last executing test programs: 1m27.508954053s ago: executing program 2 (id=94): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000002300)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8004) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0xa, 0x0}}, {0x6, @remote}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 'netpci0\x00'}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r6, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) shutdown(r1, 0x1) recvmmsg(r2, &(0x7f0000002580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/161, 0xa1}, {&(0x7f0000000180)=""/191, 0xbf}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/116, 0x74}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/52, 0x34}, {&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f00000005c0)=""/112, 0x70}], 0x8, &(0x7f0000002640)=""/172, 0xac}, 0x5}, {{&(0x7f0000000700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000780)=""/118, 0x76}, {&(0x7f0000000800)=""/171, 0xab}, {&(0x7f00000008c0)=""/214, 0xd6}, {&(0x7f00000009c0)=""/40, 0x28}, {&(0x7f0000000a00)=""/161, 0xa1}, {&(0x7f0000000ac0)=""/93, 0x5d}, {&(0x7f0000000b40)=""/252, 0xfc}, {&(0x7f0000000c40)=""/244, 0xf4}], 0x8, &(0x7f0000000d80)=""/39, 0x27}, 0xe}, {{&(0x7f0000000dc0)=@nfc, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000ec0)=""/140, 0x8c}, {&(0x7f0000000f80)=""/33, 0x21}, {&(0x7f0000000fc0)=""/142, 0x8e}], 0x4, &(0x7f00000010c0)=""/39, 0x27}, 0x2}, {{&(0x7f0000001100)=@llc, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/176, 0xb0}], 0x1, &(0x7f0000001280)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002280)=@phonet, 0x80, &(0x7f0000002500)=[{&(0x7f0000002300)}, {&(0x7f0000002340)=""/207, 0xcf}, {&(0x7f0000002440)=""/130, 0x82}], 0x3, &(0x7f0000000480)=""/30, 0x1e}, 0xffffffff}], 0x6, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) socket$igmp6(0xa, 0x3, 0x2) 1m23.695995222s ago: executing program 2 (id=112): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nodelalloc}, {@nobarrier}, {@errors_remount}]}, 0x1, 0x57c, &(0x7f00000129c0)="$eJzs3c9rG8ceAPDvynZ+Oe/Fgbzw3jsUQw5NSSPHdn+k0EN6LG1ooL2nwlZMsBwFSw6xG2hyaC69lFAopYHSP6D3HkP/gf4VgTYQSjDtoReVlVeOYkmWfyiRGn0+sPbM7sgzo90Zz2i0bABDazL9kYv4X0R8lUQcazo2GtnByY10609uzaVbErXax78nkWT7GumT7Pd4FvlvRPz8RcSZXGu+ldW1xUKpVFzO4lPVpetTldW1s1eXCgvFheK1mdnZ82/Ozrzz9ls9q+trl/789qMH75//8tT6Nz8+On4viQtxNDvWXI99uN0cmYzJ7D0ZiwtbEk73ILNBkvS7AOzJSNbOxyLtA47FSNbqgZff5xFRA4ZUov3DkGqMAxpz+x7Ng/8xHr+3MQFqrX+y8dlIHKrPjY6sJ8/MjNL57kQP8k/z+Om3+/fSLXr3OQRAV7fvRMS50dHO/d/endtBmq156P/gxXmQjn9ebzf+yW2Of6LN+Ge8Tdvdi+7tP/eoB9l0lI7/3m07/t1ctJoYyWL/qo/5xpIrV0vFtG/7d0ScjrGDaXy79Zzz6w9rnY41j//SLc2/MRbMyvFo9OCzr5kvVAv7qXOzx3ci/t9l/Ju0Of/p+3Fph3mcLN5/pdOx7vV/vmo/RLza9vw/XdFKtl+fnKpfD1ONq6LVH3dP/tIp/13X/z/7qm6L9Pwf2b7+E0nzem1l93l8f+ivYqdjk0m2aLrL6/9A8kk9fCDbd7NQrS5PRxxIPmzdP/P0tY14I31a/9Ontu//2l3/hyPi0x3W/+6Jux2T7vn678XkMzv/87s6/7sPPPzgs+/2Xv/0/L9RD53O9uyk/9tpAffz3gEAAAAAAMCgyUXE0Uhy+c1wLpfPb3y/40QcyZXKleqZK+WVa/NRv1d2IsZyjZXu8abvQ0xnS5KN+MyW+GxEHI+Ir0cO1+P5uXJpvt+VBwAAAAAAAAAAAAAAAAAAgAEx3rj//+Dm/f+bj7H+daTfpQOeuy2P/B7rVzmAF6/rI/978aQnYCB1bf/AS2s06XcJgH7x/x+Gl/YPw0v7h+Gl/cPw0v5heGn/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FOXLl5Mt9r6k1tzaXz+xurKYvnG2fliZTG/tDKXnysvX88vlMsLpWJ+rrzU7e+VyuXr0zOxcnOqWqxUpyqra5eXyivXqpevLhUWipeLni0OAAAAAAAAAAAAAAAAAAAArSqra4uFUqm4LDCggUODUYyOgdHBKMYgBWojG42rNDoY5WkNjEVElzT97pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Km/AwAA//9MAjET") syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x390b1, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x2) getdents64(r0, 0x0, 0x0) 1m22.828803945s ago: executing program 2 (id=116): r0 = syz_io_uring_setup(0x92c, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x20000000, 0x0) 1m22.632540619s ago: executing program 2 (id=120): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x400, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x10}, 0x18) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m22.340854023s ago: executing program 2 (id=125): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) clock_gettime(0x0, &(0x7f0000001000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000180)=@userptr={0x145, 0x8, 0x4, 0x100, 0xfffffff8, {r3, r4/1000+60000}, {0x4, 0xc, 0x3, 0x2, 0xf, 0x2, "78842a6e"}, 0x7dd9, 0x2, {&(0x7f0000001080)}, 0x0, 0x0, r0}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x455124ba43232ced, 0x0, 0xffff}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x4040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setlease(r1, 0x400, 0x1) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80, 0x42) ioctl$I2C_RDWR(r10, 0x707, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x5c}}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a4, 0x274, 0x350, 0x0, 0x350, 0x350, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wg0\x00', 'ip6gre0\x00'}, 0x5e02, 0xd4, 0xf8, 0x0, {0xa803, 0xd003000000000000}, [@common=@unspec=@physdev={{0x64}, {'bond_slave_1\x00', {0xff}, 'nicvf0\x00', {}, 0x11, 0x4}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wg1\x00'}, 0x0, 0x94, 0xc4, 0x0, {0x0, 0x6000}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @broadcast}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x0, 0x3}}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00', {0xff}, {}, 0x88}, 0x0, 0xb8, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@ttl={{0x24}}]}, @ECN={0x24}}, {{@uncond, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@ah={{0x2c}}]}, @common=@unspec=@NFQUEUE1={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m20.855474606s ago: executing program 2 (id=135): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000180)={[{@nolazytime}, {@abort}, {@lazytime}, {@mblk_io_submit}, {@noauto_da_alloc}]}, 0xde, 0x53b, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1m20.683611139s ago: executing program 32 (id=135): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000180)={[{@nolazytime}, {@abort}, {@lazytime}, {@mblk_io_submit}, {@noauto_da_alloc}]}, 0xde, 0x53b, &(0x7f0000000e00)="$eJzs3c1vI2cZAPBnJnbIdlOSAodSqR+ii3YrWHvT0Dbi0BaBuFUClfsSJd4oWme9ip12E1WQFX8AEkJQiRMnLkjcuCCh/RMQUiX2jgCBEGzhwAEYNOPxNmvG2cD6Y5X8ftJrv/OOPc/zOvb4nY94AjizXoiINyNiLiJeioilsj0tSxz2S/64D++9t5GXvPntvySRlG0RRfW+8+XTFvp3lbr7B9fX2+3Wbjnd7O3cbHb3Dy5v76xvtbZaN1ZXV15de23tlbUrY+ln3q/Xv/KHH3z3J199/Zeff/e3V/906Vt50l8u5w/6NT7Fqxd3i9t6/lrcV4uI3fEGm5m5sj/1WScCAMCJ5KPUT0TEZ4rx/1LMFaO5wvCQbmH62QEAAADjkL2xGP9MIjIAAADg1HojIhYjSRvluQCLkaaNRv8c3k/FE2m70+197lpn78ZmPi9iOerpte1260p5Tu1y1JN8eqWofzT98tD0akQ8FRHfXzpXTDc2Ou3NWe/8AAAAgDPi/ND2/9+X+tv/AAAAwCmzPOsEAAAAgIkbtf2fTDkPAAAAYHIc/wcAAIBT7WtvvZWXbHD968139veud965vNnqXm/s7G00Njq7Nxtbnc5W8Zt9O8ctqx4R7U7n5hci9m41e61ur9ndP7i609m70bu67fqBAAAAMCtPPX/nbhIRh188V5TcfH4zN+IJzhWAUyMd0V75Mf/9ZHMBpmvU1/wJzI8zD2D6arNOAJidw1knAMzaAz/1UTEoOHryzgP7DH41uZwAAIDxuvjpO3e/XXH8v1aezw+cXqOO/wOn3yMc/89l48oDmD7H/+HsqsdctnTiR9+eaC7AbDzsUh8jf7yj6vh/5ZnBWfbQZQEAABO1WJTn00Z5LHAx0rTRiHiy+B/genJtu926EhEfj4jfLNU/lk+vFM9MXB4QAAAAAAAAAAAAAAAAAAAAAAAAAE4oy5LIAAAAgFMtIv1jUl7/6+LShcXh/QPzyT+KywPOR8S7P3r7h7fWe73dlbz9r/fbe++X7S/PYg8GAAAAnEW1Y+cOttMH2/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAME4f3ntvY1CmGffPX4qI5ar4tVgo7heiHhFP/C2J2pHnJRExN4b4h7cj4umq+EmeViyXWQzHTyPi3HTiP5tlWWX882OID2fZnXz982bV5y+NF4r76s9/rSyP6oH13/zPj8xJ76//5kas/548YYxnPvhZc2T82xHP1KrXP4P4yYj4L1YtsOJF+eY3Dg7+q7G/8Mh+HHGx8vsneSBWs7dzs9ndP7i8vbO+1dpq3VhdXXl17bW1V9auNK9tt1vlbVWI+N6zv/j3UPR/ZX1F/6MfP6rWv8f1/0JeqR9pzIbDlME+uHXvk/1qfWgRRfxLL1a//54+Jn7+nvhs+T2Qz784qB/260c999NfP1eZWBl/c8Tr/7C//6VRCx3y0te/87sTPhQAmILBKGu3u39wfb3dbk2s8n6WZRMO8X9UIj3pg4vhYkTMPufJVGqTficsPC49nXLlwuORxv9SGceeLQAA4HHz0aB/1pkAAAAAAAAAAAAAAAAAAADA2dXdj3TSPyc2HPNwNl0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjWfwIAAP//nJjX8w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1m5.267094588s ago: executing program 4 (id=233): r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) unshare(0x480) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m5.003353862s ago: executing program 4 (id=236): clock_gettime(0xd112a9f7bf8269d7, 0x0) syz_io_uring_setup(0x1ec8, &(0x7f0000000300)={0x0, 0xe2af, 0x1014, 0x1, 0x297}, &(0x7f0000000200), 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x80805, 0x0) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x0) dup(r0) 1m0.522465961s ago: executing program 33 (id=264): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) 49.01680863s ago: executing program 5 (id=322): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@mark={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f00000007c0)={0xf}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x1, 0xd853, 0x400, 0x0, 0xf}) 48.703781655s ago: executing program 5 (id=323): syz_mount_image$udf(&(0x7f0000002480), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x401) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="11dac4e21c7d0fa4abb0d2b8489ae73e51ad38b15a006da58cca827ffd7ceca8393684c4dfbddc", 0x27}], 0x1) 48.296104541s ago: executing program 5 (id=327): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002300)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x38, 0x4000080}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 48.071272815s ago: executing program 5 (id=329): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x149380, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xfffe, 0x80, 0x2, 0x2b, 0x7, "041000"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 47.964161796s ago: executing program 5 (id=330): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 46.944452902s ago: executing program 5 (id=333): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec"], 0xb0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)=""/214) 31.659110109s ago: executing program 34 (id=333): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec"], 0xb0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)=""/214) 29.02852487s ago: executing program 3 (id=447): unshare(0x20000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) 28.9831837s ago: executing program 3 (id=450): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xd}, 0xa) 28.912618272s ago: executing program 3 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYBLOB]) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000000)=0x9) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r8}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) syz_emit_ethernet(0x72, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000000003c2c00fe"], 0x0) 27.234547588s ago: executing program 3 (id=454): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 26.964849682s ago: executing program 3 (id=456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf256c00000008000300", @ANYRES32=r3, @ANYBLOB="080026006c090000080027802e"], 0x2c}}, 0x20000000) 25.17637102s ago: executing program 3 (id=467): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000a81000000ff"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000380)={0x0, 0x8, 0x82, "4387669a69c28f8fc5dfd06835b85eda05271341d31ea6aebd24750306559aa7d290e526871262af844ba34993bf180b7f07a6fc7e6518daa8c1fed5fed2fe2d1cf20b80916958367292d0f297d9f3ac6a9744a0e2f79a426d3ff99a0b899f10fd86c90fd6ea7af6babc193e22a845941a0bfe34652f970941db714ada5f9a08239d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24.987758942s ago: executing program 35 (id=467): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000a81000000ff"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000380)={0x0, 0x8, 0x82, "4387669a69c28f8fc5dfd06835b85eda05271341d31ea6aebd24750306559aa7d290e526871262af844ba34993bf180b7f07a6fc7e6518daa8c1fed5fed2fe2d1cf20b80916958367292d0f297d9f3ac6a9744a0e2f79a426d3ff99a0b899f10fd86c90fd6ea7af6babc193e22a845941a0bfe34652f970941db714ada5f9a08239d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.710139044s ago: executing program 1 (id=541): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x94, 0x73, 0x8, 0x1199, 0x6821, 0x9859, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x3, 0x37, 0x5d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x7, 0xe, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x4, 0x2, 0x3}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x4, 0xfe, 0x7}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000"], 0x48}}, 0x0) 8.983450681s ago: executing program 1 (id=549): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18}}, 0x18}}, 0x4000850) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 5.636314182s ago: executing program 1 (id=559): r0 = socket$inet(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) 5.635824703s ago: executing program 1 (id=560): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0xffffffffffffffff, 0x0, 0x80}, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}}, 0x0) 5.620870183s ago: executing program 1 (id=561): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x634, &(0x7f0000000480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 4.279792893s ago: executing program 6 (id=567): socket$inet6(0x10, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) close(0x3) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r3], 0x3c}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) 2.879362846s ago: executing program 6 (id=570): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@none}) 2.852004996s ago: executing program 6 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00), 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xa, 0x1}, {0x5, 0x1}, {0xfa}], "60323bb1c3e17c83"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 2.740053938s ago: executing program 0 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff88}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 2.681758738s ago: executing program 8 (id=574): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) close(0x3) 2.510840691s ago: executing program 0 (id=576): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xce) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x16}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x70b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000019000100ffffffff00000000e00000020000000000000000000000000000000000000000000000000000000000000000000400000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000800000000000000000000000000000000000000000000000000000000000000fbffffffff01ffff00000000000000000000000000000000e700000000000000000000000000000000000000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.502556861s ago: executing program 7 (id=577): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) 2.451980792s ago: executing program 8 (id=578): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x840) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.327843924s ago: executing program 6 (id=579): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 1.856749272s ago: executing program 7 (id=580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 1.839754142s ago: executing program 0 (id=581): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) bind$can_raw(r0, &(0x7f0000000000), 0x10) 1.828195522s ago: executing program 8 (id=582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x7, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2000040, 0x6, 0xffffffffffffffff, 0xea, 0x100004}, 0x1}}]}, {0x68}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.712847343s ago: executing program 7 (id=583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000"], 0xfdef) 1.709048354s ago: executing program 0 (id=584): clock_gettime(0xd112a9f7bf8269d7, 0x0) syz_io_uring_setup(0x1ec8, &(0x7f0000000300)={0x0, 0xe2af, 0x1014, 0x1, 0x297}, &(0x7f0000000200), 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) init_module(0x0, 0x78, 0x0) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYBLOB]) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000000)=0x9) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r7}, 0x20) 418.465254ms ago: executing program 8 (id=586): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2800040, &(0x7f00000007c0)={[{@stripe={'stripe', 0x3d, 0x7a}}, {@nodiscard}, {@noquota}, {@init_itable}, {@dax_never}, {@abort}, {@sysvgroups}, {@noacl}, {@usrquota}]}, 0xc, 0x4d2, &(0x7f00000002c0)="$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") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d428", @ANYRES16=r1], 0x398}}, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) 336.920375ms ago: executing program 7 (id=587): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) 271.549516ms ago: executing program 6 (id=588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 246.101226ms ago: executing program 1 (id=589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x4, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x4, 0x7, 0x0, 0x2, {[@window={0x9, 0x3}, @md5sig={0x13, 0x12, "b930f4dd067b49aca0f4919e3e3b402f"}]}}}}}}, 0x4e) 245.250186ms ago: executing program 0 (id=590): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 148.901428ms ago: executing program 7 (id=591): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000005c0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004084) 148.475268ms ago: executing program 6 (id=592): r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000140)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x8fc]}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 86.736619ms ago: executing program 7 (id=593): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x840) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 49.215079ms ago: executing program 8 (id=594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x1c}, @void, @mpls}, 0x4) 0s ago: executing program 0 (id=595): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000080)=@bpq0, 0x10) close(r0) kernel console output (not intermixed with test programs): 637][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.982622][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.985579][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.989532][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.992533][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.995230][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.999701][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.004006][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.023528][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.027720][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.041001][ T4024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.043374][ T4024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.045691][ T4024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.049729][ T4024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.060625][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.063728][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.067660][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.070570][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.074331][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.084285][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.088154][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.090834][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.093633][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.103368][ T4023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.105883][ T4023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.109828][ T4023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.112290][ T4023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.121756][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.124060][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.135776][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.139162][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.141899][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.153566][ T4031] device veth0_macvtap entered promiscuous mode [ 47.199103][ T4031] device veth1_macvtap entered promiscuous mode [ 47.217337][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.219609][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.239971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.242795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.245426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.254078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.257616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.268349][ T4034] device veth0_vlan entered promiscuous mode [ 47.279415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.282059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.310500][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.312868][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.315705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.324655][ T4034] device veth1_vlan entered promiscuous mode [ 47.342187][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.345087][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.348872][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.351725][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.354457][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.359126][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.363273][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.368774][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.371718][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.374408][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.378525][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.381401][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.384285][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.388854][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.397302][ T4031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.399785][ T4031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.402267][ T4031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.404617][ T4031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.418798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.421724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.424566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.437885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.440688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.479948][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.482326][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.483518][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.491250][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.494113][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.494605][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.520471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.569328][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.586078][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.610447][ T4034] device veth0_macvtap entered promiscuous mode [ 47.623932][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.637465][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.640562][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.657711][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.670027][ T4034] device veth1_macvtap entered promiscuous mode [ 47.690194][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.692549][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.695660][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.698775][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.783743][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.798133][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.804939][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.821260][ T4113] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2'. [ 47.827818][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.830879][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.833918][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.844590][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.847965][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.852835][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.870630][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.873630][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.910725][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.914259][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.917514][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.923685][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.929823][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.936423][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.942590][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.950073][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.956415][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.959756][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.964161][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.981194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.983796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.998242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.011150][ T4076] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 48.017341][ T4034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.020439][ T4034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.022821][ T4034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.025279][ T4034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.149001][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.154406][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.165842][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.173339][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.175891][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.180850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.246699][ T4076] usb 1-1: Using ep0 maxpacket: 8 [ 48.248371][ T4117] udc-core: couldn't find an available UDC or it's busy [ 48.250378][ T4117] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.359901][ T4119] loop4: detected capacity change from 0 to 1024 [ 48.536486][ T4076] usb 1-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 48.539103][ T4076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.541325][ T4076] usb 1-1: Product: syz [ 48.542432][ T4076] usb 1-1: Manufacturer: syz [ 48.543659][ T4076] usb 1-1: SerialNumber: syz [ 48.603633][ T4076] usb 1-1: config 0 descriptor?? [ 48.607550][ T1533] Bluetooth: hci0: command 0x040f tx timeout [ 48.609324][ T1533] Bluetooth: hci1: command 0x040f tx timeout [ 48.612270][ T1533] Bluetooth: hci4: command 0x040f tx timeout [ 48.613989][ T1533] Bluetooth: hci3: command 0x040f tx timeout [ 48.615792][ T1533] Bluetooth: hci2: command 0x040f tx timeout [ 48.703990][ T4128] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 48.784617][ T4076] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 49.257961][ T4110] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 49.260089][ T4110] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 49.426454][ T4076] pwc: Failed to set LED on/off time (-71) [ 49.446348][ T4076] pwc: send_video_command error -71 [ 49.447919][ T4076] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 49.450383][ T4076] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 49.469533][ T4076] usb 1-1: USB disconnect, device number 2 [ 49.689546][ T4139] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6'. [ 50.122631][ T4142] loop0: detected capacity change from 0 to 1024 [ 50.526435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.689306][ T1533] Bluetooth: hci2: command 0x0419 tx timeout [ 50.691676][ T1533] Bluetooth: hci3: command 0x0419 tx timeout [ 50.694958][ T1533] Bluetooth: hci4: command 0x0419 tx timeout [ 50.732397][ T1533] Bluetooth: hci1: command 0x0419 tx timeout [ 50.807152][ T1533] Bluetooth: hci0: command 0x0419 tx timeout [ 50.983845][ T4150] netlink: 'syz.4.9': attribute type 1 has an invalid length. [ 51.013643][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9'. [ 51.016022][ T4150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9'. [ 51.053711][ T4150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9'. [ 51.474419][ T4156] loop2: detected capacity change from 0 to 512 [ 52.213149][ T4156] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 52.257244][ T4156] EXT4-fs (loop2): invalid journal inode [ 52.258989][ T4156] EXT4-fs (loop2): can't get journal size [ 52.352067][ T4156] EXT4-fs (loop2): 1 truncate cleaned up [ 52.353750][ T4156] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 52.375096][ T4156] 9pnet: Insufficient options for proto=fd [ 53.470773][ T4172] loop2: detected capacity change from 0 to 512 [ 53.545472][ T4172] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 54.830338][ T4188] loop3: detected capacity change from 0 to 2048 [ 54.847654][ T4189] netlink: 'syz.1.18': attribute type 2 has an invalid length. [ 54.849774][ T4189] netlink: 'syz.1.18': attribute type 8 has an invalid length. [ 54.851869][ T4189] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18'. [ 54.896793][ T4188] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.940235][ T4188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 55.019881][ T21] hid-generic 0008:0007:0005.0001: item fetching failed at offset 0/1 [ 55.022812][ T21] hid-generic: probe of 0008:0007:0005.0001 failed with error -22 [ 55.236521][ T4197] loop3: detected capacity change from 0 to 1024 [ 56.125268][ T4201] loop4: detected capacity change from 0 to 1024 [ 57.210391][ T4210] netlink: 'syz.3.23': attribute type 1 has an invalid length. [ 57.221718][ T4210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 57.368191][ T4212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23'. [ 58.323859][ T4220] loop4: detected capacity change from 0 to 512 [ 58.498383][ T4220] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 58.503378][ T4220] EXT4-fs (loop4): invalid journal inode [ 58.505053][ T4220] EXT4-fs (loop4): can't get journal size [ 58.540209][ T4220] EXT4-fs (loop4): 1 truncate cleaned up [ 58.548684][ T4220] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 58.777957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.337550][ T4220] 9pnet: Insufficient options for proto=fd [ 60.326633][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 60.460052][ T4245] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 60.587077][ T4245] CIFS: Unable to determine destination address [ 60.591360][ T4247] loop1: detected capacity change from 0 to 128 [ 60.605630][ T4242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.623701][ T4244] loop4: detected capacity change from 0 to 2048 [ 60.673561][ T4242] bond0: (slave rose0): Enslaving as an active interface with