.320711][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.344805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.349594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.359940][ T4304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.422670][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.433429][ T4304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.469656][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.472105][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.474432][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.476988][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.480193][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.482017][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.484953][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.500336][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.505917][ T4304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.559803][ T4304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.600625][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.603299][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.606133][ T1698] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.608015][ T1698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.610753][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.637178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.640719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.643190][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.644871][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.647033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.650154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.652707][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.654620][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.656893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.677718][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.682459][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.689436][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.702853][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.705780][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.714402][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.718012][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.726704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.730245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.740593][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.743489][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.746355][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.750374][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.752936][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.755426][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.758037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.772623][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.774922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.780724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.786163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.790693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.803672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.806487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.812521][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.823249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.825804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.833281][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.835163][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.838992][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.841634][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.844251][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.865544][ T4299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.873374][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.880394][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.883682][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.886344][ T1698] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.888343][ T1698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.912372][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.918116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.939573][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.942938][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.950938][ T4299] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.961164][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.963737][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.966116][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.970204][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.972771][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.975374][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.981095][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.983652][ T1698] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.985587][ T1698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.999313][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.001945][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.021705][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.024215][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.029472][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.032057][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.034646][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.036988][ T1698] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.038685][ T1698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.053732][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.066946][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.070261][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.073110][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.076754][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.105045][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.109901][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.111951][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.113917][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.116944][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.125256][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.131163][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.144329][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.147013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.162492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.165636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.170197][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.176035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.184943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.188039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.190124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.196083][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.215197][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.218619][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.225733][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.227822][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.230836][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.239512][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.242612][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.245247][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.246965][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.252979][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.275144][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.292722][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.296826][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.300944][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.303905][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.307075][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.311117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.314015][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.315998][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.332727][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.335304][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.343630][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.355867][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.359460][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.362615][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.365210][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.378397][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.380971][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.383574][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.386174][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.394649][ T4295] device veth0_vlan entered promiscuous mode [ 41.405860][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.416019][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.419279][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.437693][ T4295] device veth1_vlan entered promiscuous mode [ 41.441574][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.444291][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.446383][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.470270][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.476211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.479633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.482176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.484728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.502889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.505435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.508707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.514263][ T4296] device veth0_vlan entered promiscuous mode [ 41.523274][ T4296] device veth1_vlan entered promiscuous mode [ 41.525495][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.532053][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.534548][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.543353][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.545782][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.553518][ T4308] device veth0_vlan entered promiscuous mode [ 41.583712][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.586402][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.590106][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.592710][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.595353][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.603345][ T4295] device veth0_macvtap entered promiscuous mode [ 41.606668][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.611767][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.613782][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.631018][ T4308] device veth1_vlan entered promiscuous mode [ 41.634628][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.639948][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.642521][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.645181][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.663285][ T4295] device veth1_macvtap entered promiscuous mode [ 41.687296][ T4301] Bluetooth: hci2: command 0x041b tx timeout [ 41.688835][ T4301] Bluetooth: hci3: command 0x041b tx timeout [ 41.690550][ T4301] Bluetooth: hci1: command 0x041b tx timeout [ 41.692111][ T4301] Bluetooth: hci0: command 0x041b tx timeout [ 41.693645][ T4301] Bluetooth: hci4: command 0x041b tx timeout [ 41.698390][ T4296] device veth0_macvtap entered promiscuous mode [ 41.710593][ T4296] device veth1_macvtap entered promiscuous mode [ 41.721626][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.724284][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.726809][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.735753][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.739169][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.741872][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.744544][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.747094][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.756277][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.760087][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.764020][ T4308] device veth0_macvtap entered promiscuous mode [ 41.769431][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.773959][ T4308] device veth1_macvtap entered promiscuous mode [ 41.783553][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.786389][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.791720][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.804186][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.806370][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.809631][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.812137][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.815303][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.825842][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.829403][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.832042][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.834670][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.838182][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.840967][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.843432][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.846272][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.851854][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.856680][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.860161][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.863707][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.868554][ T4299] device veth0_vlan entered promiscuous mode [ 41.874542][ T4299] device veth1_vlan entered promiscuous mode [ 41.877822][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.880218][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.882861][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.885649][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.889030][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.896161][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.900757][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.903305][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.906054][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.910355][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.916547][ T4296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.925632][ T4296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.929045][ T4296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.931220][ T4296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.935052][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.944314][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.958485][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.961463][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.965668][ T4308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.968966][ T4308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.971294][ T4308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.973663][ T4308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.980815][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.983018][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.985249][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.988020][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.011177][ T4299] device veth0_macvtap entered promiscuous mode [ 42.036732][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.040350][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.043185][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.047116][ T4299] device veth1_macvtap entered promiscuous mode [ 42.129241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.131844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.134668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.139198][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.141976][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.144503][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.148622][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.151086][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.153856][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.159391][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.171623][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.174168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.176898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.179038][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.184262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.187035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.190203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.192704][ T4304] device veth0_vlan entered promiscuous mode [ 42.215285][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.221868][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.224460][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.227005][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.231212][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.234009][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.238997][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.246302][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.249365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.266459][ T4299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.269402][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.271375][ T4299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.271676][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.273866][ T4299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.278696][ T4299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.296143][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.314428][ T4304] device veth1_vlan entered promiscuous mode [ 42.319817][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.322110][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.325634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.329836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.403942][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.406367][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.415968][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.420983][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.423233][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.429176][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.431674][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.470385][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.478291][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.512386][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.513059][ T4304] device veth0_macvtap entered promiscuous mode [ 42.514672][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.529750][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.539010][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.564294][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.566482][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.584319][ T4378] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2'. [ 42.600778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.604267][ T4304] device veth1_macvtap entered promiscuous mode [ 42.784722][ T4386] loop3: detected capacity change from 0 to 512 [ 42.792276][ T4386] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.832106][ T4386] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 42.834959][ T4386] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 42.838627][ T4386] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.7: Failed to acquire dquot type 0 [ 42.844799][ T4386] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 42.851294][ T4386] EXT4-fs (loop3): 1 truncate cleaned up [ 42.852977][ T4386] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.898921][ T4386] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 42.902465][ T4386] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 42.905070][ T4386] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.7: Failed to acquire dquot type 0 [ 42.953831][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 42.992998][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.995774][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.650245][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.685638][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.767403][ T4305] Bluetooth: hci4: command 0x040f tx timeout [ 43.769031][ T4301] Bluetooth: hci0: command 0x040f tx timeout [ 43.770384][ T4301] Bluetooth: hci3: command 0x040f tx timeout [ 43.770382][ T4305] Bluetooth: hci1: command 0x040f tx timeout [ 43.770421][ T4305] Bluetooth: hci2: command 0x040f tx timeout [ 44.173365][ T4378] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.175832][ T4378] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.178404][ T4378] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.180757][ T4378] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.484231][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.489738][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.492218][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.494911][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.495858][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.497666][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.502493][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.505859][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.507446][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.518583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.521477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.524075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.526639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.553245][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.556160][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.567651][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.570585][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.581166][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.583674][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.613812][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.646924][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.650053][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.655077][ T4304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.657882][ T4304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.698926][ T4304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.701179][ T4304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.732092][ T4390] af_packet: tpacket_rcv: packet too big, clamped from 110 to 4294967286. macoff=82 [ 44.753450][ T4411] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9'. [ 44.758113][ T4406] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9'. [ 44.768267][ T4409] loop3: detected capacity change from 0 to 512 [ 44.875126][ T4409] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.883838][ T4416] mmap: GPL (4416) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.906139][ T4418] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 44.921920][ T4416] loop2: detected capacity change from 0 to 512 [ 44.965039][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.965079][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.965996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.004559][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.006804][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.011485][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.200758][ T4422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 45.243454][ T4422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 45.365190][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 45.873985][ T4445] device geneve2 entered promiscuous mode [ 46.190456][ T4301] Bluetooth: hci0: command 0x0419 tx timeout [ 46.190744][ T4312] Bluetooth: hci1: command 0x0419 tx timeout [ 46.194259][ T4305] Bluetooth: hci3: command 0x0419 tx timeout [ 46.196402][ T4305] Bluetooth: hci4: command 0x0419 tx timeout [ 46.198758][ T4312] Bluetooth: hci2: command 0x0419 tx timeout [ 46.845667][ T4458] loop3: detected capacity change from 0 to 512 [ 46.853287][ T4458] EXT4-fs: inline encryption not supported [ 46.882338][ T4458] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.901950][ T4458] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.26: corrupted inode contents [ 46.920859][ T4458] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.26: mark_inode_dirty error [ 46.929433][ T4458] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.26: corrupted inode contents [ 46.949502][ T4458] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.26: corrupted inode contents [ 46.963809][ T4458] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.26: mark_inode_dirty error [ 46.974587][ T4458] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.26: corrupted inode contents [ 46.983126][ T4458] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.26: mark_inode_dirty error [ 46.986644][ T4458] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.26: corrupted inode contents [ 46.991033][ T4458] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.26: mark_inode_dirty error [ 47.032615][ T4470] loop4: detected capacity change from 0 to 512 [ 47.040602][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 47.080214][ T4470] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.473361][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 47.664677][ T4492] bridge0: port 3(vlan2) entered blocking state [ 47.666987][ T4492] bridge0: port 3(vlan2) entered disabled state [ 48.263694][ T4518] loop1: detected capacity change from 0 to 512 [ 48.290977][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 48.295856][ T4518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.313758][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 48.356471][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 48.446231][ T4527] loop1: detected capacity change from 0 to 256 [ 48.512374][ T4527] FAT-fs (loop1): Directory bread(block 64) failed [ 48.521177][ T4527] FAT-fs (loop1): Directory bread(block 65) failed [ 48.522997][ T4527] FAT-fs (loop1): Directory bread(block 66) failed [ 48.555978][ T4527] FAT-fs (loop1): Directory bread(block 67) failed [ 48.561302][ T4527] FAT-fs (loop1): Directory bread(block 68) failed [ 48.562997][ T4527] FAT-fs (loop1): Directory bread(block 69) failed [ 48.564833][ T4527] FAT-fs (loop1): Directory bread(block 70) failed [ 48.574137][ T4527] FAT-fs (loop1): Directory bread(block 71) failed [ 48.587894][ T4527] FAT-fs (loop1): Directory bread(block 72) failed [ 48.589627][ T4527] FAT-fs (loop1): Directory bread(block 73) failed [ 49.091683][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 49.101758][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 49.355671][ T4564] loop2: detected capacity change from 0 to 512 [ 49.376225][ T4564] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.426957][ T4564] EXT4-fs (loop2): 1 orphan inode deleted [ 49.435080][ T4564] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.441953][ T39] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 49.449833][ T39] EXT4-fs error (device loop2): ext4_release_dquot:6818: comm kworker/u4:2: Failed to release dquot type 1 [ 49.531193][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 49.590536][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 49.595818][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 50.126357][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 50.135092][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 50.700424][ T4637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'. [ 50.706473][ T4637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'. [ 50.732823][ T4636] loop1: detected capacity change from 0 to 512 [ 50.773505][ T4636] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 50.927960][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 51.327375][ T4667] syz.3.117 uses obsolete (PF_INET,SOCK_PACKET) [ 51.513339][ T4673] loop2: detected capacity change from 0 to 512 [ 51.563193][ T4673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.769407][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 52.054119][ T4693] device gretap0 entered promiscuous mode [ 52.133063][ T4695] 0ªX¹¦D: renamed from gretap0 [ 52.168388][ T4695] device 30ªX¹¦D left promiscuous mode [ 52.171594][ T4695] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 52.405073][ T27] audit: type=1326 audit(52.380:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 52.410846][ T4706] loop1: detected capacity change from 0 to 256 [ 52.414569][ T27] audit: type=1326 audit(52.390:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 52.425925][ T4706] FAT-fs (loop1): bogus number of FAT sectors [ 52.435886][ T27] audit: type=1326 audit(52.410:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 52.436600][ T4706] FAT-fs (loop1): Can't find a valid FAT filesystem [ 52.463713][ T27] audit: type=1326 audit(52.410:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 52.479163][ T27] audit: type=1326 audit(52.410:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 52.505544][ T27] audit: type=1326 audit(52.410:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 52.517329][ T27] audit: type=1326 audit(52.410:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 52.522937][ T27] audit: type=1326 audit(52.410:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=130 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 52.545777][ T27] audit: type=1326 audit(52.410:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 52.574699][ T4710] loop0: detected capacity change from 0 to 512 [ 52.636023][ T4710] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.846775][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 53.274879][ T4736] loop1: detected capacity change from 0 to 512 [ 53.302085][ T4736] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 53.596125][ T4752] __nla_validate_parse: 9 callbacks suppressed [ 53.596140][ T4752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.152'. [ 53.703993][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 53.723513][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 53.730968][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 53.925461][ T4764] loop3: detected capacity change from 0 to 164 [ 53.950261][ T4764] ======================================================= [ 53.950261][ T4764] WARNING: The mand mount option has been deprecated and [ 53.950261][ T4764] and is ignored by this kernel. Remove the mand [ 53.950261][ T4764] option from the mount to silence this warning. [ 53.950261][ T4764] ======================================================= [ 53.971183][ T4764] Unable to read rock-ridge attributes [ 54.041313][ T4770] loop1: detected capacity change from 0 to 764 [ 54.176308][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 54.221995][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 54.273367][ T4784] loop1: detected capacity change from 0 to 512 [ 54.346452][ T4784] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 54.612335][ T4801] smc: net device bond0 applied user defined pnetid SYZ0 [ 54.616985][ T4801] smc: net device bond0 erased user defined pnetid SYZ0 [ 54.702164][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 54.950907][ T4815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 55.024388][ T4815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 55.836473][ T4824] loop4: detected capacity change from 0 to 164 [ 55.901082][ T4824] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 55.912734][ T27] audit: type=1326 audit(55.890:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 55.919268][ T27] audit: type=1326 audit(55.890:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 55.930328][ T27] audit: type=1326 audit(55.890:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 55.940715][ T27] audit: type=1326 audit(55.890:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 55.946160][ T27] audit: type=1326 audit(55.890:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 55.954016][ T4830] loop1: detected capacity change from 0 to 256 [ 55.982675][ T27] audit: type=1326 audit(55.920:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 56.007089][ T27] audit: type=1326 audit(55.920:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=146 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 56.028337][ T27] audit: type=1326 audit(55.920:18): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 56.045071][ T27] audit: type=1326 audit(55.920:19): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 56.062012][ T27] audit: type=1326 audit(55.920:20): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 56.093108][ T4834] loop2: detected capacity change from 0 to 512 [ 56.155689][ T4834] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 56.315310][ T4850] loop4: detected capacity change from 0 to 512 [ 56.333199][ T4850] EXT4-fs: Ignoring removed nobh option [ 56.353921][ T4850] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 56.357088][ T4850] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 56.366674][ T4850] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #13: comm syz.4.191: casefold flag without casefold feature [ 56.373763][ T4850] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.191: couldn't read orphan inode 13 (err -117) [ 56.386817][ T4850] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 56.421746][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.433005][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.480693][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 56.527455][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 56.629694][ T4843] tipc: Started in network mode [ 