an up link [ 60.706277][ T4247] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 60.730481][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 60.830611][ T4244] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.940750][ T4244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'. [ 60.952894][ T4245] FAT-fs (loop1): FAT read failed (blocknr 128) [ 63.400031][ T4271] netlink: 'syz.0.33': attribute type 2 has an invalid length. [ 63.402153][ T4271] netlink: 'syz.0.33': attribute type 8 has an invalid length. [ 63.404164][ T4271] netlink: 132 bytes leftover after parsing attributes in process `syz.0.33'. [ 64.605555][ T4282] loop1: detected capacity change from 0 to 1024 [ 64.796339][ T4288] netlink: 'syz.4.40': attribute type 1 has an invalid length. [ 64.813574][ T4287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 64.834951][ T4287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 65.406121][ C0] sched: RT throttling activated [ 65.418514][ T4288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 65.425303][ T4288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 66.387924][ T4288] bond0: (slave bond_slave_1): Releasing backup interface [ 66.400572][ T4302] loop3: detected capacity change from 0 to 512 [ 66.612484][ T4302] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 66.620023][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.624069][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.765714][ T4302] EXT4-fs (loop3): invalid journal inode [ 66.777069][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.780631][ T4287] device bridge_slave_0 left promiscuous mode [ 66.782962][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.787881][ T4302] EXT4-fs (loop3): can't get journal size [ 66.822865][ T4311] ax25_connect(): syz.0.44 uses autobind, please contact jreuter@yaina.de [ 66.839180][ T4302] EXT4-fs (loop3): 1 truncate cleaned up [ 66.841104][ T4302] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 66.848527][ T4287] device bridge_slave_1 left promiscuous mode [ 66.850250][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.918820][ T4302] 9pnet: Insufficient options for proto=fd [ 66.934628][ T4287] bond0: (slave bond_slave_0): Releasing backup interface [ 67.035812][ T4287] bond0: (slave bond_slave_1): Releasing backup interface [ 67.217222][ T4287] team0: Port device team_slave_0 removed [ 67.247780][ T4314] loop3: detected capacity change from 0 to 2048 [ 67.251987][ T4287] team0: Port device team_slave_1 removed [ 67.254290][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.257135][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.260829][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.263119][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.345364][ T4317] loop2: detected capacity change from 0 to 512 [ 67.351300][ T4311] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 67.366187][ T4314] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.412985][ T4314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 67.433959][ T4317] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 67.613268][ T4329] CIFS: Unable to determine destination address [ 67.650019][ T4329] loop0: detected capacity change from 0 to 128 [ 67.747986][ T4329] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 67.895291][ T4329] FAT-fs (loop0): FAT read failed (blocknr 128) [ 68.288093][ T4337] netlink: 'syz.4.50': attribute type 2 has an invalid length. [ 68.290317][ T4337] netlink: 'syz.4.50': attribute type 8 has an invalid length. [ 68.292396][ T4337] netlink: 132 bytes leftover after parsing attributes in process `syz.4.50'. [ 68.665775][ T4077] hid-generic 0008:0007:0005.0002: item fetching failed at offset 0/1 [ 68.670175][ T4077] hid-generic: probe of 0008:0007:0005.0002 failed with error -22 [ 69.668977][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.672608][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.259831][ T4359] loop0: detected capacity change from 0 to 1024 [ 71.167934][ T4377] loop4: detected capacity change from 0 to 512 [ 71.337400][ T4377] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 71.343679][ T4377] EXT4-fs (loop4): invalid journal inode [ 71.345329][ T4377] EXT4-fs (loop4): can't get journal size [ 71.472166][ T4387] netlink: 72 bytes leftover after parsing attributes in process `syz.3.57'. [ 72.052880][ T4377] EXT4-fs (loop4): 1 truncate cleaned up [ 72.054570][ T4377] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 72.139885][ T4377] 9pnet: Insufficient options for proto=fd [ 72.252697][ T4395] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 72.359766][ T4393] loop3: detected capacity change from 0 to 2048 [ 72.364238][ T4397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.60'. [ 72.374288][ T4397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 72.390480][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 72.394554][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.404767][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.410133][ T4397] device bridge_slave_0 left promiscuous mode [ 72.412116][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.435472][ T4393] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.440447][ T4397] device bridge_slave_1 left promiscuous mode [ 72.442492][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.482785][ T4393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 72.505975][ T4397] bond0: (slave bond_slave_0): Releasing backup interface [ 72.590397][ T4397] team0: Port device team_slave_0 removed [ 72.631974][ T4397] team0: Port device team_slave_1 removed [ 72.647738][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.661772][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.674840][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.686497][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.924189][ T4405] CIFS: Unable to determine destination address [ 72.953224][ T4405] loop4: detected capacity change from 0 to 128 [ 72.956883][ T4404] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 72.985263][ T4404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 73.024252][ T4405] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 73.057322][ T4404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.61'. [ 73.327821][ T4405] FAT-fs (loop4): FAT read failed (blocknr 128) [ 73.496392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.096300][ T4404] device hsr_slave_0 left promiscuous mode [ 74.800299][ T7] cfg80211: failed to load regulatory.db [ 74.840935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.154972][ T4434] loop1: detected capacity change from 0 to 512 [ 75.229468][ T4436] loop4: detected capacity change from 0 to 2048 [ 75.233535][ T4434] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 75.245074][ T4434] EXT4-fs (loop1): invalid journal inode [ 75.263035][ T4434] EXT4-fs (loop1): can't get journal size [ 75.291244][ T4434] EXT4-fs (loop1): 1 truncate cleaned up [ 75.292995][ T4434] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 75.330606][ T4436] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.356721][ T4434] 9pnet: Insufficient options for proto=fd [ 75.381990][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 75.559180][ T4445] loop3: detected capacity change from 0 to 512 [ 76.537489][ T4445] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 76.602375][ T4459] CIFS: Unable to determine destination address [ 76.646531][ T4459] loop2: detected capacity change from 0 to 128 [ 76.691640][ T4459] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 76.866837][ T4459] FAT-fs (loop2): FAT read failed (blocknr 128) [ 77.468276][ T4449] udc-core: couldn't find an available UDC or it's busy [ 77.470361][ T4449] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.491122][ T4077] hid-generic 0008:0007:0005.0003: item fetching failed at offset 0/1 [ 78.493833][ T4077] hid-generic: probe of 0008:0007:0005.0003 failed with error -22 [ 79.717571][ T4484] loop0: detected capacity change from 0 to 512 [ 79.746938][ T4484] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 79.756587][ T4484] EXT4-fs (loop0): invalid journal inode [ 79.758427][ T4484] EXT4-fs (loop0): can't get journal size [ 79.763028][ T4488] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 79.807021][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 79.815181][ T4484] EXT4-fs (loop0): 1 truncate cleaned up [ 79.821742][ T4484] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 79.873207][ T4488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.85'. [ 80.033749][ T4496] loop1: detected capacity change from 0 to 2048 [ 80.963669][ T4496] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.155008][ T4506] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.206468][ T4506] loop4: detected capacity change from 0 to 128 [ 81.262547][ T4506] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 81.374809][ T4506] FAT-fs (loop4): FAT read failed (blocknr 128) [ 82.424837][ T4531] loop4: detected capacity change from 0 to 512 [ 82.475885][ T4531] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 82.511940][ T4531] EXT4-fs (loop4): invalid journal inode [ 82.513592][ T4531] EXT4-fs (loop4): can't get journal size [ 82.547206][ T4531] EXT4-fs (loop4): 1 truncate cleaned up [ 82.549102][ T4531] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 82.552896][ T4538] loop8: detected capacity change from 0 to 8 [ 82.603976][ T4538] Dev loop8: unable to read RDB block 8 [ 82.627068][ T4538] loop8: unable to read partition table [ 82.628851][ T4538] loop8: partition table beyond EOD, truncated [ 82.646496][ T4538] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 82.729060][ T4539] loop0: detected capacity change from 0 to 2048 [ 82.808378][ T4539] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.855855][ T4544] udc-core: couldn't find an available UDC or it's busy [ 82.858084][ T4544] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.218296][ T4551] netlink: 'syz.0.103': attribute type 1 has an invalid length. [ 83.354299][ T4551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 83.396842][ T26] audit: type=1326 audit(83.330:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b868a8 code=0x7ffc0000 [ 83.422666][ T4553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.103'. [ 83.425669][ T26] audit: type=1326 audit(83.360:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb1c8b7fc code=0x7ffc0000 [ 83.465864][ T26] audit: type=1326 audit(83.380:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb1c8b7fc code=0x7ffc0000 [ 83.475946][ T4553] bond1 (unregistering): Released all slaves [ 83.510238][ T26] audit: type=1326 audit(83.380:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb1c8b7fc code=0x7ffc0000 [ 83.526212][ T26] audit: type=1326 audit(83.380:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb1c8b7fc code=0x7ffc0000 [ 83.552945][ T26] audit: type=1326 audit(83.380:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb1c8b7fc code=0x7ffc0000 [ 83.596972][ T26] audit: type=1326 audit(83.380:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb1c8b7fc code=0x7ffc0000 [ 83.603056][ T26] audit: type=1326 audit(83.380:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb1c8b7fc code=0x7ffc0000 [ 83.631049][ T26] audit: type=1326 audit(83.380:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb1c8b7fc code=0x7ffc0000 [ 83.646184][ T26] audit: type=1326 audit(83.380:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb1c8b7fc code=0x7ffc0000 [ 85.180590][ T4590] loop3: detected capacity change from 0 to 128 [ 85.649277][ T4590] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 85.793754][ T4567] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 86.019720][ T4604] loop2: detected capacity change from 0 to 1024 [ 86.562603][ T4609] loop0: detected capacity change from 0 to 2048 [ 86.575323][ T4604] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none. [ 86.710344][ T4609] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.826513][ T4073] Bluetooth: hci3: command 0x2016 tx timeout [ 86.855211][ T4623] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 86.891318][ T4621] netlink: 988 bytes leftover after parsing attributes in process `syz.3.117'. [ 86.963119][ T4623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 86.970103][ T4623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.118'. [ 86.982617][ T4628] loop2: detected capacity change from 0 to 1024 [ 86.990666][ T4623] bond1 (unregistering): Released all slaves [ 87.026231][ T4628] EXT4-fs (loop2): Ignoring removed oldalloc option [ 87.028538][ T4628] EXT4-fs (loop2): Ignoring removed bh option [ 87.030476][ T4628] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.092716][ T4628] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 87.129490][ T4628] ======================================================= [ 87.129490][ T4628] WARNING: The mand mount option has been deprecated and [ 87.129490][ T4628] and is ignored by this kernel. Remove the mand [ 87.129490][ T4628] option from the mount to silence this warning. [ 87.129490][ T4628] ======================================================= [ 87.354200][ T4643] loop0: detected capacity change from 0 to 1024 [ 87.359680][ T4645] loop3: detected capacity change from 0 to 764 [ 87.401666][ T4645] Symlink component flag not implemented [ 87.404372][ T4645] Symlink component flag not implemented (116) [ 87.422137][ T4643] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #3: block 1: comm syz.0.126: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.456558][ T4643] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.126: Failed to acquire dquot type 0 [ 87.472467][ T4643] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.126: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.485135][ T4643] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.126: Invalid inode bitmap blk 0 in block_group 0 [ 87.496197][ T9] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.501060][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6240: comm kworker/u4:0: Failed to release dquot type 0 [ 87.514411][ T4643] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 87.536345][ T4643] EXT4-fs (loop0): 1 orphan inode deleted [ 87.537933][ T4643] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 88.897719][ T4666] loop0: detected capacity change from 0 to 16 [ 88.928282][ T4184] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.943711][ T4666] erofs: (device loop0): mounted with root inode @ nid 36. [ 89.034201][ T4671] loop3: detected capacity change from 0 to 1024 [ 89.071938][ T4184] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.102791][ T4671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.184360][ T4184] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.222395][ T4675] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 89.293519][ T4681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 89.334927][ T4184] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.361190][ T4675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.141'. [ 89.369825][ T4675] bond1 (unregistering): Released all slaves [ 89.413168][ T4688] loop1: detected capacity change from 0 to 512 [ 89.470698][ T4692] netlink: 72 bytes leftover after parsing attributes in process `syz.4.132'. [ 89.484628][ T4688] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 89.488604][ T4688] EXT4-fs (loop1): invalid journal inode [ 89.490351][ T4688] EXT4-fs (loop1): can't get journal size [ 89.542714][ T4688] EXT4-fs (loop1): 1 truncate cleaned up [ 89.544359][ T4688] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 89.575697][ T4691] loop3: detected capacity change from 0 to 1764 [ 90.054827][ T4704] usb usb1: usbfs: process 4704 (syz.3.143) did not claim interface 0 before use [ 90.464036][ T4708] loop0: detected capacity change from 0 to 512 [ 90.518491][ T4677] chnl_net:caif_netlink_parms(): no params data found [ 90.671697][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.673834][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.689510][ T4708] EXT4-fs (loop0): Ignoring removed nobh option [ 90.691312][ T4708] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.694853][ T4708] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.708120][ T4708] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 90.717604][ T4677] device bridge_slave_0 entered promiscuous mode [ 90.801086][ T4720] loop1: detected capacity change from 0 to 2048 [ 90.822310][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.824348][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.827724][ T4677] device bridge_slave_1 entered promiscuous mode [ 90.879158][ T4720] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 90.900784][ T4720] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 90.917766][ T4677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.922615][ T4677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.930129][ T4720] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 90.934055][ T4720] EXT4-fs (loop1): This should not happen!! Data will be lost [ 90.934055][ T4720] [ 90.950861][ T4720] EXT4-fs (loop1): Total free blocks count 0 [ 90.952705][ T4720] EXT4-fs (loop1): Free/Dirty block details [ 90.954372][ T4720] EXT4-fs (loop1): free_blocks=66060288 [ 90.955896][ T4720] EXT4-fs (loop1): dirty_blocks=32 [ 90.972179][ T4720] EXT4-fs (loop1): Block reservation details [ 90.996426][ T4720] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 91.058293][ T4677] team0: Port device team_slave_0 added [ 91.061614][ T383] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 91.065104][ T383] EXT4-fs (loop1): This should not happen!! Data will be lost [ 91.065104][ T383] [ 91.095871][ T4677] team0: Port device team_slave_1 added [ 91.222192][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.224117][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.248592][ T4677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.253142][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.255135][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.298527][ T4737] loop4: detected capacity change from 0 to 512 [ 91.326475][ T4677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.326667][ T4073] Bluetooth: hci2: command 0x0409 tx timeout [ 91.336056][ T4740] loop0: detected capacity change from 0 to 128 [ 91.382935][ T4740] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 91.383422][ T4737] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.151: iget: bad extended attribute block 1 [ 91.393522][ T4740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.411245][ T4737] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.151: couldn't read orphan inode 15 (err -117) [ 91.449527][ T4737] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000008,nodiscard,,errors=continue. Quota mode: none. [ 91.582412][ T4677] device hsr_slave_0 entered promiscuous mode [ 91.646962][ T4677] device hsr_slave_1 entered promiscuous mode [ 91.690726][ T4677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.795798][ T4677] Cannot create hsr debugfs directory [ 92.550448][ T4757] loop4: detected capacity change from 0 to 512 [ 92.585889][ T4757] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 92.604705][ T4757] EXT4-fs (loop4): invalid journal inode [ 92.607461][ T4757] EXT4-fs (loop4): can't get journal size [ 92.611525][ T4760] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 92.647453][ T4757] EXT4-fs (loop4): 1 truncate cleaned up [ 92.649687][ T4757] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 92.683446][ T4766] loop0: detected capacity change from 0 to 1024 [ 92.779668][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 92.784906][ T4768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.156'. [ 92.804306][ T4768] bond1 (unregistering): Released all slaves [ 92.823520][ T4766] hfsplus: can't free extent [ 92.971044][ T4771] loop4: detected capacity change from 0 to 512 [ 93.031405][ T4771] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.158: iget: bad extended attribute block 1 [ 93.044540][ T4771] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.158: couldn't read orphan inode 15 (err -117) [ 93.074503][ T4677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.088939][ T4771] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000008,nodiscard,,errors=continue. Quota mode: none. [ 93.169368][ T4677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.219968][ T4677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.248521][ T4677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.406476][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 93.461987][ T4804] netlink: 356 bytes leftover after parsing attributes in process `syz.3.167'. [ 93.614255][ T4808] loop0: detected capacity change from 0 to 1024 [ 93.666391][ T4677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.714783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.721796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.738080][ T4677] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.750171][ T9] hfsplus: b-tree write err: -5, ino 4 [ 93.770831][ T4810] loop3: detected capacity change from 0 to 4096 [ 93.802950][ T4810] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 93.813773][ T4810] UDF-fs: Scanning with blocksize 512 failed [ 93.826807][ T4184] device hsr_slave_0 left promiscuous mode [ 93.847507][ T4810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.867379][ T4184] device hsr_slave_1 left promiscuous mode [ 93.884112][ T4816] loop0: detected capacity change from 0 to 2048 [ 93.936709][ T4816] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.066683][ T4184] device veth1_macvtap left promiscuous mode [ 94.069493][ T4184] device veth0_macvtap left promiscuous mode [ 94.071573][ T4184] device veth1_vlan left promiscuous mode [ 94.073511][ T4184] device veth0_vlan left promiscuous mode [ 94.395153][ T4839] loop4: detected capacity change from 0 to 1024 [ 94.440761][ T4839] tmpfs: Bad value for 'nr_inodes' [ 94.495626][ T148] hfsplus: b-tree write err: -5, ino 4 [ 94.975687][ T4184] bond0 (unregistering): Released all slaves [ 95.086875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.089881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.100268][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.102357][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.115276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.122317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.135292][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.137558][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.151581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.174956][ T4846] netlink: 'syz.4.177': attribute type 1 has an invalid length. [ 95.224669][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 95.229480][ T4848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.177'. [ 95.301520][ T4848] bond1 (unregistering): Released all slaves [ 95.383973][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.387761][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.392928][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.399724][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.416036][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.460825][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.483184][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.534393][ T1533] Bluetooth: hci2: command 0x040f tx timeout [ 95.793172][ T4677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.813119][ T4677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.920534][ T4859] capability: warning: `syz.1.180' uses deprecated v2 capabilities in a way that may be insecure [ 96.064595][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.071831][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.109248][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.131085][ T4863] loop0: detected capacity change from 0 to 1024 [ 96.131197][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.156542][ T4863] EXT4-fs (loop0): Ignoring removed oldalloc option [ 96.161560][ T4863] EXT4-fs (loop0): Ignoring removed bh option [ 96.163432][ T4863] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.169615][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.179212][ T4864] 9pnet: p9_client_clunk (4864): Trying to clunk with invalid fid [ 96.181482][ T4864] CPU: 0 PID: 4864 Comm: syz.1.181 Not tainted 5.15.185-syzkaller #0 [ 96.183738][ T4864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.186580][ T4864] Call trace: [ 96.187517][ T4864] dump_backtrace+0x0/0x43c [ 96.188730][ T4864] show_stack+0x2c/0x3c [ 96.189916][ T4864] __dump_stack+0x30/0x40 [ 96.191099][ T4864] dump_stack_lvl+0xf8/0x160 [ 96.192442][ T4864] dump_stack+0x1c/0x5c [ 96.193640][ T4864] p9_client_clunk+0x280/0x368 [ 96.195007][ T4864] v9fs_statfs+0x154/0x2d0 [ 96.196251][ T4864] user_statfs+0x1bc/0x4f0 [ 96.197518][ T4864] __arm64_sys_statfs+0xc8/0x148 [ 96.198922][ T4864] invoke_syscall+0x98/0x2b8 [ 96.200200][ T4864] el0_svc_common+0x138/0x258 [ 96.201538][ T4864] do_el0_svc+0x58/0x14c [ 96.202710][ T4864] el0_svc+0x78/0x1e0 [ 96.203833][ T4864] el0t_64_sync_handler+0xcc/0xe4 [ 96.205243][ T4864] el0t_64_sync+0x1a0/0x1a4 [ 96.268058][ T4863] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 96.432544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.434998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.445598][ T4677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.955653][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.979624][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.024023][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.027580][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.040662][ T4677] device veth0_vlan entered promiscuous mode [ 97.052167][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.054881][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.079213][ T4916] loop1: detected capacity change from 0 to 1764 [ 97.093308][ T4677] device veth1_vlan entered promiscuous mode [ 97.171581][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.174300][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.186793][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.200890][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.337547][ T4677] device veth0_macvtap entered promiscuous mode [ 97.342212][ T4677] device veth1_macvtap entered promiscuous mode [ 97.466864][ T4922] usb usb1: usbfs: process 4922 (syz.1.190) did not claim interface 0 before use [ 97.568698][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 97.977909][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.981029][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.983708][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.060072][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.062933][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.065813][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.124184][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.139447][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.142298][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.164957][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.168168][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.170869][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.173704][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.187543][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.200538][ T4677] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.203064][ T4677] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.205409][ T4677] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.216151][ T4677] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.263021][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.266067][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.272842][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.285414][ T4929] loop3: detected capacity change from 0 to 1024 [ 98.297198][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.734732][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.007960][ T4939] loop3: detected capacity change from 0 to 256 [ 99.037956][ T4093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.040369][ T4093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.044446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.048878][ T4939] exfat: Deprecated parameter 'utf8' [ 99.081899][ T4093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.084349][ T4093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.091778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.111037][ T4944] netlink: 'syz.1.197': attribute type 1 has an invalid length. [ 99.149294][ T4939] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 99.162456][ T4944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'. [ 99.253321][ T4944] bond1 (unregistering): Released all slaves [ 99.887193][ T4973] loop5: detected capacity change from 0 to 1764 [ 101.483021][ T4998] loop3: detected capacity change from 0 to 1024 [ 101.645820][ T4998] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.649225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.769262][ T5014] loop4: detected capacity change from 0 to 512 [ 101.825434][ T4070] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.993209][ T5014] EXT4-fs (loop4): Test dummy encryption mode enabled [ 102.038606][ T5014] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.215: bg 0: block 127: padding at end of block bitmap is not set [ 102.047624][ T5014] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.215: inode #1: comm syz.4.215: iget: illegal inode # [ 102.057995][ T5014] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.215: error while reading EA inode 1 err=-117 [ 102.070168][ T5014] EXT4-fs (loop4): 1 orphan inode deleted [ 102.071887][ T5014] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none. [ 102.207666][ T4070] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 102.209926][ T4070] usb 1-1: config 0 has no interface number 0 [ 102.211711][ T4070] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 102.239814][ T4070] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 102.246549][ T4070] usb 1-1: config 0 interface 255 has no altsetting 0 [ 102.248698][ T4070] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 102.253498][ T4070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.265546][ T4070] usb 1-1: config 0 descriptor?? [ 102.440838][ T5049] loop4: detected