56.633071][ T4843] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 56.635087][ T4843] tipc: Enabled bearer , priority 0 [ 57.748144][ T4347] tipc: Node number set to 11578026 [ 57.792866][ T4880] loop3: detected capacity change from 0 to 512 [ 57.794933][ T4880] EXT4-fs: Ignoring removed nobh option [ 57.856453][ T4880] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 57.859092][ T4880] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 57.859983][ T4890] loop2: detected capacity change from 0 to 512 [ 57.862514][ T4880] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #13: comm syz.3.202: casefold flag without casefold feature [ 57.872569][ T4880] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.202: couldn't read orphan inode 13 (err -117) [ 57.880424][ T4887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 57.884732][ T4880] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 57.914899][ T4347] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 57.927518][ T4347] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.939483][ T4890] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.026340][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 58.027827][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 59.190579][ T4917] loop2: detected capacity change from 0 to 512 [ 59.194847][ T4917] ext4: Unknown parameter 'seclabel' [ 59.240171][ T4289] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.429897][ T4928] loop0: detected capacity change from 0 to 512 [ 59.432231][ T4928] EXT4-fs: Ignoring removed nobh option [ 59.436817][ T4928] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 59.448623][ T4928] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 59.450973][ T4928] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #13: comm syz.0.219: casefold flag without casefold feature [ 59.468562][ T4928] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.219: couldn't read orphan inode 13 (err -117) [ 59.472726][ T4928] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 59.482476][ T4931] loop2: detected capacity change from 0 to 512 [ 59.491083][ T4343] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.493733][ T4343] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.534014][ T4932] usb usb1: usbfs: process 4932 (syz.3.209) did not claim interface 0 before use [ 59.541234][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 59.544530][ T4931] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 59.626580][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 59.714134][ T4932] loop3: detected capacity change from 0 to 1024 [ 59.773592][ T4932] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 61.521286][ T4936] Set syz1 is full, maxelem 65536 reached [ 62.775812][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 62.983466][ T4962] loop3: detected capacity change from 0 to 512 [ 62.985860][ T4962] EXT4-fs: Ignoring removed nobh option [ 62.992181][ T4962] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 62.995042][ T4962] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 62.997791][ T4962] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #13: comm syz.3.231: casefold flag without casefold feature [ 63.001566][ T4962] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.231: couldn't read orphan inode 13 (err -117) [ 63.004752][ T4962] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 63.013320][ T14] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.016396][ T14] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.039689][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 63.087507][ T4965] loop3: detected capacity change from 0 to 512 [ 63.120964][ T4965] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 63.153370][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 64.442434][ T4986] Zero length message leads to an empty skb [ 64.605631][ T4990] loop3: detected capacity change from 0 to 512 [ 64.612233][ T4990] EXT4-fs: Ignoring removed nobh option [ 64.624718][ T4990] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 64.626919][ T4990] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 64.629564][ T4990] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #13: comm syz.3.242: casefold flag without casefold feature [ 64.633722][ T4990] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.242: couldn't read orphan inode 13 (err -117) [ 64.637056][ T4990] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 64.664699][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 64.722195][ T4995] loop3: detected capacity change from 0 to 512 [ 64.743957][ T4996] usb usb1: usbfs: process 4996 (syz.0.238) did not claim interface 0 before use [ 64.762627][ T4995] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 64.766961][ T4996] loop0: detected capacity change from 0 to 1024 [ 64.833108][ T4996] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 64.863361][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 65.013887][ T5004] xt_hashlimit: max too large, truncated to 1048576 [ 65.132231][ T5006] loop3: detected capacity change from 0 to 1024 [ 65.142075][ T5006] EXT4-fs: Ignoring removed nobh option [ 65.149220][ T5006] EXT4-fs: Invalid want_extra_isize 129 [ 65.156825][ T5006] 9pnet_fd: Insufficient options for proto=fd [ 67.812132][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 67.896787][ T5026] netlink: 60 bytes leftover after parsing attributes in process `syz.0.252'. [ 67.904338][ T5026] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 69.611124][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.612984][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.620524][ T7] cfg80211: failed to load regulatory.db [ 71.340937][ T4945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.224'. [ 71.343475][ T4945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.224'. [ 71.515968][ T5033] loop4: detected capacity change from 0 to 512 [ 71.615711][ T5044] loop2: detected capacity change from 0 to 1024 [ 71.628690][ T5033] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.653736][ T5044] EXT4-fs: Ignoring removed nobh option [ 71.655231][ T5044] EXT4-fs: Invalid want_extra_isize 129 [ 71.672331][ T4312] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.675844][ T4312] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.680133][ T4312] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.684087][ T4312] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.686569][ T4312] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.690541][ T4312] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.711338][ T4438] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.734544][ T5044] 9pnet_fd: Insufficient options for proto=fd [ 71.773534][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 72.923307][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 72.923322][ T27] audit: type=1326 audit(72.900:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 72.955402][ T27] audit: type=1326 audit(72.920:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 72.975697][ T27] audit: type=1326 audit(72.930:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 73.003636][ T27] audit: type=1326 audit(72.930:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 73.020586][ T27] audit: type=1326 audit(72.930:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 73.026227][ T27] audit: type=1326 audit(72.930:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 73.057251][ T27] audit: type=1326 audit(72.930:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 73.062302][ T27] audit: type=1326 audit(72.940:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 73.097237][ T27] audit: type=1326 audit(72.940:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=267 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 73.112862][ T27] audit: type=1326 audit(72.940:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f59a68 code=0x7ffc0000 [ 73.180994][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 73.229085][ T5079] usb usb1: usbfs: process 5079 (syz.4.261) did not claim interface 0 before use [ 73.273540][ T5081] loop3: detected capacity change from 0 to 512 [ 73.350217][ T5079] loop4: detected capacity change from 0 to 1024 [ 73.360485][ T5086] netlink: '+}[@': attribute type 10 has an invalid length. [ 73.362332][ T5086] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 73.387519][ T5081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 73.455220][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 73.466835][ T5079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 73.503193][ T5086] team0: Port device geneve0 added [ 73.566943][ T5045] chnl_net:caif_netlink_parms(): no params data found [ 73.775353][ T4312] Bluetooth: hci5: command 0x0409 tx timeout [ 73.921076][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.922902][ T5045] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.934516][ T5045] device bridge_slave_0 entered promiscuous mode [ 73.943622][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.954960][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.963354][ T5105] loop2: detected capacity change from 0 to 512 [ 73.988063][ T5045] device bridge_slave_1 entered promiscuous mode [ 73.989858][ T5105] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 74.009642][ T5105] EXT2-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 74.026083][ T5105] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 74.090306][ T5045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.097847][ T5105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 74.336571][ T5045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.340795][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 74.376107][ T5045] team0: Port device team_slave_0 added [ 74.452346][ T5045] team0: Port device team_slave_1 added [ 74.541113][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.542825][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.559904][ T5045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.564010][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.566101][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.605947][ T5127] loop3: detected capacity change from 0 to 512 [ 74.610781][ T5045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.730030][ T5127] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.821057][ T5132] netlink: 'syz.2.285': attribute type 21 has an invalid length. [ 74.823199][ T5132] netlink: 'syz.2.285': attribute type 20 has an invalid length. [ 74.825336][ T5132] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.889197][ T5045] device hsr_slave_0 entered promiscuous mode [ 74.928188][ T5045] device hsr_slave_1 entered promiscuous mode [ 74.958276][ T5045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.960389][ T5045] Cannot create hsr debugfs directory [ 75.211284][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 75.661140][ T5045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.790720][ T5045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.848345][ T4312] Bluetooth: hci5: command 0x041b tx timeout [ 76.725278][ T5181] loop0: detected capacity change from 0 to 512 [ 76.782875][ T5181] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.822554][ T5188] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 76.835637][ T5045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.872802][ T5045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.910520][ T5175] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 76.935724][ T5175] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.956594][ T5175] bond0: (slave team0): Enslaving as an active interface with an up link [ 77.392802][ T175] device hsr_slave_0 left promiscuous mode [ 77.445968][ T175] device hsr_slave_1 left promiscuous mode [ 77.446649][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 77.507591][ T175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.512531][ T175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.515034][ T175] device bridge_slave_1 left promiscuous mode [ 77.517729][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.666004][ T175] device bridge_slave_0 left promiscuous mode [ 77.667879][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.928871][ T4312] Bluetooth: hci5: command 0x040f tx timeout [ 78.589734][ T5219] loop3: detected capacity change from 0 to 2048 [ 78.614564][ T5219] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.647619][ T5219] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.697728][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 78.808539][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 78.881213][ T5227] loop3: detected capacity change from 0 to 512 [ 78.917533][ T5227] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.179258][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 80.007358][ T4312] Bluetooth: hci5: command 0x0419 tx timeout [ 80.602616][ T5252] usb usb1: usbfs: process 5252 (syz.3.324) did not claim interface 0 before use [ 80.614075][ T5252] loop3: detected capacity change from 0 to 1024 [ 80.643480][ T5252] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.950887][ T175] team0 (unregistering): Port device team_slave_1 removed [ 81.149763][ T175] team0 (unregistering): Port device team_slave_0 removed [ 81.368917][ T175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.577988][ T175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.598167][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 82.821856][ T5264] loop3: detected capacity change from 0 to 1024 [ 82.833410][ T5264] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.844179][ T5264] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.850938][ T5264] Process accounting resumed [ 82.872635][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 83.104360][ T5272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.332'. [ 84.429259][ T175] bond0 (unregistering): Released all slaves [ 84.442834][ T5281] usb usb1: usbfs: process 5281 (syz.3.334) did not claim interface 0 before use [ 84.453088][ T5281] loop3: detected capacity change from 0 to 1024 [ 84.517708][ T5281] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.637576][ T5202] netlink: 3 bytes leftover after parsing attributes in process `syz.2.306'. [ 84.639876][ T5202] 0ªX¹¦À: renamed from caif0 [ 84.730621][ T5202] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 84.740656][ T5240] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.320'. [ 84.799512][ T5246] device macvlan0 entered promiscuous mode [ 84.840858][ T5246] device ipvlan0 entered promiscuous mode [ 84.843054][ T5246] device ipvlan0 left promiscuous mode [ 84.844792][ T5246] device macvlan0 left promiscuous mode [ 84.936700][ T5289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.336'. [ 85.057614][ T5045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.080498][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.083059][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.126583][ T5045] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.164045][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.167778][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.179529][ T4820] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.181352][ T4820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.204004][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.216239][ T5303] rtc-efi rtc-efi.0: write status is 3 [ 85.230829][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.244792][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.253700][ T4820] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.255935][ T4820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.273031][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.310719][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.322514][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.345132][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.373553][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.377862][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.387827][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.407648][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.413613][ T5045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.416779][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.549629][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.552496][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.578983][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.703153][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.705167][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.744386][ T5045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.755832][ T5334] loop4: detected capacity change from 0 to 512 [ 86.858256][ T5334] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.911919][ T5350] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 86.929006][ T5334] netlink: 96 bytes leftover after parsing attributes in process `syz.4.348'. [ 87.055316][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 87.328444][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.330956][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.381430][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.395703][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.414265][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.433156][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.440298][ T5045] device veth0_vlan entered promiscuous mode [ 87.446618][ T5045] device veth1_vlan entered promiscuous mode [ 87.505479][ T5373] loop4: detected capacity change from 0 to 512 [ 87.517673][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.520250][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.522775][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.528071][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.543106][ T5045] device veth0_macvtap entered promiscuous mode [ 87.548162][ T5045] device veth1_macvtap entered promiscuous mode [ 87.599389][ T5373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.615644][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.622833][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.625217][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.633714][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.636068][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.638774][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.641699][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.642855][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 87.642866][ T27] audit: type=1326 audit(87.620:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 87.643975][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.654551][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.658064][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.660352][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.670865][ T27] audit: type=1326 audit(87.640:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 87.681232][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.692548][ T27] audit: type=1326 audit(87.670:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=190 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 87.704855][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.737845][ T27] audit: type=1326 audit(87.670:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 87.743440][ T27] audit: type=1326 audit(87.670:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=192 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 87.757958][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.760631][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.763259][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.766006][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.775350][ T27] audit: type=1326 audit(87.670:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 87.787434][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.789986][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.792485][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.795231][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.807318][ T27] audit: type=1326 audit(87.670:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=193 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 87.810756][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.816182][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 87.835202][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.838228][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.847503][ T27] audit: type=1326 audit(87.720:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 87.852604][ T27] audit: type=1326 audit(87.720:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 87.869669][ T5045] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.871803][ T5045] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.873901][ T5045] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.891843][ T27] audit: type=1326 audit(87.720:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 87.900832][ T5045] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.067807][ T5379] loop0: detected capacity change from 0 to 8192 [ 88.082893][ T5379] FAT-fs (loop0): Unrecognized mount option "€" or missing value [ 88.096656][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.105216][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.109931][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.153507][ T5215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.155001][ T5389] netlink: 28 bytes leftover after parsing attributes in process `syz.4.358'. [ 88.156010][ T5215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.186366][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.353106][ T5393] loop5: detected capacity change from 0 to 512 [ 88.355261][ T5393] EXT4-fs: Ignoring removed nobh option [ 88.420631][ T5393] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 88.422595][ T5393] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 88.435518][ T5393] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #13: comm syz.5.253: casefold flag without casefold feature [ 88.467663][ T5393] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.253: couldn't read orphan inode 13 (err -117) [ 88.487712][ T5393] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 88.669131][ T5045] EXT4-fs (loop5): unmounting filesystem. [ 89.261902][ T5437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.369'. [ 89.262917][ T5434] loop2: detected capacity change from 0 to 1024 [ 89.322531][ T5434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.397396][ T5434] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2739: inode #15: comm syz.2.368: corrupted in-inode xattr [ 89.474315][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 89.661595][ T5457] loop2: detected capacity change from 0 to 512 [ 89.671906][ T5457] EXT4-fs: Ignoring removed nobh option [ 89.695402][ T5457] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 89.698172][ T5457] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 89.704337][ T5457] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #13: comm syz.2.374: casefold flag without casefold feature [ 89.719612][ T5457] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.374: couldn't read orphan inode 13 (err -117) [ 89.728563][ T5457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.903114][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 90.184455][ T5475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.380'. [ 90.612031][ T5498] loop0: detected capacity change from 0 to 512 [ 90.614175][ T5498] EXT4-fs: Ignoring removed nobh option [ 90.638572][ T5498] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 90.640528][ T5498] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 90.713933][ T5501] loop4: detected capacity change from 0 to 1024 [ 90.716115][ T5501] EXT4-fs: Ignoring removed nobh option [ 90.748987][ T5498] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #13: comm syz.0.388: casefold flag without casefold feature [ 90.770356][ T5501] EXT4-fs: Invalid want_extra_isize 129 [ 90.808575][ T5501] 9pnet_fd: Insufficient options for proto=fd [ 90.811136][ T5498] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.388: couldn't read orphan inode 13 (err -117) [ 90.844412][ T5498] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 90.894604][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 90.911243][ T7] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.948303][ T5513] netlink: 28 bytes leftover after parsing attributes in process `syz.5.393'. [ 90.977754][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 91.081213][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 91.346549][ T5536] loop0: detected capacity change from 0 to 512 [ 91.349632][ T5536] EXT4-fs: inline encryption not supported [ 91.351134][ T5536] EXT4-fs: Ignoring removed bh option [ 91.356537][ T5536] EXT4-fs: Mount option(s) incompatible with ext3 [ 91.397999][ T5536] loop0: detected capacity change from 0 to 512 [ 91.399991][ T5536] EXT4-fs: Ignoring removed orlov option [ 91.403209][ T5521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.407004][ T5521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.449571][ T5536] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.482113][ T5536] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 91.494238][ T5536] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.402: Corrupt directory, running e2fsck is recommended [ 91.575328][ T5546] loop3: detected capacity change from 0 to 512 [ 91.577503][ T5546] EXT4-fs: Ignoring removed nobh option [ 91.629363][ T5546] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 91.631310][ T5546] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 91.633594][ T5546] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #13: comm syz.3.405: casefold flag without casefold feature [ 91.646516][ T5546] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.405: couldn't read orphan inode 13 (err -117) [ 91.659093][ T5536] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 91.669369][ T5546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 91.672102][ T5536] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.402: corrupted in-inode xattr [ 91.686886][ T5536] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.402: couldn't read orphan inode 15 (err -117) [ 91.697051][ T5536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.699521][ T4344] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 91.703453][ T4344] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.728083][ T5536] EXT4-fs: Ignoring removed bh option [ 91.733414][ T5536] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 91.774961][ T5554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.408'. [ 91.776572][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 91.855301][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 92.074224][ T5571] loop5: detected capacity change from 0 to 1024 [ 92.086741][ T5571] EXT4-fs: Ignoring removed nobh option [ 92.089359][ T5571] EXT4-fs: Invalid want_extra_isize 129 [ 92.129764][ T5571] 9pnet_fd: Insufficient options for proto=fd [ 92.480017][ T5591] loop5: detected capacity change from 0 to 512 [ 92.482221][ T5591] EXT4-fs: Ignoring removed nobh option [ 92.519466][ T5593] usb usb1: usbfs: process 5593 (syz.4.410) did not claim interface 0 before use [ 92.529825][ T5591] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 92.531786][ T5591] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 92.557498][ T5591] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #13: comm syz.5.419: casefold flag without casefold feature [ 92.583672][ T5591] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.419: couldn't read orphan inode 13 (err -117) [ 92.587537][ T5591] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 92.595364][ T5593] loop4: detected capacity change from 0 to 1024 [ 92.600444][ T5598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.420'. [ 92.612446][ T4344] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 92.615292][ T4344] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.666751][ T5593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.701250][ T5045] EXT4-fs (loop5): unmounting filesystem. [ 93.912304][ T5618] loop3: detected capacity change from 0 to 128 [ 93.919185][ T5620] loop5: detected capacity change from 0 to 1024 [ 93.922030][ T5620] EXT4-fs: Ignoring removed nobh option [ 93.923535][ T5620] EXT4-fs: Invalid want_extra_isize 129 [ 93.970026][ T5623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'. [ 93.983203][ T5618] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 93.985377][ T5618] FAT-fs (loop3): Filesystem has been set read-only [ 93.998416][ T5620] 9pnet_fd: Insufficient options for proto=fd [ 94.022565][ T5618] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 94.314395][ T5637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.433'. [ 94.350122][ T22] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 94.352928][ T22] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.476650][ T5655] loop0: detected capacity change from 0 to 1024 [ 95.503332][ T5655] EXT4-fs: Ignoring removed nobh option [ 95.504918][ T5655] EXT4-fs: Invalid want_extra_isize 129 [ 95.585088][ T5655] 9pnet_fd: Insufficient options for proto=fd [ 95.605292][ T4289] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.757041][ T5668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.447'. [ 95.912194][ T7] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 95.916691][ T7] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.014633][ T5692] loop3: detected capacity change from 0 to 128 [ 97.015464][ T4344] kernel write not supported for file /snd/seq (pid: 4344 comm: kworker/1:4) [ 97.053627][ T5692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 97.108131][ T5695] loop2: detected capacity change from 0 to 1024 [ 97.145981][ T5695] EXT4-fs: Ignoring removed nobh option [ 97.157566][ T5695] EXT4-fs: Invalid want_extra_isize 129 [ 97.170105][ T5695] 9pnet_fd: Insufficient options for proto=fd [ 97.207776][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 97.207789][ T27] audit: type=1326 audit(97.190:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 97.219926][ T27] audit: type=1326 audit(97.200:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 97.225503][ T27] audit: type=1326 audit(97.200:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=55 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 97.268311][ T27] audit: type=1326 audit(97.200:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 97.268349][ T27] audit: type=1326 audit(97.200:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 97.270755][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 97.474388][ T5710] netlink: 76 bytes leftover after parsing attributes in process `syz.3.463'. [ 97.506007][ T27] audit: type=1107 audit(97.480:145): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 97.506007][ T27] ' [ 97.510980][ T5715] loop0: detected capacity change from 0 to 512 [ 97.529786][ T7] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 97.532417][ T7] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.532949][ T5715] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.641069][ T5715] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 97.645329][ T5715] EXT4-fs warning (device loop0): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.521209][ T5722] netlink: 'syz.3.468': attribute type 1 has an invalid length. [ 98.579034][ T27] audit: type=1326 audit(98.560:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 98.579633][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 98.655949][ T27] audit: type=1326 audit(98.630:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=193 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 98.673652][ T27] audit: type=1326 audit(98.640:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 98.786261][ T5734] loop5: detected capacity change from 0 to 1024 [ 98.794786][ T5734] EXT4-fs: Ignoring removed nobh option [ 98.796375][ T5734] EXT4-fs: Invalid want_extra_isize 129 [ 98.844122][ T5734] 9pnet_fd: Insufficient options for proto=fd [ 98.857734][ T5738] process 'syz.3.476' launched './file1' with NULL argv: empty string added [ 99.877065][ T5758] loop0: detected capacity change from 0 to 512 [ 99.888814][ T5758] EXT4-fs: Ignoring removed nobh option [ 99.906122][ T5758] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 99.908362][ T5758] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 99.910879][ T5758] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #13: comm syz.0.479: casefold flag without casefold feature [ 99.914659][ T5758] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.479: couldn't read orphan inode 13 (err -117) [ 99.918573][ T5758] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.927550][ T4343] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 99.931492][ T4343] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.053486][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 101.430749][ T5791] loop3: detected capacity change from 0 to 1024 [ 101.440273][ T5791] EXT4-fs: Ignoring removed nobh option [ 101.446408][ T5791] EXT4-fs: Invalid want_extra_isize 129 [ 101.470090][ T5791] 9pnet_fd: Insufficient options for proto=fd [ 101.636727][ T5804] loop3: detected capacity change from 0 to 512 [ 101.657775][ T5804] EXT4-fs: Ignoring removed nobh option [ 101.670725][ T5804] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 101.672800][ T5804] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 101.693370][ T5804] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #13: comm syz.3.492: casefold flag without casefold feature [ 101.701597][ T5804] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.492: couldn't read orphan inode 13 (err -117) [ 101.705989][ T5804] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.716488][ T4347] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 101.719523][ T4347] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.790723][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 101.824892][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 101.829872][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 102.123106][ T5826] loop3: detected capacity change from 0 to 1024 [ 102.125225][ T5826] EXT4-fs: Ignoring removed nobh option [ 102.126687][ T5826] EXT4-fs: Invalid want_extra_isize 129 [ 102.972485][ T5826] 9pnet_fd: Insufficient options for proto=fd [ 103.103759][ T5836] loop0: detected capacity change from 0 to 512 [ 103.109282][ T5836] EXT4-fs: Ignoring removed nobh option [ 103.142834][ T5836] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 103.144904][ T5836] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 103.173025][ T5836] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #13: comm syz.0.506: casefold flag without casefold feature [ 103.176794][ T5836] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.506: couldn't read orphan inode 13 (err -117) [ 103.194681][ T5836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 103.244325][ T4344] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 103.281732][ T4344] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.371953][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 103.577083][ T5855] loop3: detected capacity change from 0 to 256 [ 103.756185][ T5863] loop0: detected capacity change from 0 to 1024 [ 103.767853][ T5863] EXT4-fs: Ignoring removed nobh option [ 103.771537][ T5863] EXT4-fs: Invalid want_extra_isize 129 [ 103.912024][ T4438] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.915543][ T5863] 9pnet_fd: Insufficient options for proto=fd [ 104.713065][ T5861] 9pnet: Could not find request transport: f [ 104.902018][ T5884] loop3: detected capacity change from 0 to 512 [ 104.904249][ T5884] EXT4-fs: Ignoring removed nobh option [ 104.949936][ T5884] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 104.952074][ T5884] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 104.957494][ T5884] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #13: comm syz.3.520: casefold flag without casefold feature [ 104.968238][ T5884] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.520: couldn't read orphan inode 13 (err -117) [ 104.990017][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 105.036369][ T5884] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.077631][ T14] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 105.081851][ T14] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.896240][ T5898] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 105.947667][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 105.995744][ T5903] netlink: 44 bytes leftover after parsing attributes in process `syz.4.524'. [ 106.404601][ T5921] loop5: detected capacity change from 0 to 1024 [ 106.406860][ T5921] EXT4-fs: Ignoring removed nobh option [ 106.454708][ T5921] EXT4-fs: Invalid want_extra_isize 129 [ 107.524852][ T5942] loop5: detected capacity change from 0 to 512 [ 107.567900][ T5942] EXT4-fs: Ignoring removed nobh option [ 107.604564][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 107.613303][ T5942] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 107.615475][ T5942] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 108.386596][ T5942] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #13: comm syz.5.536: casefold flag without casefold feature [ 108.421037][ T5942] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.536: couldn't read orphan inode 13 (err -117) [ 108.424839][ T5942] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 108.447725][ T4347] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 108.471507][ T4347] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.604279][ T5045] EXT4-fs (loop5): unmounting filesystem. [ 108.613917][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 108.613953][ T27] audit: type=1326 audit(108.590:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 108.634086][ T27] audit: type=1326 audit(108.610:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=227 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 108.634125][ T27] audit: type=1326 audit(108.610:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 108.634155][ T27] audit: type=1326 audit(108.610:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbd357f94 code=0x7ffc0000 [ 108.647006][ T5970] usb usb1: usbfs: process 5970 (syz.3.532) did not claim interface 0 before use [ 108.655857][ T5970] loop3: detected capacity change from 0 to 1024 [ 108.708398][ T5970] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.738370][ T5975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.541'. [ 108.738767][ T5975] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 108.945761][ T27] audit: type=1326 audit(108.920:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 108.970484][ T5983] loop0: detected capacity change from 0 to 1024 [ 109.007114][ T5983] EXT4-fs: Ignoring removed nobh option [ 109.018712][ T5983] EXT4-fs: Invalid want_extra_isize 129 [ 109.990338][ T5960] rtc-efi rtc-efi.0: write status is 3 [ 110.164986][ T27] audit: type=1326 audit(110.140:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 110.183362][ T27] audit: type=1326 audit(110.160:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 110.213638][ T27] audit: type=1326 audit(110.170:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 110.228093][ T27] audit: type=1326 audit(110.170:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 110.264531][ T27] audit: type=1326 audit(110.170:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 110.358251][ T6009] loop4: detected capacity change from 0 to 512 [ 110.360399][ T6009] EXT4-fs: Ignoring removed nobh option [ 110.392187][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 110.418391][ T6009] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 110.420547][ T6009] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 110.433748][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'. [ 110.438518][ T6009] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #13: comm syz.4.553: casefold flag without casefold feature [ 110.452796][ T6009] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.553: couldn't read orphan inode 13 (err -117) [ 110.466890][ T6009] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.533986][ T24] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 110.536615][ T24] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.691214][ T6035] loop2: detected capacity change from 0 to 1024 [ 110.788386][ T6035] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.803325][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 111.709322][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 111.955614][ T6061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.569'. [ 112.366653][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.370714][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.433776][ T6093] Invalid ELF header magic: != ELF [ 114.717101][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 114.717114][ T27] audit: type=1326 audit(114.690:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 114.736869][ T27] audit: type=1326 audit(114.710:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 114.763239][ T27] audit: type=1326 audit(114.710:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 114.802161][ T27] audit: type=1326 audit(114.710:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 114.825212][ T27] audit: type=1326 audit(114.720:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 114.850730][ T27] audit: type=1326 audit(114.720:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 114.889390][ T27] audit: type=1326 audit(114.720:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 114.908066][ T27] audit: type=1326 audit(114.720:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=55 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 114.925108][ T6124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.582'. [ 114.933963][ T27] audit: type=1326 audit(114.720:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd359a68 code=0x7ffc0000 [ 114.959719][ T27] audit: type=1326 audit(114.810:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b159a68 code=0x7ffc0000 [ 115.174196][ T6135] loop4: detected capacity change from 0 to 512 [ 115.241654][ T6135] EXT4-fs: Ignoring removed nobh option [ 115.253973][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 115.296123][ T6139] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 115.298843][ T6139] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 115.304064][ T6135] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 115.305937][ T6135] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 115.308792][ T6135] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #13: comm syz.4.587: casefold flag without casefold feature [ 115.316752][ T6135] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.587: couldn't read orphan inode 13 (err -117) [ 115.338066][ T6135] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.493502][ T4347] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 115.496200][ T4347] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.285778][ T6159] loop5: detected capacity change from 0 to 1024 [ 116.298287][ T6159] EXT4-fs: Ignoring removed nobh option [ 116.299773][ T6159] EXT4-fs: Invalid want_extra_isize 129 [ 116.398036][ T6159] 9pnet: Could not find request transport: fd00000000000000000000003 [ 116.445397][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 116.490526][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 116.884617][ T6184] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 116.958443][ T6186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.962060][ T6186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.840507][ T6195] loop5: detected capacity change from 0 to 512 [ 117.851202][ T6195] EXT4-fs: Ignoring removed nobh option [ 117.869571][ T6195] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 117.871564][ T6195] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 117.874352][ T6195] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #13: comm syz.5.602: casefold flag without casefold feature [ 117.891770][ T6195] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.602: couldn't read orphan inode 13 (err -117) [ 117.897570][ T6195] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 118.012703][ T14] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 118.021530][ T14] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.868916][ T5045] EXT4-fs (loop5): unmounting filesystem. [ 119.011236][ T6203] loop5: detected capacity change from 0 to 1024 [ 119.013480][ T6203] EXT4-fs: Ignoring removed nobh option [ 119.014886][ T6203] EXT4-fs: Invalid want_extra_isize 129 [ 119.139837][ T6210] netlink: 48 bytes leftover after parsing attributes in process `syz.2.607'. [ 119.156465][ T6203] 9pnet: Could not find request transport: fd00000000000000000000003 [ 119.599025][ T6228] loop2: detected capacity change from 0 to 512 [ 119.608281][ T6228] EXT4-fs: Ignoring removed nobh option [ 119.620020][ T6228] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 119.631186][ T6228] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 119.648449][ T6228] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #13: comm syz.2.614: casefold flag without casefold feature [ 119.675278][ T6228] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.614: couldn't read orphan inode 13 (err -117) [ 119.697029][ T6228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.729337][ T6224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.731915][ T6224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.767776][ T4347] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 119.770496][ T4347] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.973678][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 120.893223][ T6241] loop5: detected capacity change from 0 to 1024 [ 120.903699][ T6241] EXT4-fs: Ignoring removed nobh option [ 120.904970][ T6241] EXT4-fs: Invalid want_extra_isize 129 [ 120.985764][ T4289] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.001934][ T6241] 9pnet_fd: Insufficient options for proto=fd [ 121.005175][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 121.187097][ T6257] loop0: detected capacity change from 0 to 512 [ 121.194523][ T6257] EXT4-fs: Ignoring removed i_version option [ 121.196002][ T6257] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.204297][ T6257] ext4: Unknown parameter 'seclabel' [ 121.246139][ T4289] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.602172][ T6284] loop4: detected capacity change from 0 to 1024 [ 122.623905][ T6284] EXT4-fs: Ignoring removed nobh option [ 122.635559][ T6284] EXT4-fs: Invalid want_extra_isize 129 [ 122.641588][ C0] vcan0: j1939_tp_rxtimer: 0x00000000f97023a9: rx timeout, send abort [ 122.652127][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000f97023a9: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.668791][ T6284] 9pnet_fd: Insufficient options for proto=fd [ 122.824948][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'. [ 123.067275][ T1515] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.109551][ T6313] loop3: detected capacity change from 0 to 1024 [ 123.185075][ T6313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.227262][ T1515] usb 1-1: device descriptor read/64, error -71 [ 123.507455][ T1515] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.667364][ T1515] usb 1-1: device descriptor read/64, error -71 [ 123.788458][ T1515] usb usb1-port1: attempt power cycle [ 123.917041][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e0c738c5: rx timeout, send abort [ 124.001965][ T6337] binder: 6328:6337 ioctl 4018620d 0 returned -22 [ 124.545775][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000e0c738c5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.765159][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 124.765172][ T27] audit: type=1326 audit(124.740:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0159a68 code=0x7ffc0000 [ 124.796549][ T27] audit: type=1326 audit(124.770:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa0159a68 code=0x7ffc0000 [ 124.820859][ T6347] loop4: detected capacity change from 0 to 1024 [ 124.823003][ T6347] EXT4-fs: Ignoring removed nobh option [ 124.824447][ T6347] EXT4-fs: Invalid want_extra_isize 129 [ 124.827289][ T27] audit: type=1326 audit(124.780:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0159a68 code=0x7ffc0000 [ 124.855811][ T27] audit: type=1326 audit(124.780:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa0159a68 code=0x7ffc0000 [ 124.865326][ T6347] 9pnet_fd: Insufficient options for proto=fd [ 124.899936][ T27] audit: type=1326 audit(124.780:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0159a68 code=0x7ffc0000 [ 124.934271][ T27] audit: type=1326 audit(124.780:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=147 compat=0 ip=0xffffa0159a68 code=0x7ffc0000 [ 124.957321][ T27] audit: type=1326 audit(124.780:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0159a68 code=0x7ffc0000 [ 124.982763][ T1515] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.004161][ T27] audit: type=1326 audit(124.980:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0159a68 code=0x7ffc0000 [ 125.009748][ T27] audit: type=1326 audit(124.980:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa0159a68 code=0x7ffc0000 [ 125.050170][ T27] audit: type=1326 audit(124.990:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0159a68 code=0x7ffc0000 [ 125.862180][ T6374] binder: 6368:6374 ioctl 4018620d 0 returned -22 [ 126.555563][ T1515] usb 1-1: device descriptor read/8, error -71 [ 126.731549][ T6380] loop4: detected capacity change from 0 to 1024 [ 126.733692][ T6380] EXT4-fs: Ignoring removed nobh option [ 126.735180][ T6380] EXT4-fs: Invalid want_extra_isize 129 [ 126.774842][ T6380] 9pnet_fd: Insufficient options for proto=fd [ 126.813618][ T6385] tipc: Started in network mode [ 126.815945][ T6385] tipc: Node identity 7f000001, cluster identity 4711 [ 126.828258][ T6385] tipc: Enabled bearer , priority 10 [ 127.354560][ T6408] loop5: detected capacity change from 0 to 512 [ 127.419947][ T6412] loop4: detected capacity change from 0 to 512 [ 127.422217][ T6412] EXT4-fs: Ignoring removed i_version option [ 127.553279][ T6413] binder: 6402:6413 ioctl 4018620d 0 returned -22 [ 127.832744][ T6412] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.167008][ T4346] tipc: Node number set to 2130706433 [ 128.184892][ T6412] ext4: Unknown parameter 'seclabel' [ 128.300282][ T6408] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 128.302994][ T6408] EXT4-fs (loop5): orphan cleanup on readonly fs [ 128.305271][ T6408] EXT4-fs warning (device loop5): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.314932][ T6408] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 128.328009][ T6408] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.665: bg 0: block 40: padding at end of block bitmap is not set [ 128.335980][ T6408] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 128.346360][ T6419] loop2: detected capacity change from 0 to 1024 [ 128.356261][ T6408] EXT4-fs (loop5): 1 truncate cleaned up [ 128.357940][ T6408] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 128.376836][ T6419] EXT4-fs: Ignoring removed nobh option [ 128.378365][ T6419] EXT4-fs: Invalid want_extra_isize 129 [ 128.432453][ T4289] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.443264][ T6419] 9pnet_fd: Insufficient options for proto=fd [ 128.566200][ T5045] EXT4-fs (loop5): unmounting filesystem. [ 128.652383][ T6424] [ 128.653022][ T6424] ====================================================== [ 128.655005][ T6424] WARNING: possible circular locking dependency detected [ 128.656874][ T6424] 6.1.128-syzkaller #0 Not tainted [ 128.658141][ T6424] ------------------------------------------------------ [ 128.660064][ T6424] syz.2.675/6424 is trying to acquire lock: [ 128.661567][ T6424] ffff0000cfdb9450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 128.664648][ T6424] [ 128.664648][ T6424] but task is already holding lock: [ 128.666533][ T6424] ffff0000cfdb8130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x528 [ 128.669022][ T6424] [ 128.669022][ T6424] which lock already depends on the new lock. [ 128.669022][ T6424] [ 128.671933][ T6424] [ 128.671933][ T6424] the existing dependency chain (in reverse order) is: [ 128.674282][ T6424] [ 128.674282][ T6424] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 128.676374][ T6424] lock_sock_nested+0x78/0x138 [ 128.677807][ T6424] smc_listen_out+0x114/0x3c4 [ 128.679249][ T6424] smc_listen_work+0x1e4/0x1038 [ 128.680807][ T6424] process_one_work+0x7ac/0x1404 [ 128.682314][ T6424] worker_thread+0x8e4/0xfec [ 128.683759][ T6424] kthread+0x250/0x2d8 [ 128.685088][ T6424] ret_from_fork+0x10/0x20 [ 128.686460][ T6424] [ 128.686460][ T6424] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 128.689322][ T6424] __lock_acquire+0x3338/0x7680 [ 128.690768][ T6424] lock_acquire+0x26c/0x7cc [ 128.692099][ T6424] __flush_work+0xf8/0x1c0 [ 128.693459][ T6424] __cancel_work_timer+0x3ec/0x548 [ 128.694945][ T6424] cancel_work_sync+0x24/0x38 [ 128.696339][ T6424] smc_clcsock_release+0x64/0xec [ 128.697841][ T6424] __smc_release+0x55c/0x700 [ 128.699222][ T6424] smc_close_non_accepted+0xd8/0x260 [ 128.700895][ T6424] smc_close_active+0x9bc/0xd20 [ 128.702351][ T6424] __smc_release+0xa0/0x700 [ 128.703697][ T6424] smc_release+0x260/0x528 [ 128.705027][ T6424] sock_close+0xb8/0x1fc [ 128.706328][ T6424] __fput+0x1c8/0x7c8 [ 128.707503][ T6424] ____fput+0x20/0x30 [ 128.708709][ T6424] task_work_run+0x240/0x2f0 [ 128.710058][ T6424] do_notify_resume+0x2080/0x2cb8 [ 128.711571][ T6424] el0_svc+0x9c/0x168 [ 128.712796][ T6424] el0t_64_sync_handler+0x84/0xf0 [ 128.714333][ T6424] el0t_64_sync+0x18c/0x190 [ 128.715664][ T6424] [ 128.715664][ T6424] other info that might help us debug this: [ 128.715664][ T6424] [ 128.718475][ T6424] Possible unsafe locking scenario: [ 128.718475][ T6424] [ 128.720528][ T6424] CPU0 CPU1 [ 128.721973][ T6424] ---- ---- [ 128.723385][ T6424] lock(sk_lock-AF_SMC/1); [ 128.724638][ T6424] lock((work_completion)(&new_smc->smc_listen_work)); [ 128.727205][ T6424] lock(sk_lock-AF_SMC/1); [ 128.729117][ T6424] lock((work_completion)(&new_smc->smc_listen_work)); [ 128.731046][ T6424] [ 128.731046][ T6424] *** DEADLOCK *** [ 128.731046][ T6424] [ 128.733245][ T6424] 2 locks held by syz.2.675/6424: [ 128.734685][ T6424] #0: ffff0000e1290e10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x80/0x1fc [ 128.737531][ T6424] #1: ffff0000cfdb8130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x528 [ 128.740193][ T6424] [ 128.740193][ T6424] stack backtrace: [ 128.741750][ T6424] CPU: 0 PID: 6424 Comm: syz.2.675 Not tainted 6.1.128-syzkaller #0 [ 128.743890][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 128.746504][ T6424] Call trace: [ 128.747418][ T6424] dump_backtrace+0x1c8/0x1f4 [ 128.748870][ T6424] show_stack+0x2c/0x3c [ 128.749988][ T6424] dump_stack_lvl+0x108/0x170 [ 128.751246][ T6424] dump_stack+0x1c/0x5c [ 128.752354][ T6424] print_circular_bug+0x150/0x1b8 [ 128.753616][ T6424] check_noncircular+0x2cc/0x378 [ 128.754981][ T6424] __lock_acquire+0x3338/0x7680 [ 128.756247][ T6424] lock_acquire+0x26c/0x7cc [ 128.757542][ T6424] __flush_work+0xf8/0x1c0 [ 128.758696][ T6424] __cancel_work_timer+0x3ec/0x548 [ 128.759930][ T6424] cancel_work_sync+0x24/0x38 [ 128.761196][ T6424] smc_clcsock_release+0x64/0xec [ 128.762540][ T6424] __smc_release+0x55c/0x700 [ 128.763741][ T6424] smc_close_non_accepted+0xd8/0x260 [ 128.765153][ T6424] smc_close_active+0x9bc/0xd20 [ 128.766453][ T6424] __smc_release+0xa0/0x700 [ 128.767594][ T6424] smc_release+0x260/0x528 [ 128.768758][ T6424] sock_close+0xb8/0x1fc [ 128.769865][ T6424] __fput+0x1c8/0x7c8 [ 128.770910][ T6424] ____fput+0x20/0x30 [ 128.771980][ T6424] task_work_run+0x240/0x2f0 [ 128.773266][ T6424] do_notify_resume+0x2080/0x2cb8 [ 128.774663][ T6424] el0_svc+0x9c/0x168 [ 128.775732][ T6424] el0t_64_sync_handler+0x84/0xf0 [ 128.777105][ T6424] el0t_64_sync+0x18c/0x190 [ 128.986509][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.990336][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.412983][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 131.048038][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.049801][ T2061] ieee802154 phy1 wpan1: encryption failed: -22