capacity change from 0 to 1024 [ 102.546463][ T4070] usb 1-1: string descriptor 0 read error: -71 [ 102.550103][ T4070] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 102.670642][ T4070] usb 1-1: USB disconnect, device number 3 [ 102.867610][ T5061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.222'. [ 102.870157][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 102.889121][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.894827][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.902909][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.907661][ T5061] device bridge_slave_0 left promiscuous mode [ 102.912691][ T5061] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.921051][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.959252][ T5061] device bridge_slave_1 left promiscuous mode [ 102.961228][ T5061] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.998998][ T5061] bond0: (slave bond_slave_0): Releasing backup interface [ 103.044879][ T5061] bond0: (slave bond_slave_1): Releasing backup interface [ 103.110674][ T5071] loop0: detected capacity change from 0 to 1764 [ 103.155946][ T5061] team0: Port device team_slave_0 removed [ 103.198780][ T5061] team0: Port device team_slave_1 removed [ 103.201177][ T5061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.211870][ T5061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.222940][ T5061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.230611][ T5061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.357472][ T4074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.279373][ T5091] netlink: 120 bytes leftover after parsing attributes in process `syz.5.232'. [ 104.322167][ T5089] loop0: detected capacity change from 0 to 1024 [ 104.735704][ T5104] CIFS: Unable to determine destination address [ 104.774883][ T5104] loop4: detected capacity change from 0 to 128 [ 104.819538][ T5104] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 104.824190][ T5107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 104.846616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.878193][ T5108] loop1: detected capacity change from 0 to 1024 [ 105.162700][ T5104] FAT-fs (loop4): FAT read failed (blocknr 128) [ 106.353789][ T5116] loop5: detected capacity change from 0 to 256 [ 106.441571][ T5116] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 106.445103][ T5116] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 106.495416][ T5125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.243'. [ 106.504127][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 106.523667][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.547711][ T4073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.556716][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.562381][ T5125] device bridge_slave_0 left promiscuous mode [ 106.564258][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.569417][ T5132] loop4: detected capacity change from 0 to 1024 [ 106.616150][ T5125] device bridge_slave_1 left promiscuous mode [ 106.618333][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.703282][ T5136] loop5: detected capacity change from 0 to 1764 [ 106.705983][ T5125] bond0: (slave bond_slave_0): Releasing backup interface [ 106.748625][ T4034] hfsplus: bad catalog entry type [ 106.769864][ T5125] bond0: (slave bond_slave_1): Releasing backup interface [ 106.810709][ T153] hfsplus: b-tree write err: -5, ino 4 [ 106.866278][ T4073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.904808][ T5125] team0: Port device team_slave_0 removed [ 106.969580][ T5147] loop0: detected capacity change from 0 to 1024 [ 106.982771][ T5125] team0: Port device team_slave_1 removed [ 106.985103][ T5125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.004022][ T5125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.010500][ T5125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.012569][ T5125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.960218][ T5159] CIFS: Unable to determine destination address [ 107.964063][ T5159] loop5: detected capacity change from 0 to 128 [ 108.017308][ T5159] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 108.170709][ T5159] FAT-fs (loop5): FAT read failed (blocknr 128) [ 108.500039][ T5168] binder: 5167:5168 tried to acquire reference to desc 0, got 1 instead [ 108.520176][ T5168] binder: 5167:5168 transaction failed 29201/-22, size 0-0 line 3059 [ 108.526092][ T3319] binder: undelivered TRANSACTION_COMPLETE [ 108.568889][ T3319] binder: undelivered TRANSACTION_ERROR: 29201 [ 108.570882][ T3319] binder: undelivered transaction 5, process died. [ 108.761796][ T5172] loop0: detected capacity change from 0 to 128 [ 108.829864][ T5172] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.902597][ T5172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.258: No space for directory leaf checksum. Please run e2fsck -D. [ 108.923177][ T5172] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.258: Directory block failed checksum [ 109.060747][ T5186] netlink: 28 bytes leftover after parsing attributes in process `syz.5.267'. [ 109.063217][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.267'. [ 109.118715][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.140393][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.142977][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.151317][ T5186] device bridge_slave_0 left promiscuous mode [ 109.153309][ T5186] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.208553][ T5186] device bridge_slave_1 left promiscuous mode [ 109.210762][ T5186] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.243334][ T5186] bond0: (slave bond_slave_0): Releasing backup interface [ 109.296092][ T5186] bond0: (slave bond_slave_1): Releasing backup interface [ 109.318724][ T5195] loop3: detected capacity change from 0 to 512 [ 109.369797][ T5186] team0: Port device team_slave_0 removed [ 109.384935][ T5186] team0: Port device team_slave_1 removed [ 109.388550][ T5186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.389811][ T5195] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.390686][ T5186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.415014][ T5186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.418194][ T5186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.425536][ T5195] EXT4-fs (loop3): 1 truncate cleaned up [ 109.430466][ T5195] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.557071][ T5203] loop0: detected capacity change from 0 to 1024 [ 109.655852][ T5206] loop1: detected capacity change from 0 to 2048 [ 109.711787][ T5209] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 109.719801][ T5206] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.795783][ T5206] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,nobarrier,noblock_validity,dioread_nolock,. Quota mode: writeback. [ 109.928194][ T5215] CIFS: Unable to determine destination address [ 109.960217][ T5215] loop3: detected capacity change from 0 to 128 [ 110.020659][ T5215] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 110.170093][ T5221] udc-core: couldn't find an available UDC or it's busy [ 110.180113][ T5218] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 110.191228][ T5221] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.212229][ T5215] FAT-fs (loop3): FAT read failed (blocknr 128) [ 110.256828][ T5190] chnl_net:caif_netlink_parms(): no params data found [ 110.524812][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.537278][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.561187][ T5190] device bridge_slave_0 entered promiscuous mode [ 110.583326][ T5190] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.595961][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.624214][ T5190] device bridge_slave_1 entered promiscuous mode [ 110.772192][ T5190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.835095][ T5190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.902710][ T5190] team0: Port device team_slave_0 added [ 110.946399][ T5190] team0: Port device team_slave_1 added [ 110.947145][ T5236] loop1: detected capacity change from 0 to 1024 [ 110.976490][ T5236] EXT4-fs (loop1): Ignoring removed nobh option [ 110.978394][ T5236] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.008910][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.010900][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.023829][ T5228] loop0: detected capacity change from 0 to 512 [ 111.040043][ T5190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.041044][ T5236] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.281: bad orphan inode 32767 [ 111.044725][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.049784][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.057169][ T5190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.076670][ T5236] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,lazytime,dioread_lock,dioread_lock,resgid=0x0000000000000000,jqfmt=vfsv0,dioread_nolock,nobh,user_xattr,mb_optimize_scan=0x0000000000000000,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 111.111296][ T5228] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 111.113868][ T5228] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 111.123938][ T5228] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 111.145970][ T5228] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 111.180300][ T5228] EXT4-fs (loop0): 1 truncate cleaned up [ 111.181847][ T5228] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.seclabel,,errors=continue. Quota mode: writeback. [ 111.239323][ T5190] device hsr_slave_0 entered promiscuous mode [ 111.248584][ T4070] Bluetooth: hci4: command 0x0409 tx timeout [ 111.256730][ T5190] device hsr_slave_1 entered promiscuous mode [ 111.306659][ T5190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.306710][ T5190] Cannot create hsr debugfs directory [ 111.329073][ T5228] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 111.573513][ T5260] udc-core: couldn't find an available UDC or it's busy [ 111.575555][ T5260] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 112.385255][ T4070] hid-generic 0008:0007:0005.0004: item fetching failed at offset 0/1 [ 112.416764][ T4070] hid-generic: probe of 0008:0007:0005.0004 failed with error -22 [ 112.571639][ T5273] loop3: detected capacity change from 0 to 16 [ 112.574953][ T5271] loop1: detected capacity change from 0 to 1024 [ 112.599984][ T5273] erofs: (device loop3): mounted with root inode @ nid 36. [ 112.714331][ T5190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 112.898836][ T5190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 112.937737][ T5190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 112.986339][ T1533] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.998190][ T5276] syz.3.288 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 113.337013][ T1533] usb 1-1: Using ep0 maxpacket: 32 [ 113.559744][ T5278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 113.596426][ T1533] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 113.598717][ T1533] usb 1-1: config 0 has no interface number 0 [ 113.600411][ T1533] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.611850][ T5279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 113.618696][ T1533] usb 1-1: config 0 interface 85 has no altsetting 0 [ 113.625271][ T4071] Bluetooth: hci4: command 0x041b tx timeout [ 113.629473][ T5190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 113.796475][ T1533] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 113.799304][ T1533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.801564][ T1533] usb 1-1: Product: syz [ 113.802759][ T1533] usb 1-1: Manufacturer: syz [ 113.804037][ T1533] usb 1-1: SerialNumber: syz [ 113.806374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.828486][ T1533] usb 1-1: config 0 descriptor?? [ 113.855314][ T5190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.882877][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.885511][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.898805][ T5190] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.970216][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.973394][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.980123][ T5264] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.982236][ T5264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.006683][ T5294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.292'. [ 114.009200][ T5294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 114.012504][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.028842][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.034838][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.048089][ T5264] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.050328][ T5264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.070005][ T5300] loop1: detected capacity change from 0 to 1024 [ 114.075993][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.092858][ T5272] loop0: detected capacity change from 0 to 128 [ 114.095262][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.106900][ T4077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.108789][ T5300] EXT4-fs (loop1): Ignoring removed orlov option [ 114.111077][ T5300] EXT4-fs (loop1): Ignoring removed nobh option [ 114.113963][ T5300] EXT4-fs (loop1): Ignoring removed bh option [ 114.115667][ T5300] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.131137][ T5272] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.143630][ T5272] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.155033][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.178573][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.181706][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.184537][ T5300] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,barrier=0x0000000000000002,noquota,orlov,max_dir_size_kb=0x00000000004007af,data_err=ignore,grpquota,nobh,resuid=0x0000000000000000,bh,dioread_nolock,. Quota mode: writeback. [ 114.195080][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.208618][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.221845][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.225054][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.271346][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.301658][ T26] kauditd_printk_skb: 264 callbacks suppressed [ 114.301671][ T26] audit: type=1326 audit(114.240:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.3.295" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff94e198a8 code=0x0 [ 114.333485][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.352215][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.363787][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.372457][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.523742][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.549179][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.558301][ T5190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.596399][ T4077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.626526][ T1533] appletouch 1-1:0.85: Geyser mode initialized. [ 114.629775][ T1533] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input3 [ 114.678338][ T5317] loop1: detected capacity change from 0 to 4096 [ 114.843733][ T3319] usb 1-1: USB disconnect, device number 4 [ 115.646368][ T4071] Bluetooth: hci4: command 0x040f tx timeout [ 115.651210][ T3319] appletouch 1-1:0.85: input: appletouch disconnected [ 116.365013][ T21] hid-generic 0008:0007:0005.0005: item fetching failed at offset 0/1 [ 116.647852][ T5341] netlink: 'syz.1.299': attribute type 1 has an invalid length. [ 116.650959][ T21] hid-generic: probe of 0008:0007:0005.0005 failed with error -22 [ 116.756832][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 116.797418][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.800414][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.803669][ T5341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.299'. [ 116.810576][ T5341] bond1 (unregistering): Released all slaves [ 116.902194][ T5351] netlink: 88 bytes leftover after parsing attributes in process `syz.0.300'. [ 116.915234][ T5190] device veth0_vlan entered promiscuous mode [ 116.961323][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.964160][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.973740][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.986052][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.033893][ T5190] device veth1_vlan entered promiscuous mode [ 117.083112][ T5365] loop0: detected capacity change from 0 to 256 [ 117.142474][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.145577][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.150839][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.153976][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.157694][ T5365] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 117.227179][ T5369] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 117.230680][ T5190] device veth0_macvtap entered promiscuous mode [ 117.245103][ T5190] device veth1_macvtap entered promiscuous mode [ 117.282902][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.285975][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.305756][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.380364][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.383208][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.387031][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.394057][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.408336][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.411303][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.415166][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.440848][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.444999][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.477965][ T5190] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.490504][ T5190] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.499804][ T5190] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.512108][ T5190] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.726711][ T3319] Bluetooth: hci4: command 0x0419 tx timeout [ 117.743681][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.752045][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.759341][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.883502][ T5392] loop1: detected capacity change from 0 to 1764 [ 117.902291][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.905421][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.916037][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.194229][ T4071] hid-generic 0008:0007:0005.0006: item fetching failed at offset 0/1 [ 119.824216][ T4071] hid-generic: probe of 0008:0007:0005.0006 failed with error -22 [ 119.844057][ T5414] loop1: detected capacity change from 0 to 16 [ 119.930241][ T5414] erofs: (device loop1): mounted with root inode @ nid 36. [ 120.099185][ T5422] loop6: detected capacity change from 0 to 2048 [ 120.228623][ T5422] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,journal_dev=0x000000000000009b,nobarrier,,errors=continue. Quota mode: none. [ 120.332058][ T5438] loop3: detected capacity change from 0 to 1024 [ 120.601077][ T5440] loop6: detected capacity change from 0 to 256 [ 120.622668][ T5440] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.622793][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.322'. [ 120.626871][ T5440] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 120.656714][ T5440] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 120.716409][ T5445] netlink: 'syz.5.322': attribute type 20 has an invalid length. [ 120.720007][ T5445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.322'. [ 120.985713][ T5451] loop5: detected capacity change from 0 to 128 [ 121.145109][ T5451] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 121.152851][ T5451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.239247][ T5455] loop6: detected capacity change from 0 to 512 [ 121.375032][ T5455] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 121.380835][ T5467] loop3: detected capacity change from 0 to 512 [ 121.391886][ T5465] loop1: detected capacity change from 0 to 1024 [ 121.475678][ T5455] EXT4-fs error (device loop6): ext4_xattr_block_get:546: inode #15: comm syz.6.324: corrupted xattr block 33 [ 121.525088][ T5455] EXT4-fs error (device loop6): ext4_xattr_block_get:546: inode #15: comm syz.6.324: corrupted xattr block 33 [ 121.529500][ T5467] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 121.544993][ T5455] fscrypt (loop6, inode 15): Error -117 getting encryption context [ 122.833214][ T5501] netlink: 'syz.6.332': attribute type 1 has an invalid length. [ 122.843435][ T5501] netlink: 28 bytes leftover after parsing attributes in process `syz.6.332'. [ 123.842340][ T5512] loop0: detected capacity change from 0 to 1024 [ 123.889978][ T5501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.034957][ T5501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.638794][ T5529] loop1: detected capacity change from 0 to 2048 [ 124.730827][ T5529] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.777096][ T5501] bond0 (unregistering): Released all slaves [ 124.885805][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 125.079261][ T5544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'. [ 125.081669][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 125.129102][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.132790][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.134987][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.159744][ T5544] device bridge_slave_0 left promiscuous mode [ 125.161579][ T5544] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.260120][ T5544] device bridge_slave_1 left promiscuous mode [ 125.262082][ T5544] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.299382][ T5544] bond0: (slave bond_slave_0): Releasing backup interface [ 125.345922][ T5544] bond0: (slave bond_slave_1): Releasing backup interface [ 125.512763][ T5544] team0: Port device team_slave_0 removed [ 125.542204][ T5544] team0: Port device team_slave_1 removed [ 125.544474][ T5544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.573411][ T5544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.582325][ T5544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.584636][ T5544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.735417][ T5568] udc-core: couldn't find an available UDC or it's busy [ 125.741965][ T5568] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.941566][ T5575] loop0: detected capacity change from 0 to 1024 [ 126.158848][ T5577] loop1: detected capacity change from 0 to 1024 [ 126.705855][ T5586] loop0: detected capacity change from 0 to 2048 [ 126.772691][ T5586] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.848513][ T5593] netlink: 'syz.3.354': attribute type 1 has an invalid length. [ 126.953452][ T5593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.354'. [ 126.983757][ T5593] bond1 (unregistering): Released all slaves [ 127.119694][ T5601] loop0: detected capacity change from 0 to 1764 [ 129.434684][ T5626] loop6: detected capacity change from 0 to 2048 [ 129.524933][ T5630] loop3: detected capacity change from 0 to 256 [ 129.595419][ T5630] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 129.693798][ T5630] attempt to access beyond end of device [ 129.693798][ T5630] loop3: rw=524288, want=696, limit=256 [ 129.707507][ T5630] attempt to access beyond end of device [ 129.707507][ T5630] loop3: rw=524288, want=952, limit=256 [ 129.710627][ T5630] attempt to access beyond end of device [ 129.710627][ T5630] loop3: rw=0, want=448, limit=256 [ 129.713730][ T5630] attempt to access beyond end of device [ 129.713730][ T5630] loop3: rw=0, want=448, limit=256 [ 129.718217][ T5626] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.754144][ T5630] attempt to access beyond end of device [ 129.754144][ T5630] loop3: rw=0, want=448, limit=256 [ 129.757716][ T5630] attempt to access beyond end of device [ 129.757716][ T5630] loop3: rw=0, want=448, limit=256 [ 129.760852][ T5630] attempt to access beyond end of device [ 129.760852][ T5630] loop3: rw=0, want=448, limit=256 [ 129.763907][ T5630] attempt to access beyond end of device [ 129.763907][ T5630] loop3: rw=0, want=448, limit=256 [ 129.767813][ T5630] attempt to access beyond end of device [ 129.767813][ T5630] loop3: rw=0, want=448, limit=256 [ 129.770978][ T5630] attempt to access beyond end of device [ 129.770978][ T5630] loop3: rw=0, want=448, limit=256 [ 130.132994][ T5640] input: syz1 as /devices/virtual/input/input5 [ 130.700310][ T5649] loop6: detected capacity change from 0 to 128 [ 131.319065][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.321045][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.336753][ T5648] loop3: detected capacity change from 0 to 1024 [ 131.388113][ T5646] loop6: detected capacity change from 0 to 1024 [ 131.419362][ T5646] EXT4-fs (loop6): Ignoring removed orlov option [ 131.421152][ T5646] EXT4-fs (loop6): Ignoring removed nobh option [ 131.422924][ T5646] EXT4-fs (loop6): Ignoring removed bh option [ 131.424745][ T5646] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.462414][ T5344] hfsplus: b-tree write err: -5, ino 4 [ 131.465261][ T5646] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 131.727332][ T5664] loop1: detected capacity change from 0 to 2048 [ 131.801581][ T5664] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.981704][ T5673] loop6: detected capacity change from 0 to 1024 [ 132.046546][ T5673] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 132.077340][ T4075] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 132.097092][ T5673] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 132.271451][ T5679] loop1: detected capacity change from 0 to 128 [ 132.436565][ T4075] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 132.439207][ T4075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.449907][ T4075] usb 1-1: config 0 descriptor?? [ 132.657004][ T5687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.383'. [ 132.659526][ T5687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 132.682706][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.684909][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.696745][ T1533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.956032][ T5696] loop6: detected capacity change from 0 to 1024 [ 133.043648][ T5701] udc-core: couldn't find an available UDC or it's busy [ 133.045736][ T5701] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.147002][ T1533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.438671][ T5710] loop6: detected capacity change from 0 to 32768 [ 133.488875][ T4217] loop6: p1 p2 p3 < p5 p6 > [ 133.492019][ T4217] loop6: p1 size 242222080 extends beyond EOD, truncated [ 133.496441][ T4217] loop6: p2 start 4294967295 is beyond EOD, truncated [ 133.521459][ T5710] loop6: p1 p2 p3 < p5 p6 > [ 133.523436][ T5710] loop6: p1 size 242222080 extends beyond EOD, truncated [ 133.527710][ T5710] loop6: p2 start 4294967295 is beyond EOD, truncated [ 133.605143][ T5716] loop3: detected capacity change from 0 to 512 [ 133.664316][ T5716] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.395: casefold flag without casefold feature [ 133.685125][ T5716] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.395: couldn't read orphan inode 15 (err -117) [ 133.705303][ T5716] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.833536][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 133.835706][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 133.839705][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 133.845552][ T4217] udevd[4217]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 133.891523][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 133.896514][ T5725] loop3: detected capacity change from 0 to 256 [ 133.899440][ T5725] FAT-fs (loop3): Unrecognized mount option "uni_xla=0" or missing value [ 133.910359][ T5725] netlink: 32 bytes leftover after parsing attributes in process `syz.3.397'. [ 133.910618][ T4218] udevd[4218]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 133.914274][ T5725] netlink: 32 bytes leftover after parsing attributes in process `syz.3.397'. [ 133.920349][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 133.923417][ T5725] Zero length message leads to an empty skb [ 133.944371][ T4217] udevd[4217]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 133.985190][ T5727] loop3: detected capacity change from 0 to 1024 [ 134.007393][ T4075] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 134.010242][ T4075] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 134.013499][ T4075] asix: probe of 1-1:0.0 failed with error -71 [ 134.032857][ T4075] usb 1-1: USB disconnect, device number 5 [ 134.042047][ T5730] udc-core: couldn't find an available UDC or it's busy [ 134.044033][ T5730] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.093480][ T5727] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.100161][ T5732] loop1: detected capacity change from 0 to 4096 [ 134.119829][ T5732] EXT4-fs (loop1): Test dummy encryption mode enabled [ 134.121720][ T5732] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 134.122079][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 134.143929][ T5727] device veth3 entered promiscuous mode [ 134.146707][ T5732] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,test_dummy_encryption,bsddf,discard,data_err=abort,mblk_io_submit,nobarrier,quota,,errors=continue. Quota mode: writeback. [ 134.215767][ T5737] udc-core: couldn't find an available UDC or it's busy [ 134.218536][ T5737] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.337034][ T5743] loop3: detected capacity change from 0 to 512 [ 135.073762][ T5754] raw_sendmsg: syz.1.409 forgot to set AF_INET. Fix it! [ 135.426215][ T5488] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.435335][ T5772] loop3: detected capacity change from 0 to 16 [ 135.467987][ T5776] loop6: detected capacity change from 0 to 128 [ 135.513913][ T5776] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.525321][ T5772] erofs: (device loop3): mounted with root inode @ nid 36. [ 137.053346][ T5488] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.056653][ T5488] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.058515][ T5488] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 137.060861][ T5488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.105766][ T5488] usb 1-1: config 0 descriptor?? [ 137.167855][ T5802] loop3: detected capacity change from 0 to 4096 [ 137.211971][ T5802] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 137.220585][ T5802] UDF-fs: Scanning with blocksize 512 failed [ 137.242095][ T5802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.353727][ T26] audit: type=1326 audit(137.290:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.3.429" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff94e198a8 code=0x0 [ 137.615976][ T5488] hid-generic 0003:05AC:027A.0007: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 137.814741][ T1533] usb 1-1: USB disconnect, device number 6 [ 138.034443][ T5819] loop1: detected capacity change from 0 to 1024 [ 138.222372][ T5824] loop6: detected capacity change from 0 to 1764 [ 139.944745][ T5840] loop3: detected capacity change from 0 to 1756 [ 139.982903][ T5844] loop1: detected capacity change from 0 to 2048 [ 140.067033][ T5844] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.142419][ T5844] fs-verity: sha512 using implementation "sha512-arm64" [ 140.206255][ T5488] Bluetooth: hci5: command 0x0409 tx timeout [ 140.308800][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 140.374603][ T26] audit: type=1326 audit(140.310:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 140.383616][ T26] audit: type=1326 audit(140.310:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 140.408854][ T26] audit: type=1326 audit(140.310:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 140.429095][ T26] audit: type=1326 audit(140.310:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 140.453494][ T26] audit: type=1326 audit(140.310:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 140.475442][ T26] audit: type=1326 audit(140.310:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 140.490301][ T5864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.445'. [ 140.507813][ T26] audit: type=1326 audit(140.310:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 140.513734][ T26] audit: type=1326 audit(140.310:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 140.542822][ T26] audit: type=1326 audit(140.310:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 140.622404][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.624775][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.635198][ T5823] device bridge_slave_0 entered promiscuous mode [ 140.677267][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.683852][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.875621][ T5823] device bridge_slave_1 entered promiscuous mode [ 142.168479][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.199245][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.230779][ T5887] loop6: detected capacity change from 0 to 1764 [ 142.296510][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 142.365442][ T26] kauditd_printk_skb: 642 callbacks suppressed [ 142.365453][ T26] audit: type=1326 audit(142.300:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 142.377096][ T5823] team0: Port device team_slave_0 added [ 142.380838][ T5823] team0: Port device team_slave_1 added [ 142.391480][ T26] audit: type=1326 audit(142.310:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 142.448216][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.450211][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.489590][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.494069][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.575347][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.575569][ T26] audit: type=1326 audit(142.310:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 142.589641][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.868170][ T26] audit: type=1326 audit(142.310:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 142.961474][ T26] audit: type=1326 audit(142.310:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 143.007636][ T26] audit: type=1326 audit(142.310:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 143.034017][ T26] audit: type=1326 audit(142.310:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 143.064441][ T26] audit: type=1326 audit(142.310:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 143.095065][ T26] audit: type=1326 audit(142.310:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 143.116863][ T26] audit: type=1326 audit(142.310:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa60d77fc code=0x7ffc0000 [ 143.257583][ T5907] loop1: detected capacity change from 0 to 256 [ 143.263384][ T5907] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.266568][ T5907] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 143.274322][ T5907] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 143.387432][ T5823] device hsr_slave_0 entered promiscuous mode [ 143.393823][ T5909] loop6: detected capacity change from 0 to 1764 [ 143.436719][ T5823] device hsr_slave_1 entered promiscuous mode [ 143.476344][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.478437][ T5823] Cannot create hsr debugfs directory [ 144.342746][ T5920] loop1: detected capacity change from 0 to 512 [ 144.376373][ T4077] Bluetooth: hci5: command 0x040f tx timeout [ 144.384470][ T5823] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 144.409131][ T5920] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.423726][ T5920] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.464: corrupted in-inode xattr [ 144.433568][ T5920] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.464: couldn't read orphan inode 15 (err -117) [ 144.442769][ T5920] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 144.574499][ T5922] netlink: 72 bytes leftover after parsing attributes in process `syz.6.465'. [ 144.579515][ T5823] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 144.688750][ T5823] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 144.729205][ T5823] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 144.823101][ T5937] loop1: detected capacity change from 0 to 1764 [ 144.924372][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.935987][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.966581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.972224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.975695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.011079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.035194][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.037322][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.056326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.059354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.061916][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.063967][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.066543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.069659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.072542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.075971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.091602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.095067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.499885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.626911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.657501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.665055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.699915][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.768059][ T5953] udc-core: couldn't find an available UDC or it's busy [ 145.770170][ T5953] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 145.828916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.831804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.883370][ T5953] 9pnet: Insufficient options for proto=fd [ 146.054254][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 146.143522][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.145576][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.289185][ T5935] device bridge_slave_0 entered promiscuous mode [ 146.447043][ T25] Bluetooth: hci5: command 0x0419 tx timeout [ 146.811930][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.817648][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.828402][ T5935] device bridge_slave_1 entered promiscuous mode [ 146.846521][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 146.878803][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.881150][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.943483][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.955059][ T5976] loop0: detected capacity change from 0 to 256 [ 146.984114][ T5972] loop6: detected capacity change from 0 to 1024 [ 147.132639][ T5976] exfat: Deprecated parameter 'namecase' [ 147.134332][ T5976] exfat: Deprecated parameter 'namecase' [ 147.155700][ T5976] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 147.211398][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.229900][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.325014][ T4158] hfsplus: b-tree write err: -5, ino 4 [ 147.409835][ T5989] udc-core: couldn't find an available UDC or it's busy [ 147.413540][ T5989] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 148.278438][ T5935] team0: Port device team_slave_0 added [ 148.376467][ T5999] loop1: detected capacity change from 0 to 1024 [ 148.437154][ T5999] hfsplus: can't free extent [ 148.454491][ T5935] team0: Port device team_slave_1 added [ 148.490878][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.492840][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.511666][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.515270][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.532807][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.554661][ T6003] loop0: detected capacity change from 0 to 128 [ 148.565612][ T6002] udc-core: couldn't find an available UDC or it's busy [ 148.568089][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.569960][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.577260][ T6002] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 148.579943][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.634021][ T6002] 9pnet: Insufficient options for proto=fd [ 148.694201][ T5823] device veth0_vlan entered promiscuous mode [ 148.762144][ T6003] loop0: detected capacity change from 0 to 1024 [ 148.799992][ T5935] device hsr_slave_0 entered promiscuous mode [ 148.839131][ T6003] EXT4-fs (loop0): Ignoring removed orlov option [ 148.842598][ T6003] EXT4-fs (loop0): Ignoring removed nobh option [ 148.872855][ T5935] device hsr_slave_1 entered promiscuous mode [ 148.917683][ T6003] EXT4-fs (loop0): Ignoring removed bh option [ 148.920345][ T6003] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.636486][ T25] Bluetooth: hci3: command 0x041b tx timeout [ 149.656612][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.666966][ T5935] Cannot create hsr debugfs directory [ 149.674953][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.677959][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.686840][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.690232][ T6003] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 149.698303][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.745673][ T5823] device veth1_vlan entered promiscuous mode [ 149.748046][ T6012] loop6: detected capacity change from 0 to 1164 [ 149.908545][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.911423][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.919003][ T5823] device veth0_macvtap entered promiscuous mode [ 149.950044][ T5823] device veth1_macvtap entered promiscuous mode [ 149.991689][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.996986][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.004824][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.013723][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.017637][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.020519][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.028457][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.045212][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.050665][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.063477][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.070831][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.075619][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.131735][ T5823] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.134417][ T5823] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.139075][ T5823] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.141530][ T5823] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.212387][ T5935] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 150.290741][ T5935] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 150.339193][ T5935] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 150.403165][ T5935] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 150.465900][ T5264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.473786][ T5264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.480994][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.566622][ T5264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.569170][ T5264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.650082][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.767345][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.797024][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.799811][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.808983][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.823709][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.827316][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.830026][ T5264] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.832330][ T5264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.859974][ T6031] ax25_connect(): syz.1.494 uses autobind, please contact jreuter@yaina.de [ 150.860531][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.865472][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.883572][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.934464][ T5264] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.936591][ T5264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.968375][ T6036] CIFS: Unable to determine destination address [ 150.989820][ T6036] loop7: detected capacity change from 0 to 128 [ 151.107343][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.110520][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.113628][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.160127][ T6036] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 151.168689][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.190607][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.217282][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.238205][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.258336][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.281894][ T5935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.289752][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.315976][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.319612][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.334414][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.420217][ T6036] FAT-fs (loop7): FAT read failed (blocknr 128) [ 151.533647][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.536555][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.571337][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.646847][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 151.674773][ T6046] loop7: detected capacity change from 0 to 256 [ 151.683191][ T6046] exfat: Unknown parameter 'keep_last_dots' [ 152.878412][ T6056] loop1: detected capacity change from 0 to 1024 [ 152.977352][ T5949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.980298][ T153] hfsplus: b-tree write err: -5, ino 4 [ 152.992440][ T5949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.043999][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.047805][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.057081][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.066748][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.083397][ T5935] device veth0_vlan entered promiscuous mode [ 153.102093][ T5935] device veth1_vlan entered promiscuous mode [ 153.177517][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.185751][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.189684][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.202708][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.221157][ T5935] device veth0_macvtap entered promiscuous mode [ 153.239094][ T5935] device veth1_macvtap entered promiscuous mode [ 153.327491][ T6074] CIFS: Unable to determine destination address [ 153.335192][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.343045][ T6074] loop7: detected capacity change from 0 to 128 [ 153.366425][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.369161][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.406237][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.410499][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.412647][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.415677][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.422112][ T6074] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 153.429121][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.435728][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.472539][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.475617][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.503446][ T6074] FAT-fs (loop7): FAT read failed (blocknr 128) [ 153.519095][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.547251][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.551281][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.557666][ T5935] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.560227][ T5935] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.562639][ T5935] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.565163][ T5935] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.666473][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.669659][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.738209][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 153.865002][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.868825][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.873650][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.882736][ T6088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.514'. [ 153.960698][ T6094] loop6: detected capacity change from 0 to 1024 [ 153.964752][ T5344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.967781][ T5344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.973943][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.982004][ T6092] loop7: detected capacity change from 0 to 1764 [ 154.191907][ T6104] loop8: detected capacity change from 0 to 1764 [ 154.436502][ T4073] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.001479][ T4073] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 155.004150][ T4073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.025348][ T4073] usb 1-1: config 0 descriptor?? [ 155.069014][ T4073] usb 1-1: selecting invalid altsetting 1 [ 155.189015][ T4073] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 155.396790][ T6120] CIFS: Unable to determine destination address [ 155.408275][ T4073] usb 1-1: USB disconnect, device number 7 [ 155.419599][ T6120] loop7: detected capacity change from 0 to 128 [ 156.193568][ T6120] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 157.178584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.267148][ T6115] FAT-fs (loop7): FAT read failed (blocknr 128) [ 157.321225][ T6137] loop6: detected capacity change from 0 to 1764 [ 157.419895][ T6146] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 158.830298][ T6159] udc-core: couldn't find an available UDC or it's busy [ 158.839947][ T6159] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 159.544679][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.541'. [ 160.553797][ T6185] CIFS: Unable to determine destination address [ 160.575402][ T6185] loop0: detected capacity change from 0 to 128 [ 160.633859][ T6185] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 160.752004][ T6189] batman_adv: batadv0: Adding interface: dummy0 [ 160.753806][ T6189] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.823564][ T6185] FAT-fs (loop0): FAT read failed (blocknr 128) [ 160.836079][ T6189] batman_adv: batadv0: Interface activated: dummy0 [ 161.067315][ T4217] udevd[4217]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.087729][ T6189] batadv0: mtu less than device minimum [ 161.099300][ T6189] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.107042][ T6189] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.114500][ T6189] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.121942][ T6189] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.129273][ T6189] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.136634][ T6189] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.143821][ T6189] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.151069][ T6189] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 162.946312][ T6207] netlink: 44 bytes leftover after parsing attributes in process `syz.7.552'. [ 162.949068][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.7.552'. [ 163.632624][ T6201] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.687827][ T6201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.690175][ T6201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.160692][ T6226] loop1: detected capacity change from 0 to 1024 [ 165.063256][ T6232] CIFS: Unable to determine destination address [ 165.078417][ T6232] loop0: detected capacity change from 0 to 128 [ 165.253577][ T6236] smc: net device bond0 applied user defined pnetid SYZ0 [ 165.278748][ T6234] loop8: detected capacity change from 0 to 512 [ 165.599288][ T6232] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 165.602392][ T6234] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 165.687176][ T6234] EXT4-fs (loop8): 1 truncate cleaned up [ 165.688982][ T6234] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.719657][ T6232] FAT-fs (loop0): FAT read failed (blocknr 128) [ 166.797324][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.7.572'. [ 166.839073][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.571'. [ 166.938544][ C1] net_ratelimit: 11 callbacks suppressed [ 166.938559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.151188][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.160539][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.162996][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.258816][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.263026][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.288248][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.304505][ T6267] device bridge_slave_0 left promiscuous mode [ 167.327276][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.359683][ T6267] device bridge_slave_1 left promiscuous mode [ 167.361549][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.407629][ T6267] bond0: (slave bond_slave_0): Releasing backup interface [ 167.470571][ T6267] bond0: (slave bond_slave_1): Releasing backup interface [ 167.554417][ T6267] team0: Port device team_slave_0 removed [ 167.596731][ T6267] team0: Port device team_slave_1 removed [ 167.602567][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.613057][ T6267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.621957][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.628728][ T6267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.802339][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.8.582'. [ 167.809534][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.8.582'. [ 167.866486][ T6282] syz.7.583 uses obsolete (PF_INET,SOCK_PACKET) [ 167.951081][ T6285] CIFS: Unable to determine destination address [ 167.966687][ T6285] loop0: detected capacity change from 0 to 128 [ 168.005457][ T6285] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 169.074202][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 169.183496][ T1533] Bluetooth: hci0: command 0x0406 tx timeout [ 169.212526][ T6285] FAT-fs (loop0): FAT read failed (blocknr 128) [ 169.325004][ T6293] loop8: detected capacity change from 0 to 2048 [ 169.419276][ T6293] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.450915][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.8.586'. [ 169.544200][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.551781][ T6312] [ 169.552419][ T6312] ====================================================== [ 169.552745][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.554276][ T6312] WARNING: possible circular locking dependency detected [ 169.554285][ T6312] 5.15.185-syzkaller #0 Not tainted [ 169.557358][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.558206][ T6312] ------------------------------------------------------ [ 169.558213][ T6312] syz.0.595/6312 is trying to acquire lock: [ 169.561517][ T6310] device bridge_slave_0 left promiscuous mode [ 169.561806][ T6312] ffff8000162886e8 [ 169.564058][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.565451][ T6312] (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 169.571990][ T6312] [ 169.571990][ T6312] but task is already holding lock: [ 169.574000][ T6312] ffff0000cecdc120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_setsockopt+0x274/0xa5c [ 169.576530][ T6312] [ 169.576530][ T6312] which lock already depends on the new lock. [ 169.576530][ T6312] [ 169.579390][ T6312] [ 169.579390][ T6312] the existing dependency chain (in reverse order) is: [ 169.581887][ T6312] [ 169.581887][ T6312] -> #1 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 169.584025][ T6312] lock_sock_nested+0xd8/0x1d4 [ 169.585512][ T6312] ax25_device_event+0x20c/0x590 [ 169.587052][ T6312] raw_notifier_call_chain+0xd4/0x164 [ 169.588704][ T6312] dev_close_many+0x2cc/0x440 [ 169.590149][ T6312] dev_close+0x148/0x1f8 [ 169.591487][ T6312] bpq_device_event+0x318/0x824 [ 169.593003][ T6312] raw_notifier_call_chain+0xd4/0x164 [ 169.594662][ T6312] dev_close_many+0x2cc/0x440 [ 169.596127][ T6312] dev_close+0x148/0x1f8 [ 169.597518][ T6312] bond_setup_by_slave+0x70/0x318 [ 169.599093][ T6312] bond_enslave+0x624/0x3014 [ 169.600567][ T6312] bond_do_ioctl+0x6ec/0xb3c [ 169.601977][ T6312] dev_ifsioc+0xc44/0xef4 [ 169.603307][ T6312] dev_ioctl+0x4d0/0xc94 [ 169.604603][ T6312] sock_do_ioctl+0x18c/0x240 [ 169.606059][ T6312] sock_ioctl+0x5c8/0x87c [ 169.607395][ T6312] __arm64_sys_ioctl+0x14c/0x1c8 [ 169.608824][ T6312] invoke_syscall+0x98/0x2b8 [ 169.610230][ T6312] el0_svc_common+0x138/0x258 [ 169.611638][ T6312] do_el0_svc+0x58/0x14c [ 169.612975][ T6312] el0_svc+0x78/0x1e0 [ 169.614258][ T6312] el0t_64_sync_handler+0xcc/0xe4 [ 169.615753][ T6312] el0t_64_sync+0x1a0/0x1a4 [ 169.617207][ T6312] [ 169.617207][ T6312] -> #0 (rtnl_mutex){+.+.}-{3:3}: [ 169.619268][ T6312] __lock_acquire+0x2928/0x651c [ 169.620787][ T6312] lock_acquire+0x1f4/0x620 [ 169.622118][ T6312] __mutex_lock_common+0x194/0x1edc [ 169.623791][ T6312] mutex_lock_nested+0xac/0x11c [ 169.625239][ T6312] rtnl_lock+0x20/0x2c [ 169.626523][ T6312] ax25_setsockopt+0x870/0xa5c [ 169.628005][ T6312] __sys_setsockopt+0x2f8/0x4b0 [ 169.629546][ T6312] __arm64_sys_setsockopt+0xb8/0xd4 [ 169.631143][ T6312] invoke_syscall+0x98/0x2b8 [ 169.632673][ T6312] el0_svc_common+0x138/0x258 [ 169.634165][ T6312] do_el0_svc+0x58/0x14c [ 169.635464][ T6312] el0_svc+0x78/0x1e0 [ 169.636726][ T6312] el0t_64_sync_handler+0xcc/0xe4 [ 169.638351][ T6312] el0t_64_sync+0x1a0/0x1a4 [ 169.639796][ T6312] [ 169.639796][ T6312] other info that might help us debug this: [ 169.639796][ T6312] [ 169.642669][ T6312] Possible unsafe locking scenario: [ 169.642669][ T6312] [ 169.644678][ T6312] CPU0 CPU1 [ 169.646108][ T6312] ---- ---- [ 169.647560][ T6312] lock(sk_lock-AF_AX25); [ 169.648752][ T6312] lock(rtnl_mutex); [ 169.650623][ T6312] lock(sk_lock-AF_AX25); [ 169.652627][ T6312] lock(rtnl_mutex); [ 169.653758][ T6312] [ 169.653758][ T6312] *** DEADLOCK *** [ 169.653758][ T6312] [ 169.655961][ T6312] 1 lock held by syz.0.595/6312: [ 169.657270][ T6312] #0: ffff0000cecdc120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_setsockopt+0x274/0xa5c [ 169.660006][ T6312] [ 169.660006][ T6312] stack backtrace: [ 169.661654][ T6312] CPU: 1 PID: 6312 Comm: syz.0.595 Not tainted 5.15.185-syzkaller #0 [ 169.664060][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.666931][ T6312] Call trace: [ 169.667823][ T6312] dump_backtrace+0x0/0x43c [ 169.669091][ T6312] show_stack+0x2c/0x3c [ 169.670262][ T6312] __dump_stack+0x30/0x40 [ 169.671532][ T6312] dump_stack_lvl+0xf8/0x160 [ 169.672857][ T6312] dump_stack+0x1c/0x5c [ 169.674029][ T6312] print_circular_bug+0x148/0x1b0 [ 169.675521][ T6312] check_noncircular+0x240/0x2d4 [ 169.677094][ T6312] __lock_acquire+0x2928/0x651c [ 169.678446][ T6312] lock_acquire+0x1f4/0x620 [ 169.679660][ T6312] __mutex_lock_common+0x194/0x1edc [ 169.681104][ T6312] mutex_lock_nested+0xac/0x11c [ 169.682423][ T6312] rtnl_lock+0x20/0x2c [ 169.683548][ T6312] ax25_setsockopt+0x870/0xa5c [ 169.684868][ T6312] __sys_setsockopt+0x2f8/0x4b0 [ 169.686235][ T6312] __arm64_sys_setsockopt+0xb8/0xd4 [ 169.687674][ T6312] invoke_syscall+0x98/0x2b8 [ 169.689116][ T6312] el0_svc_common+0x138/0x258 [ 169.690436][ T6312] do_el0_svc+0x58/0x14c [ 169.691649][ T6312] el0_svc+0x78/0x1e0 [ 169.692730][ T6312] el0t_64_sync_handler+0xcc/0xe4 [ 169.694123][ T6312] el0t_64_sync+0x1a0/0x1a4 [ 169.720812][ T6310] device bridge_slave_1 left promiscuous mode [ 169.722889][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.753364][ T6310] bond0: (slave bond_slave_0): Releasing backup interface [ 169.794718][ T6310] bond0: (slave bond_slave_1): Releasing backup interface [ 169.831584][ T6310] team0: Port device team_slave_0 removed [ 169.847778][ T6310] team0: Port device team_slave_1 removed [ 169.851306][ T6310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.855128][ T6310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.860912][ T6310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.863302][ T6310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.168795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog