last executing test programs: 1m51.083483787s ago: executing program 4 (id=117): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) 1m51.045302981s ago: executing program 4 (id=119): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x2c, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7f}}]}, 0x2c}}, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m50.968971316s ago: executing program 4 (id=122): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0x6}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x38}, 0x28) 1m50.948032058s ago: executing program 4 (id=123): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x3}}]}}, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 1m50.42831879s ago: executing program 3 (id=142): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)}, 0x80) 1m50.331855958s ago: executing program 3 (id=144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x9, 0x24, [{0x16, 0x1}, {0x1b}, {0x12}, {}, {0x9, 0x1}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004801}, 0x80) 1m50.331369998s ago: executing program 3 (id=145): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc3c", 0x35}, {&(0x7f0000000540)="0276dd88a8", 0x5}], 0x2}, 0x24004010) 1m50.275209012s ago: executing program 3 (id=148): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f0000000280), 0x1, 0x460, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) 1m50.077574198s ago: executing program 3 (id=152): r0 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x35, 0x37, 0x34, 0x66, 0x38, 0x39, 0x31, 0x38, 0x33, 0xe, 0x64, 0x61, 0x38, 0x37, 0x63, 0x53020ddac55f01d7]}, &(0x7f0000000280)={0x0, "422d74fb20e032ed6057656356fab561bd4228c99fc3c582aefe7b8b5cd257dcf094d2fa570b23c695fa9bddbf5671019834cf3c3fb5d3a612dbc8bfdbf09057", 0x15}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0xffffffffffffffff, &(0x7f0000000040)) 1m50.077228618s ago: executing program 4 (id=153): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xf, 0x2a8, &(0x7f00000001c0)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00'], 0x88}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 1m49.43289905s ago: executing program 3 (id=174): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x284182, 0x4) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\"\x00'], 0x922c3) 1m49.384594704s ago: executing program 32 (id=174): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x284182, 0x4) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\"\x00'], 0x922c3) 1m49.048050211s ago: executing program 4 (id=185): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 1m48.978161617s ago: executing program 33 (id=185): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 1m40.157272407s ago: executing program 2 (id=233): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x37}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1m40.071228914s ago: executing program 2 (id=234): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100000fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m40.071101624s ago: executing program 2 (id=235): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}, 0x24004010) 1m39.99379769s ago: executing program 2 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004980)={0x2020}, 0x2020) 1m39.928408605s ago: executing program 2 (id=237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000280)=0xfff, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x40000) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) shutdown(r0, 0x1) 1m39.443331814s ago: executing program 2 (id=241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4854) 1m39.420260806s ago: executing program 34 (id=241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4854) 1m15.305083867s ago: executing program 5 (id=485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x7, 0x7fffffff, 0xfffffff7, 0x7ff, 0x5, 0x9, 0x1, 0x8c27}}}}]}, 0x58}}, 0x4080) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m14.945652997s ago: executing program 5 (id=495): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="0b118f2b4190be586d04d99304c7975dfca451f6a36e5e11c583738f22bfc241adfd70c9456ea4fe6a5e0716c24ab3", 0xfffffffffffffea5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) 1m14.839293665s ago: executing program 5 (id=497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r1, 0x200, 0x70bd2b, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 1m14.703211396s ago: executing program 5 (id=502): socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00'}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000140)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@utf8}, {@shortname_winnt}, {@fat=@showexec}, {@shortname_win95}, {@fat=@fmask={'fmask', 0x3d, 0x8}}, {@utf8}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x28b, &(0x7f0000000a80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1m14.286852669s ago: executing program 5 (id=507): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x29) 1m13.795032299s ago: executing program 5 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x52, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x40044c4) 1m13.761395932s ago: executing program 35 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x52, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x40044c4) 7.116672669s ago: executing program 0 (id=1271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="7a0a00ff0000000071108000000000009500000000edff0079384fbe0da6fc7a25395e2498d13e4af3fff855558d9b1b580111bdecddbbbc56bf7a464d353c2da6accdd58b400d7c67739a1935c084101e773e81b02e5c11c79d9c403bc8bc29915b3eb690cac6103f7135cf1e0e5ea362793d3aa19d30415d99b07c7b9155400cdf993cf84e249e8d946abc51eb51ef"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 7.047174774s ago: executing program 0 (id=1272): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 7.046846844s ago: executing program 0 (id=1273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r4, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 7.046507214s ago: executing program 0 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 4.722171851s ago: executing program 7 (id=1288): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@nodiscard}, {@whint_mode_user}, {@discard_unit_section}, {@alloc_mode_reuse}, {@checkpoint_diasble}, {@background_gc_on}, {@background_gc_on}, {@four_active_logs}, {@fsync_mode_posix}, {@block_mode}, {@data_flush}, {@heap}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x550f, &(0x7f000000cf00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa000202f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x80000000}) 3.840067192s ago: executing program 0 (id=1292): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0xa084801}, 0x44080) 3.792207186s ago: executing program 0 (id=1293): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4a6, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x200a017, 0x0, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xf, {[@main=@item_012={0x2, 0x0, 0x9, "f219"}, @main=@item_4={0x3, 0x0, 0x9, "a114512c"}, @main=@item_012={0x1, 0x0, 0xb, 'g'}, @local=@item_4={0x3, 0x2, 0x9, "da37f562"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc, 0x0, 0x1, {0x22, 0xbd3}}}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000240), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000140)={0x3, 0x100, 0x801, 0x5, 0xbc5, 0x6}) 3.646513607s ago: executing program 7 (id=1298): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[], 0x0) 3.456903592s ago: executing program 7 (id=1306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0xfdef) 3.36166437s ago: executing program 7 (id=1308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x23) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x60242, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 3.342211092s ago: executing program 1 (id=1310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0x0) listen(r2, 0x0) 3.279221217s ago: executing program 1 (id=1311): writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000100)="1c5b72d3de750d852c3b6478fc8359aefd3a73480759a1576638e292efc7e21b7cad3020", 0x24}], 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new trusted:syz 000000000000000037'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 2.648336378s ago: executing program 1 (id=1312): socket$nl_xfrm(0x10, 0x3, 0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) 2.502840239s ago: executing program 6 (id=1316): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x2904c, 0x20, 0x10003, '\x00', [{0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffff, 0xcf, 0x0, 0x111a, 0x0, 0x4}]}) 2.459101503s ago: executing program 7 (id=1317): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) syz_emit_ethernet(0x9e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x600, 0x1ff0000aa}, @private1}}}}}}, 0x0) 2.185985995s ago: executing program 7 (id=1318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x125d, 0x10000000010005) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r3, 0x800799c) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x9}, 0x1c) sendfile(r4, r3, 0x0, 0xfeff) 2.155371397s ago: executing program 8 (id=1319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0xfdef) 2.079186753s ago: executing program 6 (id=1320): unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x3fffffff, 0xdd, 0x479c28ea, 0x1, 0x4, 0xb}) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x2) 2.076622133s ago: executing program 6 (id=1321): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) unshare(0x42000000) 2.076437304s ago: executing program 8 (id=1322): writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000100)="1c5b72d3de750d852c3b6478fc8359aefd3a73480759a1576638e292efc7e21b7cad3020", 0x24}], 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new trusted:syz 000000000000000037'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 2.041432816s ago: executing program 8 (id=1323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.956311803s ago: executing program 8 (id=1324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) 1.894711458s ago: executing program 6 (id=1325): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0xf}, 0x94) 1.208552303s ago: executing program 1 (id=1326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 953.709454ms ago: executing program 1 (id=1327): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsgid(0xee01) r3 = userfaultfd(0x80001) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac141428000000000000000000000000000000003200000000000000000000000000ffff000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000a"], 0x16c}}, 0x0) 953.418874ms ago: executing program 6 (id=1328): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x200000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x4) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r6, r5, 0x0, 0x6) 315.148475ms ago: executing program 8 (id=1329): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xa084801}, 0x44080) 43.707767ms ago: executing program 1 (id=1330): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe3e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 18.417559ms ago: executing program 6 (id=1331): syz_open_dev$usbmon(&(0x7f0000000080), 0xc260, 0x20000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) setresuid(0x0, 0xee01, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 0s ago: executing program 8 (id=1332): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) listen(r1, 0x2) r4 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x8801}}], 0x1, 0x20044034) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): DDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.806612][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.808087][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.809435][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.810964][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.822824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.824183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.830594][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.834019][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.835770][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.836917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.839448][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.843538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.845126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.848185][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.854067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.856959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.859580][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.861125][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.862674][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.864035][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.873214][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.877134][ T4324] device veth0_vlan entered promiscuous mode [ 34.880517][ T4324] device veth1_vlan entered promiscuous mode [ 34.882348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.883783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.885320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.888395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.889944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.891363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.892678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.897485][ T4320] device veth0_macvtap entered promiscuous mode [ 34.904307][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.906243][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.908235][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.923605][ T4320] device veth1_macvtap entered promiscuous mode [ 34.932727][ T4326] device veth0_vlan entered promiscuous mode [ 34.939014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.940581][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.942092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.943895][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.946943][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.948396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.967182][ T4326] device veth1_vlan entered promiscuous mode [ 34.970080][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.971672][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.973792][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.979886][ T4324] device veth0_macvtap entered promiscuous mode [ 34.982278][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.983758][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.983817][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.984957][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.989077][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.990876][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.992503][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.993971][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.998101][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.002589][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.004252][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.007412][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.015090][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.016096][ T270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.017871][ T270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.018855][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.020236][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.021485][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.024834][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.026416][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.027914][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.029464][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.037572][ T4324] device veth1_macvtap entered promiscuous mode [ 35.050538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.052075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.053633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.059607][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.061184][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.069544][ T4326] device veth0_macvtap entered promiscuous mode [ 35.072420][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.073903][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.075294][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.077948][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.080764][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.083648][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.085168][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.086677][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.092812][ T4326] device veth1_macvtap entered promiscuous mode [ 35.094675][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.097075][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.098600][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.100174][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.102406][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.107730][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.109269][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.110811][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.112686][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.114348][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.118027][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.119960][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.124157][ T4332] device veth0_vlan entered promiscuous mode [ 35.130150][ T4324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.131558][ T4324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.132863][ T4324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.134103][ T4324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.138840][ T4332] device veth1_vlan entered promiscuous mode [ 35.159456][ T270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.159544][ T4432] loop1: detected capacity change from 0 to 256 [ 35.160739][ T270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.161377][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.165028][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.166967][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.178178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.179832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.202097][ T4332] device veth0_macvtap entered promiscuous mode [ 35.206788][ T270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.208012][ T270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.209155][ T4332] device veth1_macvtap entered promiscuous mode [ 35.214904][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.219197][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.220685][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.229299][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.231039][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.232780][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.238076][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.239606][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.241083][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.243623][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.248733][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.250372][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.252584][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.254239][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.256664][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.258110][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.259577][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.261114][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.263281][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.264505][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.266928][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.274847][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.277498][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.279350][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.281031][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.282563][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.284227][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.287791][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.289794][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.292064][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.293913][ T4326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.295284][ T4326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.297993][ T4326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.299410][ T4326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.320700][ T270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.322054][ T270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.323924][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.325780][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.329466][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.331283][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.332829][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.334572][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.336685][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.338321][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.339963][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.341500][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.343904][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.352475][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.354075][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.356980][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.359440][ T270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.361232][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.362699][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.364109][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.365771][ T270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.368710][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.378038][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.458689][ T270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.460047][ T270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.461806][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.499507][ T270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.500714][ T270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.502614][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.508513][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.510155][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.512621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.525664][ T270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.526962][ T270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.528846][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.630606][ T4456] netlink: 'syz.0.12': attribute type 21 has an invalid length. [ 35.634886][ T4456] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12'. [ 35.637461][ T4455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 35.691468][ T4462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 36.160818][ T4329] Bluetooth: hci1: command 0x041b tx timeout [ 36.160846][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 36.162901][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 36.165561][ T4327] Bluetooth: hci0: command 0x041b tx timeout [ 36.166492][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 36.177081][ T4483] netlink: 'syz.3.24': attribute type 21 has an invalid length. [ 36.178506][ T4483] netlink: 128 bytes leftover after parsing attributes in process `syz.3.24'. [ 36.256713][ T4490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 36.278815][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 36.474674][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 36.514079][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 36.536354][ T4525] loop2: detected capacity change from 0 to 256 [ 36.644396][ T4311] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 37.702812][ T4597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.704666][ T4597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.863205][ T4617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'. [ 37.901734][ T4624] loop0: detected capacity change from 0 to 512 [ 37.905327][ T4624] ======================================================= [ 37.905327][ T4624] WARNING: The mand mount option has been deprecated and [ 37.905327][ T4624] and is ignored by this kernel. Remove the mand [ 37.905327][ T4624] option from the mount to silence this warning. [ 37.905327][ T4624] ======================================================= [ 37.974401][ T4632] loop1: detected capacity change from 0 to 2048 [ 37.995126][ T4624] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.010428][ T4632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.012704][ T4624] EXT4-fs error (device loop0): ext4_xattr_block_list:719: inode #15: comm syz.0.83: corrupted xattr block 19 [ 38.019457][ T4624] EXT4-fs (loop0): Remounting filesystem read-only [ 38.045276][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 38.049347][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 38.069602][ T4646] Zero length message leads to an empty skb [ 38.120429][ T4654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 38.177081][ T4662] loop1: detected capacity change from 0 to 512 [ 38.178547][ T4662] EXT4-fs: Ignoring removed orlov option [ 38.185689][ T4662] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 38.196494][ T4662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 38.198989][ T4662] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.100: corrupted in-inode xattr [ 38.201828][ T4662] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.100: couldn't read orphan inode 15 (err -117) [ 38.206960][ T4662] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.209371][ T4670] loop4: detected capacity change from 0 to 512 [ 38.210888][ T4670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.213779][ T4670] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 38.215029][ T4670] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 38.218798][ T4670] System zones: 0-1, 15-15, 18-18, 34-34 [ 38.220024][ T4670] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.221441][ T4670] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.103: casefold flag without casefold feature [ 38.224255][ T4670] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.103: couldn't read orphan inode 16 (err -117) [ 38.229202][ T4670] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.232578][ T4670] EXT4-fs (loop4): shut down requested (1) [ 38.236480][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 38.237505][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 38.238416][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 38.245504][ T4327] Bluetooth: hci1: command 0x040f tx timeout [ 38.246611][ T4327] Bluetooth: hci2: command 0x040f tx timeout [ 38.250619][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 38.268050][ T4673] loop2: detected capacity change from 0 to 2048 [ 38.298638][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 38.321182][ T4673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.355269][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 38.398346][ T4685] loop4: detected capacity change from 0 to 128 [ 38.424901][ T4685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.435991][ T4434] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.441342][ T4693] loop2: detected capacity change from 0 to 2048 [ 38.448318][ T4693] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 38.453718][ T4693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 38.512871][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 38.535898][ T4702] loop1: detected capacity change from 0 to 1024 [ 38.595346][ T9] hfsplus: b-tree write err: -5, ino 4 [ 38.630251][ T4434] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.634180][ T4434] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.636600][ T4434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.637968][ T4434] usb 1-1: Product: syz [ 38.638550][ T4434] usb 1-1: Manufacturer: syz [ 38.643906][ T4434] usb 1-1: SerialNumber: syz [ 38.693914][ T4715] loop2: detected capacity change from 0 to 2048 [ 38.716257][ T4715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.735729][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 38.817582][ T4733] loop2: detected capacity change from 0 to 128 [ 38.821660][ T4733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.848374][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 38.862576][ T4434] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 38.863720][ T4434] cdc_ncm 1-1:1.1: bind() failure [ 38.874772][ T4434] usb 1-1: USB disconnect, device number 2 [ 38.952934][ T4745] binder: 4744:4745 tried to acquire reference to desc 0, got 1 instead [ 38.954687][ T4745] binder: cannot allocate buffer: no space left [ 38.954720][ T4745] binder: 4744:4745 transaction async to 4744:0 failed 5/29201/-28, size 96-4294966972 line 3239 [ 38.958127][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.004434][ T4749] loop2: detected capacity change from 0 to 736 [ 39.062656][ T4754] loop2: detected capacity change from 0 to 512 [ 39.069544][ T4753] loop1: detected capacity change from 0 to 2048 [ 39.083248][ T4753] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.085782][ T4754] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 39.106743][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 39.112023][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 39.174323][ T4766] loop2: detected capacity change from 0 to 512 [ 39.176212][ T4766] EXT4-fs: Ignoring removed orlov option [ 39.177605][ T4766] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 39.184683][ T4766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 39.187878][ T4766] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.140: corrupted in-inode xattr [ 39.190020][ T4766] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.140: couldn't read orphan inode 15 (err -117) [ 39.192109][ T4766] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.223216][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 39.374436][ T4782] loop1: detected capacity change from 0 to 164 [ 39.423418][ T4785] loop0: detected capacity change from 0 to 2048 [ 39.439821][ T4787] loop3: detected capacity change from 0 to 512 [ 39.447090][ T4787] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.454174][ T4787] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.458655][ T4785] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.486414][ T4789] loop2: detected capacity change from 0 to 2048 [ 39.488683][ T4787] EXT4-fs (loop3): 1 truncate cleaned up [ 39.489875][ T4787] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.500300][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 39.528146][ T4795] loop1: detected capacity change from 0 to 512 [ 39.533760][ T4789] loop2: p1 < > p2 p3 < > p4 < p5 > [ 39.534881][ T4789] loop2: partition table partially beyond EOD, truncated [ 39.537772][ T4789] loop2: p1 start 3405774849 is beyond EOD, truncated [ 39.541196][ T4789] loop2: p2 start 2852127236 is beyond EOD, truncated [ 39.544550][ T4789] loop2: p3 start 2304 is beyond EOD, truncated [ 39.551411][ T4789] loop2: p5 start 2852127236 is beyond EOD, truncated [ 39.558456][ T4320] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /32/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 39.568820][ T4795] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.570815][ T4320] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /32/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 39.579255][ T4320] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 39.584688][ T4320] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /32/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 39.585516][ T3936] loop2: p1 < > p2 p3 < > p4 < p5 > [ 39.591622][ T3936] loop2: partition table partially beyond EOD, truncated [ 39.593256][ T3936] loop2: p1 start 3405774849 is beyond EOD, truncated [ 39.594648][ T3936] loop2: p2 start 2852127236 is beyond EOD, truncated [ 39.597659][ T3936] loop2: p3 start 2304 is beyond EOD, truncated [ 39.598677][ T4795] EXT4-fs (loop1): 1 truncate cleaned up [ 39.599622][ T3936] loop2: p5 start 2852127236 is beyond EOD, truncated [ 39.599661][ T4795] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.612523][ T4320] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /32/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 39.623033][ T4795] EXT4-fs error (device loop1): ext4_nfs_get_inode:1461: inode #11: comm syz.1.150: iget: bad extra_isize 46 (inode size 256) [ 39.625337][ T4320] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 39.628654][ T4795] EXT4-fs (loop1): Remounting filesystem read-only [ 39.634207][ T4320] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /32/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 39.647141][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 39.650830][ T4320] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /32/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 39.658348][ T4320] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 39.663329][ T4320] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /32/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 39.886261][ T4814] loop0: detected capacity change from 0 to 2048 [ 39.908794][ T4814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.910107][ T4819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 39.937986][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 39.962308][ T4821] loop0: detected capacity change from 0 to 8 [ 40.190537][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 40.286058][ T4842] loop0: detected capacity change from 0 to 2048 [ 40.298176][ T4845] loop1: detected capacity change from 0 to 512 [ 40.316215][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 40.317235][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 40.318124][ T4336] Bluetooth: hci3: command 0x0419 tx timeout [ 40.343991][ T4842] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.359174][ T4845] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.368616][ T4482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.387783][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 40.398867][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 40.401611][ T4336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 40.403131][ T4336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.404973][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 40.412751][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.417875][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 40.419325][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.428744][ T4853] loop1: detected capacity change from 0 to 512 [ 40.470676][ T4853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.473056][ T4853] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.176: iget: bad i_size value: 2533274857506816 [ 40.477818][ T4482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.561713][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 40.567986][ T4482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.680127][ T4482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.751661][ T4327] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 40.753530][ T4327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 40.754904][ T4327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 40.756987][ T4327] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 40.758284][ T4327] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 40.759473][ T4327] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 40.823088][ T4850] chnl_net:caif_netlink_parms(): no params data found [ 41.165591][ T4850] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.171562][ T4850] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.187250][ T4850] device bridge_slave_0 entered promiscuous mode [ 41.208843][ T4850] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.219126][ T4850] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.223785][ T4850] device bridge_slave_1 entered promiscuous mode [ 41.301894][ T4850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.321059][ T4850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.470910][ T4850] team0: Port device team_slave_0 added [ 41.583400][ T4915] loop0: detected capacity change from 0 to 512 [ 41.585183][ T4915] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.605876][ T4850] team0: Port device team_slave_1 added [ 41.612034][ T4915] EXT4-fs (loop0): 1 truncate cleaned up [ 41.613067][ T4915] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 41.692149][ T4915] EXT4-fs error (device loop0): ext4_nfs_get_inode:1461: inode #11: comm syz.0.191: iget: bad extra_isize 46 (inode size 256) [ 41.708982][ T4915] EXT4-fs (loop0): Remounting filesystem read-only [ 41.730509][ T4850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.731709][ T4850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.736073][ T4850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.739583][ T4882] chnl_net:caif_netlink_parms(): no params data found [ 41.777002][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 41.817353][ T4850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.818515][ T4850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.822517][ T4850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.855923][ T4937] loop0: detected capacity change from 0 to 512 [ 41.872941][ T4937] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.902096][ T4937] EXT4-fs error (device loop0): __ext4_get_inode_loc:4507: comm syz.0.194: Invalid inode table block 35 in block_group 0 [ 41.905256][ T4937] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 41.911770][ T4937] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #15: comm syz.0.194: mark_inode_dirty error [ 41.914435][ T4937] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 23: comm syz.0.194: lblock 5 mapped to illegal pblock 23 (length 1) [ 41.919079][ T4937] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 41.920615][ T4937] EXT4-fs error (device loop0): ext4_write_dquot:6796: comm syz.0.194: Failed to commit dquot type 0 [ 41.923237][ T4937] EXT4-fs error (device loop0): __ext4_get_inode_loc:4507: comm syz.0.194: Invalid inode table block 35 in block_group 0 [ 41.956168][ T4937] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 41.957935][ T4882] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.959168][ T4882] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.970461][ T4937] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #15: comm syz.0.194: mark_inode_dirty error [ 41.973886][ T4882] device bridge_slave_0 entered promiscuous mode [ 41.976093][ T4937] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.194: Invalid block bitmap block 3 in block_group 0 [ 42.002525][ T4937] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 23: comm syz.0.194: lblock 5 mapped to illegal pblock 23 (length 1) [ 42.010583][ T4937] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 42.050843][ T4882] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.052013][ T4882] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.053561][ T4882] device bridge_slave_1 entered promiscuous mode [ 42.064188][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 42.137698][ T4850] device hsr_slave_0 entered promiscuous mode [ 42.185747][ T4850] device hsr_slave_1 entered promiscuous mode [ 42.198612][ T4961] loop1: detected capacity change from 0 to 1024 [ 42.200152][ T4961] EXT4-fs: Ignoring removed bh option [ 42.205657][ T4850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.206855][ T4850] Cannot create hsr debugfs directory [ 42.223571][ T4961] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.289272][ T4972] loop0: detected capacity change from 0 to 1024 [ 42.291167][ T4961] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 42.371522][ T4882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.439833][ T4882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.479808][ T4336] Bluetooth: hci1: command 0x0409 tx timeout [ 42.484444][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 42.543239][ T4978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.544736][ T4978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.617346][ T4882] team0: Port device team_slave_0 added [ 42.619216][ T4882] team0: Port device team_slave_1 added [ 42.716755][ T4882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.717837][ T4882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.721546][ T4882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.723880][ T4882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.757695][ T4882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.761800][ T4882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.795489][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 43.136851][ T4882] device hsr_slave_0 entered promiscuous mode [ 43.177421][ T4882] device hsr_slave_1 entered promiscuous mode [ 43.205852][ T4882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.207117][ T4882] Cannot create hsr debugfs directory [ 43.757967][ T4850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.769812][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.775790][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.833465][ T4850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.857008][ T4850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.916775][ T4850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.963776][ T4482] device hsr_slave_0 left promiscuous mode [ 44.006059][ T4482] device hsr_slave_1 left promiscuous mode [ 44.095661][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.096992][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.098871][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.099989][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.101348][ T4482] device bridge_slave_1 left promiscuous mode [ 44.103070][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.157024][ T4482] device bridge_slave_0 left promiscuous mode [ 44.158074][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.275700][ T4482] device veth1_macvtap left promiscuous mode [ 44.276798][ T4482] device veth0_macvtap left promiscuous mode [ 44.277760][ T4482] device veth1_vlan left promiscuous mode [ 44.278729][ T4482] device veth0_vlan left promiscuous mode [ 44.404417][ T5055] loop1: detected capacity change from 0 to 1024 [ 44.430378][ T5055] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 44.608236][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 44.885447][ T4327] Bluetooth: hci4: command 0x041b tx timeout [ 45.262306][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 46.147246][ T4482] team0 (unregistering): Port device team_slave_1 removed [ 46.318119][ T4482] team0 (unregistering): Port device team_slave_0 removed [ 46.506397][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.635433][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 46.715901][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.955478][ T4327] Bluetooth: hci4: command 0x040f tx timeout [ 48.715431][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 49.035578][ T4327] Bluetooth: hci4: command 0x0419 tx timeout [ 49.096588][ T4482] bond0 (unregistering): Released all slaves [ 49.354820][ T5076] loop2: detected capacity change from 0 to 128 [ 49.368772][ T5080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.370225][ T5080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.373680][ T5076] FAT-fs (loop2): bogus sectors per cluster 0 [ 49.374772][ T5076] FAT-fs (loop2): Can't find a valid FAT filesystem [ 49.396303][ T4882] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 49.409304][ T4981] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.440257][ T4882] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 49.461944][ T4882] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 49.487540][ T4882] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 49.544400][ T4850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.614578][ T4850] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.623413][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.625037][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.639637][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.641323][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.642729][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.643851][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.665780][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.668310][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.688765][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.701367][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.702603][ T4575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.704123][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.710914][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.722059][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.725736][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.735247][ T4850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.740444][ T4850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.744160][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.746748][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.748632][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.750218][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.753141][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.754807][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.758379][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.775708][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.862425][ T4882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.876868][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.886685][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.893132][ T4882] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.918665][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.920398][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.926828][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.927911][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.932473][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.934453][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.963559][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.964757][ T4575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.975312][ T4882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.985432][ T4882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.031269][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.032899][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.034509][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.039806][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.046789][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.048445][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.051647][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.060000][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.066229][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.067726][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.071651][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.073157][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.074413][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.084816][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.093180][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.098724][ T4850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.320134][ T4327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.321940][ T4327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.323393][ T4327] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.324884][ T4327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.328843][ T4327] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 50.330304][ T4327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 50.388302][ T4482] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.488254][ T4482] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.499648][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.501335][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.516917][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.518260][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.560748][ T5165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.562187][ T5165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.587488][ T4482] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.597523][ T4882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.619916][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.621442][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.623857][ T4850] device veth0_vlan entered promiscuous mode [ 50.642474][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.644067][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.687664][ T4482] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.692981][ T4850] device veth1_vlan entered promiscuous mode [ 50.739012][ T4850] device veth0_macvtap entered promiscuous mode [ 50.742077][ T4850] device veth1_macvtap entered promiscuous mode [ 50.747314][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.748929][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.750338][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.751790][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.753342][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.779016][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.793086][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.794795][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.809637][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.814128][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.820104][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.823187][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.824683][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.828036][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.830578][ T4850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.831800][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.833632][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.846300][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.847900][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.849277][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.850753][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.852171][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.853660][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.859979][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.861461][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.866190][ T4850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.867451][ T5143] chnl_net:caif_netlink_parms(): no params data found [ 50.869754][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.871328][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.907935][ T4850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.909253][ T4850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.910557][ T4850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.911731][ T4850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.979474][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.980768][ T5143] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.982407][ T5143] device bridge_slave_0 entered promiscuous mode [ 51.032342][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.033590][ T5143] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.035180][ T5143] device bridge_slave_1 entered promiscuous mode [ 51.126486][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.128203][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.132020][ T270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.133401][ T270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.160916][ T4882] device veth0_vlan entered promiscuous mode [ 51.182071][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.183682][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.185212][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.187933][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.191397][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.197015][ T5143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.199749][ T5143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.289257][ T5143] team0: Port device team_slave_0 added [ 51.293973][ T270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.295226][ T270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.300262][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.302875][ T4882] device veth1_vlan entered promiscuous mode [ 51.313295][ T5143] team0: Port device team_slave_1 added [ 51.379816][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.381346][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.390809][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.391967][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.400101][ T5143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.434718][ T5209] loop5: detected capacity change from 0 to 512 [ 51.438504][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.439633][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.443694][ T5143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.449524][ T5209] EXT4-fs (loop5): Test dummy encryption mode enabled [ 51.450660][ T5209] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 51.489762][ T5209] EXT4-fs (loop5): 1 truncate cleaned up [ 51.490832][ T5209] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 51.498666][ T5209] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 51.528086][ T4882] device veth0_macvtap entered promiscuous mode [ 51.539546][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.540167][ T4850] EXT4-fs (loop5): unmounting filesystem. [ 51.541332][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.543490][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.563763][ T5207] loop1: detected capacity change from 0 to 8192 [ 51.634908][ T4882] device veth1_macvtap entered promiscuous mode [ 51.670142][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.671798][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.673289][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.675028][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.689232][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.690845][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.692429][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.694155][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.712554][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.719111][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.732074][ T4882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.816779][ T5143] device hsr_slave_0 entered promiscuous mode [ 51.846344][ T5143] device hsr_slave_1 entered promiscuous mode [ 51.883721][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.886879][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.888467][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.891375][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.893127][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.894861][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.897359][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.899097][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.901195][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.902834][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.904541][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.906624][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.908478][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.911052][ T4882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.965367][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.967350][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.971553][ T4882] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.973082][ T4882] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.974557][ T4882] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.977385][ T4882] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.297957][ T270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.300656][ T270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.308284][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.601642][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 52.619627][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.622695][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.627397][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.704568][ T5260] loop1: detected capacity change from 0 to 4096 [ 52.723853][ T5260] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 52.929856][ T5271] fs-verity: sha256 using implementation "sha256-ce" [ 53.210862][ T5143] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 53.250841][ T5143] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 53.309521][ T5289] loop6: detected capacity change from 0 to 512 [ 53.310220][ T5143] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 53.316876][ T5289] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.344366][ T5289] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 53.346840][ T5289] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 53.348307][ T5289] EXT4-fs error (device loop6): ext4_acquire_dquot:6816: comm syz.6.186: Failed to acquire dquot type 0 [ 53.358467][ T5143] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 53.361946][ T5289] EXT4-fs (loop6): Remounting filesystem read-only [ 53.363081][ T5289] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 53.364854][ T5289] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 53.378807][ T5289] EXT4-fs error (device loop6): ext4_acquire_dquot:6816: comm syz.6.186: Failed to acquire dquot type 0 [ 53.381223][ T5289] EXT4-fs (loop6): Remounting filesystem read-only [ 53.384109][ T5289] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 53.390097][ T5289] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 53.391736][ T5289] EXT4-fs error (device loop6): ext4_acquire_dquot:6816: comm syz.6.186: Failed to acquire dquot type 0 [ 53.395272][ T5289] EXT4-fs (loop6): Remounting filesystem read-only [ 53.396569][ T5289] EXT4-fs (loop6): 1 orphan inode deleted [ 53.397684][ T5289] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 53.415101][ T5289] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.186: iget: bad i_size value: 360287970189639690 [ 53.422700][ T5289] EXT4-fs (loop6): Remounting filesystem read-only [ 53.441016][ T4882] EXT4-fs (loop6): unmounting filesystem. [ 53.565221][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 53.853712][ T4482] device hsr_slave_0 left promiscuous mode [ 53.889368][ T4482] device hsr_slave_1 left promiscuous mode [ 54.085816][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.091474][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.097538][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.108069][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.191721][ T4482] device bridge_slave_1 left promiscuous mode [ 54.193120][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.245492][ T4482] device bridge_slave_0 left promiscuous mode [ 54.246704][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.314245][ T5333] netlink: 'syz.0.269': attribute type 3 has an invalid length. [ 54.376206][ T4482] device veth1_macvtap left promiscuous mode [ 54.378395][ T4482] device veth0_macvtap left promiscuous mode [ 54.381022][ T4482] device veth1_vlan left promiscuous mode [ 54.382184][ T4482] device veth0_vlan left promiscuous mode [ 54.635563][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 55.788842][ T5364] capability: warning: `syz.6.279' uses deprecated v2 capabilities in a way that may be insecure [ 56.377552][ T4482] team0 (unregistering): Port device team_slave_1 removed [ 56.557490][ T4482] team0 (unregistering): Port device team_slave_0 removed [ 56.715448][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 56.725961][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.925841][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.805464][ T4336] Bluetooth: hci3: command 0x0419 tx timeout [ 59.407518][ T4482] bond0 (unregistering): Released all slaves [ 59.723182][ T5382] xt_hashlimit: max too large, truncated to 1048576 [ 59.790890][ T5143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.115953][ T5143] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.119175][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.120912][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.124610][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.128631][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.143270][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.144389][ T4417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.166876][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.168605][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.170023][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.171484][ T4417] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.172607][ T4417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.174021][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.178594][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.180306][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.182486][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.189459][ T5143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.191048][ T5143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.193343][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.200393][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.220238][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.226322][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.232295][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.237215][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.239202][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.241718][ T5395] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 60.246612][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.303820][ T5406] loop1: detected capacity change from 0 to 2048 [ 60.317623][ T5410] __nla_validate_parse: 2 callbacks suppressed [ 60.317636][ T5410] netlink: 36 bytes leftover after parsing attributes in process `syz.5.292'. [ 60.355601][ T5406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.393873][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.395342][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.400369][ T5143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.442158][ T5420] loop6: detected capacity change from 0 to 1024 [ 60.504009][ T5431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.513590][ T5431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.543998][ T5420] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 60.691462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.693019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.996603][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.998387][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.000175][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.001586][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.005087][ T5143] device veth0_vlan entered promiscuous mode [ 61.018697][ T5143] device veth1_vlan entered promiscuous mode [ 61.049808][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.052325][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.056086][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.060948][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.067046][ T5143] device veth0_macvtap entered promiscuous mode [ 61.069487][ T5143] device veth1_macvtap entered promiscuous mode [ 61.091620][ T4882] EXT4-fs (loop6): unmounting filesystem. [ 61.091681][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.094444][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.107583][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.113648][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.120583][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.128678][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.134937][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.144141][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.147998][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.151755][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.158196][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.163787][ T5458] netlink: 20 bytes leftover after parsing attributes in process `syz.5.302'. [ 61.167483][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.170151][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.176675][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.178451][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.189302][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.199028][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.215249][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.220191][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.224017][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.227859][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.229487][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.231086][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.232596][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.234381][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.243293][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.256594][ T5466] loop5: detected capacity change from 0 to 4096 [ 61.290404][ T5466] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 61.299974][ T5461] netlink: 36 bytes leftover after parsing attributes in process `syz.6.304'. [ 61.302516][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.304284][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.307354][ T5143] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.308913][ T5143] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.310474][ T5143] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.311975][ T5143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.380504][ T5476] loop6: detected capacity change from 0 to 512 [ 61.409242][ T5476] journal_path: Lookup failure for './file0' [ 61.410170][ T5476] EXT4-fs: error: could not find journal device path [ 61.434029][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.435836][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.437773][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.438999][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.451366][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.455284][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.916411][ T5494] loop7: detected capacity change from 0 to 256 [ 61.950959][ T5494] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.959968][ T5494] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 61.976474][ T5494] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 62.050379][ T5504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.055271][ T5504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.068438][ T5506] loop6: detected capacity change from 0 to 512 [ 62.102997][ T4850] EXT4-fs (loop5): unmounting filesystem. [ 62.111052][ T5369] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.207096][ T4482] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.211091][ T5502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.314'. [ 62.246314][ T5513] netlink: 36 bytes leftover after parsing attributes in process `syz.1.317'. [ 62.350040][ T4482] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.716980][ T4482] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.763438][ T5536] loop0: detected capacity change from 0 to 512 [ 62.780034][ T5536] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 62.781460][ T5536] UDF-fs: Scanning with blocksize 512 failed [ 62.789478][ T5536] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 62.791921][ T5536] UDF-fs: Scanning with blocksize 1024 failed [ 62.795291][ T5536] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 62.802385][ T5536] UDF-fs: Scanning with blocksize 2048 failed [ 62.816915][ T4482] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.826532][ T5536] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 62.852465][ T5536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.054085][ T5572] loop0: detected capacity change from 0 to 16 [ 63.083375][ T5572] erofs: (device loop0): mounted with root inode @ nid 36. [ 63.182236][ T5587] loop0: detected capacity change from 0 to 1024 [ 63.235809][ T5587] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 63.298747][ T5596] loop5: detected capacity change from 0 to 512 [ 63.301321][ T5596] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 63.308359][ T5596] UDF-fs: Scanning with blocksize 512 failed [ 63.345368][ T5596] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 63.346918][ T5596] UDF-fs: Scanning with blocksize 1024 failed [ 63.359401][ T5596] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 63.360484][ T5596] UDF-fs: Scanning with blocksize 2048 failed [ 63.367370][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 63.385188][ T5596] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 63.388220][ T5596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.472809][ T5611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.496486][ T5611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.633662][ T5629] loop0: detected capacity change from 0 to 512 [ 63.639202][ T5629] EXT4-fs (loop0): Test dummy encryption mode enabled [ 63.643920][ T5629] EXT4-fs error (device loop0): __ext4_iget:5077: inode #11: block 1: comm syz.0.356: invalid block [ 63.646544][ T5629] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.356: couldn't read orphan inode 11 (err -117) [ 63.649054][ T5629] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 63.776162][ T5645] loop7: detected capacity change from 0 to 512 [ 63.783165][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 63.828345][ T5645] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 63.892155][ T5143] EXT4-fs (loop7): unmounting filesystem. [ 64.477203][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.479754][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.481106][ T24] cfg80211: failed to load regulatory.db [ 64.922021][ T5722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.923605][ T5722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.444198][ T5738] Bluetooth: MGMT ver 1.22 [ 65.446337][ T5738] Bluetooth: hci0: load_link_keys: too big key_count value 65535 [ 65.859183][ T5752] loop7: detected capacity change from 0 to 2048 [ 65.880508][ T5756] loop6: detected capacity change from 0 to 1024 [ 65.880853][ T5756] EXT4-fs: inline encryption not supported [ 65.888684][ T5756] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.889047][ T5752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.912682][ T5756] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 66.498839][ T5791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 66.500718][ T4482] device hsr_slave_0 left promiscuous mode [ 66.525743][ T4482] device hsr_slave_1 left promiscuous mode [ 66.665618][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.667005][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.683740][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.685122][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.688126][ T4482] device bridge_slave_1 left promiscuous mode [ 66.689305][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.875150][ T4482] device bridge_slave_0 left promiscuous mode [ 66.876552][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.880126][ T4882] EXT4-fs (loop6): unmounting filesystem. [ 66.951390][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.953904][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.015658][ T4482] device veth1_macvtap left promiscuous mode [ 67.016752][ T4482] device veth0_macvtap left promiscuous mode [ 67.017909][ T4482] device veth1_vlan left promiscuous mode [ 67.018933][ T4482] device veth0_vlan left promiscuous mode [ 67.500229][ T5822] binder: 5820:5822 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 67.584352][ T5833] loop5: detected capacity change from 0 to 128 [ 67.598913][ T5833] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 68.008141][ T5841] loop6: detected capacity change from 0 to 1024 [ 68.045296][ T5841] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 68.441472][ T4850] EXT4-fs (loop5): unmounting filesystem. [ 68.464698][ T5848] loop5: detected capacity change from 0 to 512 [ 68.466254][ T5848] EXT4-fs: Ignoring removed nobh option [ 68.467835][ T5848] EXT4-fs (loop5): bad block size 32768 [ 68.555315][ T4882] EXT4-fs (loop6): unmounting filesystem. [ 68.608058][ T5857] loop6: detected capacity change from 0 to 1024 [ 68.643394][ T5857] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 68.692306][ T4882] EXT4-fs (loop6): unmounting filesystem. [ 68.743614][ T5873] loop6: detected capacity change from 0 to 256 [ 68.749598][ T5873] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.752624][ T5873] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.800084][ T5875] loop5: detected capacity change from 0 to 512 [ 68.810193][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.811751][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.841198][ T5875] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #16: comm syz.5.440: corrupted inode contents [ 68.843924][ T5875] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #16: comm syz.5.440: mark_inode_dirty error [ 68.846526][ T5875] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #16: comm syz.5.440: corrupted inode contents [ 68.848767][ T5875] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.440: mark_inode_dirty error [ 68.850791][ T5875] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #16: comm syz.5.440: corrupted inode contents [ 68.853649][ T5875] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 68.854997][ T5875] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #16: comm syz.5.440: corrupted inode contents [ 68.860852][ T5875] EXT4-fs error (device loop5): ext4_truncate:4312: inode #16: comm syz.5.440: mark_inode_dirty error [ 68.862679][ T5875] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 68.865578][ T5875] EXT4-fs (loop5): 1 truncate cleaned up [ 68.866468][ T5875] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 68.871590][ T5875] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.440: iget: bad i_size value: 1407374883557376 [ 68.884706][ T11] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 68.888394][ T11] EXT4-fs error (device loop5): ext4_release_dquot:6852: comm kworker/u4:1: Failed to release dquot type 1 [ 68.896804][ T4850] EXT4-fs (loop5): unmounting filesystem. [ 69.119497][ T4482] team0 (unregistering): Port device team_slave_1 removed [ 69.287476][ T4482] team0 (unregistering): Port device team_slave_0 removed [ 69.435969][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.646718][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.912147][ T4482] bond0 (unregistering): Released all slaves [ 72.258180][ T5899] loop6: detected capacity change from 0 to 512 [ 72.259733][ T5899] EXT4-fs: Ignoring removed nobh option [ 72.260609][ T5899] EXT4-fs: Ignoring removed i_version option [ 72.275982][ T5899] EXT4-fs (loop6): Test dummy encryption mode enabled [ 72.334073][ T5899] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 72.336377][ T5899] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.449: invalid indirect mapped block 2683928664 (level 1) [ 72.345150][ T5899] EXT4-fs (loop6): 1 truncate cleaned up [ 72.361197][ T5899] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 72.457143][ T4882] EXT4-fs (loop6): unmounting filesystem. [ 72.650930][ T5943] netlink: 120 bytes leftover after parsing attributes in process `syz.5.461'. [ 72.735194][ T5935] device syzkaller0 entered promiscuous mode [ 72.756149][ T5935] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 72.876833][ T5956] xt_hashlimit: max too large, truncated to 1048576 [ 73.121605][ T5955] loop0: detected capacity change from 0 to 4096 [ 73.123344][ T5955] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.133550][ T5955] EXT4-fs (loop0): Test dummy encryption mode enabled [ 73.136517][ T5955] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 73.137968][ T5955] System zones: 0-5 [ 73.139291][ T5955] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 73.153025][ T5955] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 73.252886][ T5970] process 'syz.1.466' launched './file0' with NULL argv: empty string added [ 73.649760][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 74.342567][ T6029] loop6: detected capacity change from 0 to 512 [ 74.353478][ T6029] EXT4-fs: Ignoring removed orlov option [ 74.377109][ T6029] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 74.379478][ T6029] System zones: 0-2, 18-18, 34-35 [ 74.384900][ T6029] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 74.441148][ T6034] device syzkaller0 entered promiscuous mode [ 74.466318][ T6029] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #2: comm syz.6.484: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 74.471125][ T6029] EXT4-fs (loop6): Remounting filesystem read-only [ 74.477601][ T6034] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 74.515276][ T4882] EXT4-fs (loop6): unmounting filesystem. [ 74.565475][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.575069][ T6043] loop6: detected capacity change from 0 to 1024 [ 74.624157][ T6043] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 74.667985][ T4882] EXT4-fs (loop6): unmounting filesystem. [ 74.746366][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 74.749411][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.751140][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.752715][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.764726][ T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 74.774854][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.781839][ T14] usb 1-1: config 0 descriptor?? [ 74.890775][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'. [ 75.228088][ T6085] loop6: detected capacity change from 0 to 2048 [ 75.239578][ T6085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.286066][ T6090] loop5: detected capacity change from 0 to 128 [ 75.380998][ T6095] loop7: detected capacity change from 0 to 1024 [ 75.430806][ T14] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 75.432575][ T14] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 75.433836][ T14] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 75.442108][ T14] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input3 [ 75.522097][ T14] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 75.641783][ T14] usb 1-1: USB disconnect, device number 3 [ 75.673244][ T6123] fido_id[6123]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 75.769354][ T6142] device syzkaller0 entered promiscuous mode [ 75.779952][ T6142] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 76.252036][ T4327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.259906][ T4327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.261942][ T4327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.263714][ T4327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.265294][ T4327] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.270068][ T4327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.793985][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 76.979580][ T6159] chnl_net:caif_netlink_parms(): no params data found [ 77.018841][ T4482] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.019154][ T6209] loop0: detected capacity change from 0 to 1024 [ 77.053688][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.054953][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.057109][ T6159] device bridge_slave_0 entered promiscuous mode [ 77.059195][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.060405][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.061905][ T6159] device bridge_slave_1 entered promiscuous mode [ 77.070599][ T6159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.073117][ T6159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.097123][ T6159] team0: Port device team_slave_0 added [ 77.099635][ T6159] team0: Port device team_slave_1 added [ 77.102241][ T6209] hfsplus: keylen 65060 too large [ 77.159136][ T6216] loop7: detected capacity change from 0 to 128 [ 77.185251][ T6216] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 77.189859][ T4482] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.201689][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.202958][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.213229][ T6159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.232324][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.233501][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.243176][ T6159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.015325][ T6159] device hsr_slave_0 entered promiscuous mode [ 78.068732][ T5143] EXT4-fs (loop7): unmounting filesystem. [ 78.079592][ T6159] device hsr_slave_1 entered promiscuous mode [ 78.115826][ T6159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.117863][ T6159] Cannot create hsr debugfs directory [ 78.167003][ T4482] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.174790][ T6239] device syzkaller0 entered promiscuous mode [ 78.177539][ T6253] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 78.316746][ T4327] Bluetooth: hci1: command 0x0409 tx timeout [ 78.636900][ T4482] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.161430][ T6287] loop7: detected capacity change from 0 to 1024 [ 79.163355][ T6287] EXT4-fs: inline encryption not supported [ 79.173447][ T6287] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.193478][ T6287] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 79.283538][ T6159] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 79.660370][ T6306] loop0: detected capacity change from 0 to 512 [ 79.661808][ T6306] ext3: Unknown parameter 'obj_role' [ 79.691547][ T6159] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 79.737852][ T6159] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 79.760281][ T5369] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 79.787805][ T6159] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 79.808374][ T6321] overlayfs: unrecognized mount option "\" or missing value [ 80.116379][ T5143] EXT4-fs (loop7): unmounting filesystem. [ 80.177946][ T6159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.186562][ T6159] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.200792][ T6159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.202618][ T6159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.209566][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.218245][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.219683][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.221592][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.223033][ T270] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.224241][ T270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.226329][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.227888][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.229329][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.230455][ T270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.232066][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.233811][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.236061][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.238445][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.254303][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.262588][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.396297][ T4327] Bluetooth: hci1: command 0x041b tx timeout [ 80.533608][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.546493][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.556866][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.558556][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.573323][ T6345] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.659521][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.661372][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.662905][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.757589][ T6367] xt_TCPMSS: Only works on TCP SYN packets [ 81.096749][ T6159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.098133][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.099472][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.174627][ T6384] loop7: detected capacity change from 0 to 512 [ 81.188305][ T6384] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.254752][ T6384] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 81.781587][ T5143] EXT4-fs (loop7): unmounting filesystem. [ 81.781714][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.788957][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.830058][ T6412] loop7: detected capacity change from 0 to 128 [ 81.834910][ T6412] EXT4-fs: Ignoring removed nobh option [ 81.850877][ T6412] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 81.872783][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.876727][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.881771][ T6159] device veth0_vlan entered promiscuous mode [ 81.885069][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.887748][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.893466][ T6159] device veth1_vlan entered promiscuous mode [ 81.908196][ T5143] EXT4-fs (loop7): unmounting filesystem. [ 81.928236][ T6419] fuse: Bad value for 'fd' [ 81.929883][ T6419] fuse: Bad value for 'fd' [ 81.972444][ T6421] loop7: detected capacity change from 0 to 512 [ 82.037707][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.039297][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.049291][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.050921][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.060139][ T6421] EXT4-fs (loop7): 1 truncate cleaned up [ 82.061028][ T6421] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 82.391046][ T5143] EXT4-fs (loop7): unmounting filesystem. [ 82.407167][ T6159] device veth0_macvtap entered promiscuous mode [ 82.409802][ T6159] device veth1_macvtap entered promiscuous mode [ 82.414196][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.422780][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.424329][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.426137][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.427616][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.443439][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.445009][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.449283][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.450981][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.452749][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.460043][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.474941][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.480008][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.482380][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.483941][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.485766][ T4327] Bluetooth: hci1: command 0x040f tx timeout [ 82.492150][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.499505][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.501492][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.503248][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.504765][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.506797][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.508523][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.510265][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.511744][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.513350][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.517355][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.669094][ T6456] xt_socket: unknown flags 0xc [ 83.020504][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.022281][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.040354][ T6159] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.042132][ T6159] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.043573][ T6159] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.051245][ T6159] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.162029][ T270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.168477][ T270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.187193][ T6478] loop0: detected capacity change from 0 to 1024 [ 83.202222][ T6478] EXT4-fs: inline encryption not supported [ 83.208933][ T6478] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.236739][ T6478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 83.664369][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.683769][ T270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.687964][ T270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.691206][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.812601][ T4482] device hsr_slave_0 left promiscuous mode [ 83.845879][ T4482] device hsr_slave_1 left promiscuous mode [ 83.955988][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.957936][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.964098][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.965797][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.987581][ T4482] device bridge_slave_1 left promiscuous mode [ 84.143600][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.150950][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 84.176235][ T4482] device bridge_slave_0 left promiscuous mode [ 84.177466][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.275955][ T4482] device veth1_macvtap left promiscuous mode [ 84.277034][ T4482] device veth0_macvtap left promiscuous mode [ 84.278146][ T4482] device veth1_vlan left promiscuous mode [ 84.279179][ T4482] device veth0_vlan left promiscuous mode [ 84.555632][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 84.632469][ T6521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.017327][ T4482] team0 (unregistering): Port device team_slave_1 removed [ 86.177003][ T4482] team0 (unregistering): Port device team_slave_0 removed [ 86.337879][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.536477][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.868382][ T4482] bond0 (unregistering): Released all slaves [ 89.246968][ T6551] loop7: detected capacity change from 0 to 2048 [ 89.376414][ T6551] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 89.425703][ T113] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.605860][ T113] usb 1-1: Using ep0 maxpacket: 16 [ 89.620572][ T113] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.624314][ T113] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.625556][ T113] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 89.627077][ T113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.683741][ T113] usb 1-1: config 0 descriptor?? [ 89.712222][ T5143] EXT4-fs (loop7): unmounting filesystem. [ 89.898091][ T6592] tipc: Started in network mode [ 89.900840][ T6592] tipc: Node identity 368272d45cf3, cluster identity 4711 [ 89.902088][ T6592] tipc: Enabled bearer , priority 0 [ 89.904024][ T6592] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 89.904959][ T6538] loop0: detected capacity change from 0 to 256 [ 89.937007][ T6592] tipc: Resetting bearer [ 89.958278][ T6532] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 89.959636][ T6532] FAT-fs (loop0): Filesystem has been set read-only [ 89.961998][ T113] usbhid 1-1:0.0: can't add hid device: -71 [ 89.963157][ T113] usbhid: probe of 1-1:0.0 failed with error -71 [ 89.965141][ T113] usb 1-1: USB disconnect, device number 4 [ 90.027011][ T6590] tipc: Disabling bearer [ 90.401983][ T6645] tipc: Enabling of bearer rejected, failed to enable media [ 90.559798][ T6664] loop8: detected capacity change from 0 to 512 [ 90.758014][ T6668] xt_TCPMSS: Only works on TCP SYN packets [ 90.827844][ T6664] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 90.854721][ T6159] EXT4-fs (loop8): unmounting filesystem. [ 91.074159][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.078366][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.399803][ T6727] netlink: 72 bytes leftover after parsing attributes in process `syz.0.652'. [ 91.401522][ T6727] netlink: 'syz.0.652': attribute type 1 has an invalid length. [ 92.047414][ T6766] xt_TCPMSS: Only works on TCP SYN packets [ 92.322743][ T6768] netlink: 72 bytes leftover after parsing attributes in process `syz.8.664'. [ 92.324211][ T6768] netlink: 'syz.8.664': attribute type 1 has an invalid length. [ 92.362822][ T6774] loop8: detected capacity change from 0 to 2048 [ 92.374480][ T6774] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.489379][ T6812] tipc: Enabling of bearer rejected, failed to enable media [ 103.532379][ T6822] loop0: detected capacity change from 0 to 512 [ 103.615935][ T6822] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 103.882154][ T6848] xt_TCPMSS: Only works on TCP SYN packets [ 103.926582][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 103.950139][ T6851] loop8: detected capacity change from 0 to 512 [ 103.960281][ T6851] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 103.963926][ T6851] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 103.969067][ T6851] FAT-fs (loop8): Filesystem has been set read-only [ 104.123144][ T6874] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 104.618045][ T6921] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 105.312655][ T6920] 9pnet_fd: p9_fd_create_unix (6920): problem connecting socket: ./file0: -103 [ 105.507145][ T6965] xt_TCPMSS: Only works on TCP SYN packets [ 105.741364][ T6963] trusted_key: encrypted_key: master key parameter '' is invalid [ 105.945035][ T6982] netlink: 'syz.6.726': attribute type 4 has an invalid length. [ 105.986748][ T6982] netlink: 'syz.6.726': attribute type 4 has an invalid length. [ 106.015303][ T6985] loop7: detected capacity change from 0 to 512 [ 106.156494][ T6994] trusted_key: encrypted_key: master key parameter '' is invalid [ 107.257355][ T7046] trusted_key: encrypted_key: master key parameter '' is invalid [ 107.652637][ T7033] loop7: detected capacity change from 0 to 32768 [ 107.689595][ T7033] loop7: p1 p3 < > [ 108.241537][ T6842] udevd[6842]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 108.247511][ T6818] udevd[6818]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 108.409622][ T7105] 9pnet_fd: Insufficient options for proto=fd [ 109.590282][ T7134] 9pnet_fd: Insufficient options for proto=fd [ 109.817617][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.856434][ T7153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.510569][ T7173] 9pnet_fd: Insufficient options for proto=fd [ 110.675475][ T7187] xt_CT: No such helper "netbios-ns" [ 111.123854][ T7232] fuse: Bad value for 'fd' [ 111.568339][ T7213] 9pnet_fd: p9_fd_create_unix (7213): problem connecting socket: ./file0: -103 [ 111.992296][ T7281] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 112.040935][ T7284] loop8: detected capacity change from 0 to 128 [ 112.214988][ T7297] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 112.403216][ T7310] tipc: Started in network mode [ 112.404038][ T7310] tipc: Node identity c6e4c7e9d155, cluster identity 4711 [ 112.405183][ T7310] tipc: Enabled bearer , priority 0 [ 112.418878][ T7310] device syzkaller0 entered promiscuous mode [ 112.442156][ T7310] tipc: Resetting bearer [ 112.446334][ T7307] tipc: Resetting bearer [ 112.499171][ T7307] tipc: Disabling bearer [ 113.024040][ T7337] device syzkaller0 entered promiscuous mode [ 114.173046][ T7368] loop7: detected capacity change from 0 to 128 [ 114.573400][ T7291] overlayfs: failed to clone upperpath [ 115.222247][ T7412] 9pnet_fd: Insufficient options for proto=fd [ 115.410503][ T27] audit: type=1326 audit(627.398:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35c0a8 code=0x7ffc0000 [ 115.420822][ T27] audit: type=1326 audit(627.408:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35c0a8 code=0x7ffc0000 [ 115.422912][ T7431] overlayfs: failed to clone upperpath [ 115.424410][ T27] audit: type=1326 audit(627.408:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35c0a8 code=0x7ffc0000 [ 115.434564][ T27] audit: type=1326 audit(627.408:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbc35c0a8 code=0x7ffc0000 [ 115.438389][ T27] audit: type=1326 audit(627.418:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35c0a8 code=0x7ffc0000 [ 115.441873][ T27] audit: type=1326 audit(627.418:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35c0a8 code=0x7ffc0000 [ 115.450864][ T27] audit: type=1326 audit(627.418:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35c0a8 code=0x7ffc0000 [ 115.459214][ T27] audit: type=1326 audit(627.418:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35c0a8 code=0x7ffc0000 [ 115.462590][ T27] audit: type=1326 audit(627.418:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=84 compat=0 ip=0xffffbc35c0a8 code=0x7ffc0000 [ 115.472096][ T27] audit: type=1326 audit(627.418:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35c0a8 code=0x7ffc0000 [ 115.481011][ T7437] 9pnet_fd: Insufficient options for proto=fd [ 116.423721][ T7470] 9pnet_fd: Insufficient options for proto=fd [ 116.449519][ T7472] 9pnet_fd: p9_fd_create_unix (7472): problem connecting socket: ./file0: -111 [ 123.843303][ T7519] loop7: detected capacity change from 0 to 128 [ 124.053446][ T7534] xt_TCPMSS: Only works on TCP SYN packets [ 124.111302][ T7542] 9pnet_fd: p9_fd_create_unix (7542): problem connecting socket: ./file0: -111 [ 124.207482][ T7557] tipc: Enabling of bearer rejected, failed to enable media [ 124.567171][ T7596] xt_TCPMSS: Only works on TCP SYN packets [ 124.802042][ T7625] tipc: Enabling of bearer rejected, failed to enable media [ 125.181299][ T7668] 9pnet_fd: p9_fd_create_unix (7668): problem connecting socket: ./file0: -111 [ 125.242482][ T7676] tipc: Enabling of bearer rejected, failed to enable media [ 125.361874][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.8.949'. [ 125.602824][ T7725] tipc: Enabling of bearer rejected, failed to enable media [ 125.644746][ T7731] loop7: detected capacity change from 0 to 128 [ 125.680651][ T7731] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 125.739953][ T5143] EXT4-fs (loop7): unmounting filesystem. [ 125.914547][ T7769] tipc: Enabling of bearer rejected, failed to enable media [ 125.916573][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.916617][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.978805][ T7779] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.996557][ T7779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.039294][ T7786] fuse: Bad value for 'fd' [ 126.113196][ T7796] trusted_key: encrypted_key: master key parameter '' is invalid [ 126.214579][ T7809] tipc: Enabling of bearer rejected, failed to enable media [ 126.354537][ T7835] trusted_key: encrypted_key: master key parameter '' is invalid [ 126.496470][ T7854] tipc: Enabling of bearer rejected, failed to enable media [ 126.526665][ T7851] 9pnet_fd: p9_fd_create_unix (7851): problem connecting socket: ./file0: -111 [ 126.539991][ T7860] loop7: detected capacity change from 0 to 128 [ 126.569860][ T7860] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 126.676804][ T7876] trusted_key: encrypted_key: master key parameter '' is invalid [ 126.995958][ T7915] fuse: Bad value for 'fd' [ 127.029603][ T7915] 9pnet_fd: p9_fd_create_unix (7915): problem connecting socket: ./file0: -111 [ 127.121897][ T7923] tipc: Enabling of bearer rejected, failed to enable media [ 127.233343][ T7935] trusted_key: encrypted_key: master key parameter '' is invalid [ 127.383457][ T7952] fuse: Bad value for 'fd' [ 127.385183][ T7952] 9pnet_fd: p9_fd_create_unix (7952): problem connecting socket: ./file0: -111 [ 127.487232][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.513528][ T5143] EXT4-fs (loop7): unmounting filesystem. [ 127.545674][ T7964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.559821][ T7971] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.564964][ T7973] trusted_key: encrypted_key: master key parameter '' is invalid [ 127.582013][ T7971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.583201][ T7971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.585003][ T7971] device bridge_slave_0 left promiscuous mode [ 127.597067][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.643686][ T7971] device bridge_slave_1 left promiscuous mode [ 127.645521][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.691007][ T7971] bond0: (slave bond_slave_0): Releasing backup interface [ 127.725512][ T7971] bond0: (slave bond_slave_1): Releasing backup interface [ 127.886474][ T7971] team0: Port device team_slave_0 removed [ 127.902512][ T7971] team0: Port device team_slave_1 removed [ 127.904281][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.906409][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.910377][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.912881][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.930362][ T7977] tipc: Enabling of bearer rejected, failed to enable media [ 128.025261][ T8008] 9pnet_fd: p9_fd_create_unix (8008): problem connecting socket: ./file0: -111 [ 128.049353][ T8010] trusted_key: encrypted_key: master key parameter '' is invalid [ 128.120160][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 128.120172][ T27] audit: type=1326 audit(640.108:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.1.1042" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc35c0a8 code=0x0 [ 128.244267][ T27] audit: type=1326 audit(640.228:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8030 comm="syz.6.1046" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9115c0a8 code=0x0 [ 128.705462][ T8061] netlink: 'syz.8.1049': attribute type 4 has an invalid length. [ 128.742135][ T8064] tipc: Enabled bearer , priority 0 [ 128.743648][ T8064] device syzkaller0 entered promiscuous mode [ 128.747138][ T8064] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 128.787567][ T8064] tipc: Resetting bearer [ 128.792892][ T8062] tipc: Resetting bearer [ 128.825610][ T8070] trusted_key: encrypted_key: master key parameter '' is invalid [ 128.866133][ T8062] tipc: Disabling bearer [ 129.095902][ T8093] 9pnet_fd: p9_fd_create_unix (8093): problem connecting socket: ./file0: -111 [ 129.301254][ T8111] trusted_key: encrypted_key: master key parameter '' is invalid [ 129.448405][ T8123] tipc: Enabling of bearer rejected, failed to enable media [ 129.516578][ T8131] loop0: detected capacity change from 0 to 128 [ 129.786813][ T8154] trusted_key: encrypted_key: master key parameter '' is invalid [ 129.908409][ T8164] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1077'. [ 129.910853][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1077'. [ 130.174168][ T8187] overlayfs: failed to clone upperpath [ 130.524361][ T8222] loop0: detected capacity change from 0 to 512 [ 130.534538][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1088'. [ 131.026405][ T8273] fuse: Bad value for 'fd' [ 131.394994][ T8302] tipc: Enabling of bearer rejected, failed to enable media [ 131.664391][ T8335] fuse: Bad value for 'fd' [ 131.696431][ T8335] 9pnet_fd: p9_fd_create_unix (8335): problem connecting socket: ./file0: -111 [ 131.803821][ T8353] overlayfs: failed to clone upperpath [ 131.850943][ T8355] loop0: detected capacity change from 0 to 128 [ 131.888214][ T8355] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 132.096770][ T8372] xt_hashlimit: max too large, truncated to 1048576 [ 132.422325][ T8406] input: syz0 as /devices/virtual/input/input4 [ 132.791397][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 132.869320][ T8457] loop7: detected capacity change from 0 to 256 [ 132.886370][ T8457] exfat: Deprecated parameter 'namecase' [ 132.890013][ T8457] exfat: Deprecated parameter 'namecase' [ 132.896020][ T8457] exfat: Deprecated parameter 'utf8' [ 132.913599][ T8457] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 133.423171][ T8486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.424585][ T8485] loop0: detected capacity change from 0 to 128 [ 133.425814][ T8486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.430646][ T8485] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.841638][ T8503] fuse: Bad value for 'fd' [ 133.844007][ T8503] 9pnet_fd: p9_fd_create_unix (8503): problem connecting socket: ./file0: -111 [ 134.099958][ T8528] fuse: Bad value for 'fd' [ 134.103544][ T8528] 9pnet_fd: p9_fd_create_unix (8528): problem connecting socket: ./file0: -111 [ 134.557529][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 134.943629][ T8557] fuse: Bad value for 'fd' [ 134.949418][ T8557] 9pnet_fd: p9_fd_create_unix (8557): problem connecting socket: ./file0: -111 [ 135.217790][ T8561] loop7: detected capacity change from 0 to 40427 [ 135.234712][ T8561] F2FS-fs (loop7): invalid crc value [ 135.251867][ T8561] F2FS-fs (loop7): Found nat_bits in checkpoint [ 135.271689][ T8561] F2FS-fs (loop7): Start checkpoint disabled! [ 135.283654][ T8561] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 135.452594][ T8593] 9pnet_fd: p9_fd_create_unix (8593): problem connecting socket: ./file0: -111 [ 135.592163][ T5018] kworker/u4:10: attempt to access beyond end of device [ 135.592163][ T5018] loop7: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 135.607033][ T5018] kworker/u4:10: attempt to access beyond end of device [ 135.607033][ T5018] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 136.084884][ T8615] tipc: Enabled bearer , priority 0 [ 136.090361][ T8615] device syzkaller0 entered promiscuous mode [ 136.114756][ T8615] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 136.709523][ T8583] sched: RT throttling activated [ 136.771830][ T8617] tipc: Resetting bearer [ 136.825093][ T8628] 9pnet_fd: p9_fd_create_unix (8628): problem connecting socket: ./file0: -111 [ 136.835045][ T8614] tipc: Resetting bearer [ 137.490658][ T4434] tipc: Node number set to 1785819860 [ 137.827082][ T8614] tipc: Disabling bearer [ 137.968771][ T8652] tipc: Enabled bearer , priority 0 [ 137.970166][ T8652] device syzkaller0 entered promiscuous mode [ 138.017188][ T8652] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 138.046122][ T8659] loop0: detected capacity change from 0 to 256 [ 138.076463][ T8652] tipc: Resetting bearer [ 138.081757][ T8651] tipc: Resetting bearer [ 138.123280][ T8659] FAT-fs (loop0): Directory bread(block 64) failed [ 138.124461][ T8659] FAT-fs (loop0): Directory bread(block 65) failed [ 138.127587][ T8659] FAT-fs (loop0): Directory bread(block 66) failed [ 138.128545][ T8659] FAT-fs (loop0): Directory bread(block 67) failed [ 138.129566][ T8659] FAT-fs (loop0): Directory bread(block 68) failed [ 138.130671][ T8659] FAT-fs (loop0): Directory bread(block 69) failed [ 138.131796][ T8659] FAT-fs (loop0): Directory bread(block 70) failed [ 138.132957][ T8659] FAT-fs (loop0): Directory bread(block 71) failed [ 138.134104][ T8659] FAT-fs (loop0): Directory bread(block 72) failed [ 138.135217][ T8659] FAT-fs (loop0): Directory bread(block 73) failed [ 138.535774][ T8661] overlayfs: failed to clone upperpath [ 138.537318][ T8651] tipc: Disabling bearer [ 139.056358][ T27] audit: type=1326 audit(651.048:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.8.1234" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535c0a8 code=0x0 [ 140.200343][ T8705] loop7: detected capacity change from 0 to 512 [ 140.229123][ T8705] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 140.387879][ T105] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 140.393950][ T105] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1025 with error 28 [ 140.400383][ T105] EXT4-fs (loop7): This should not happen!! Data will be lost [ 140.400383][ T105] [ 140.402311][ T105] EXT4-fs (loop7): Total free blocks count 0 [ 140.403403][ T105] EXT4-fs (loop7): Free/Dirty block details [ 140.404539][ T105] EXT4-fs (loop7): free_blocks=65280 [ 140.409295][ T105] EXT4-fs (loop7): dirty_blocks=1025 [ 140.410225][ T105] EXT4-fs (loop7): Block reservation details [ 140.411373][ T105] EXT4-fs (loop7): i_reserved_data_blocks=1025 [ 140.434655][ T5143] EXT4-fs (loop7): unmounting filesystem. [ 140.524622][ T8716] loop0: detected capacity change from 0 to 128 [ 140.545357][ T8716] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 141.519403][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 141.605211][ T8749] tipc: Enabled bearer , priority 0 [ 141.609649][ T8749] device syzkaller0 entered promiscuous mode [ 141.613164][ T8749] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 141.708869][ T8748] tipc: Resetting bearer [ 141.828645][ T8748] tipc: Disabling bearer [ 142.818541][ T8807] tipc: Enabled bearer , priority 0 [ 142.823365][ T8807] device syzkaller0 entered promiscuous mode [ 142.826942][ T8807] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 142.961372][ T8812] 9pnet_fd: p9_fd_create_unix (8812): problem connecting socket: ./file0: -111 [ 143.909278][ T8806] tipc: Resetting bearer [ 144.868121][ T8806] tipc: Disabling bearer [ 145.593685][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 145.595214][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 145.899355][ T8858] loop7: detected capacity change from 0 to 40427 [ 145.909170][ T8858] F2FS-fs (loop7): Unrecognized mount option "whint_mode=user-based" or missing value [ 146.100966][ T8894] overlayfs: failed to clone upperpath [ 146.156042][ T4374] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.268889][ T8911] syz.6.1305 (8911): attempted to duplicate a private mapping with mremap. This is not supported. [ 146.724886][ T4374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.731849][ T4374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.743538][ T4374] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.767555][ T4374] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.780984][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.968714][ T4374] usb 1-1: config 0 descriptor?? [ 147.049413][ T8923] device bridge1 entered promiscuous mode [ 147.498908][ T8875] loop0: detected capacity change from 0 to 512 [ 147.570274][ T8875] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1293: casefold flag without casefold feature [ 147.572880][ T8875] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1293: couldn't read orphan inode 15 (err -117) [ 147.583388][ T8875] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 148.597282][ T4374] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 148.602694][ T4374] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 149.305071][ T8968] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1327'. [ 149.648205][ T5747] usb 1-1: USB disconnect, device number 5 [ 149.753121][ T4482] [ 149.753581][ T4482] ============================================ [ 149.754550][ T4482] WARNING: possible recursive locking detected [ 149.755615][ T4482] syzkaller #0 Not tainted [ 149.756471][ T4482] -------------------------------------------- [ 149.757454][ T4482] kworker/u4:7/4482 is trying to acquire lock: [ 149.758491][ T4482] ffff0000f89ff9e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0x140/0x480 [ 149.759939][ T4482] [ 149.759939][ T4482] but task is already holding lock: [ 149.761042][ T4482] ffff0000f89fa1e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xa8/0x480 [ 149.762509][ T4482] [ 149.762509][ T4482] other info that might help us debug this: [ 149.763882][ T4482] Possible unsafe locking scenario: [ 149.763882][ T4482] [ 149.765018][ T4482] CPU0 [ 149.765490][ T4482] ---- [ 149.765964][ T4482] lock(rlock-AF_UNIX); [ 149.766597][ T4482] lock(rlock-AF_UNIX); [ 149.767244][ T4482] [ 149.767244][ T4482] *** DEADLOCK *** [ 149.767244][ T4482] [ 149.768395][ T4482] May be due to missing lock nesting notation [ 149.768395][ T4482] [ 149.769525][ T4482] 4 locks held by kworker/u4:7/4482: [ 149.770273][ T4482] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 149.771907][ T4482] #1: ffff800022487c20 (unix_gc_work){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 149.773373][ T4482] #2: ffff800017829e18 (unix_gc_lock){+.+.}-{2:2}, at: __unix_gc+0xb8/0x1334 [ 149.774657][ T4482] #3: ffff0000f89fa1e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xa8/0x480 [ 149.776139][ T4482] [ 149.776139][ T4482] stack backtrace: [ 149.777080][ T4482] CPU: 0 PID: 4482 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 149.778338][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 149.779866][ T4482] Workqueue: events_unbound __unix_gc [ 149.780766][ T4482] Call trace: [ 149.781283][ T4482] dump_backtrace+0x1c8/0x1f4 [ 149.782131][ T4482] show_stack+0x2c/0x3c [ 149.782862][ T4482] __dump_stack+0x30/0x40 [ 149.783590][ T4482] dump_stack_lvl+0xf8/0x160 [ 149.784379][ T4482] dump_stack+0x1c/0x5c [ 149.785091][ T4482] __lock_acquire+0x18b4/0x6544 [ 149.785919][ T4482] lock_acquire+0x20c/0x644 [ 149.786661][ T4482] _raw_spin_lock+0x54/0x6c [ 149.787447][ T4482] unix_collect_skb+0x140/0x480 [ 149.788199][ T4482] __unix_gc+0xd18/0x1334 [ 149.788857][ T4482] process_one_work+0x7f4/0x13a8 [ 149.789568][ T4482] worker_thread+0x8c8/0xfbc [ 149.790248][ T4482] kthread+0x250/0x2d8 [ 149.790863][ T4482] ret_from_fork+0x10/0x20 [ 150.180983][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 158.715444][ T4327] Bluetooth: hci2: command 0x0406 tx timeout [ 158.716496][ T4327] Bluetooth: hci0: command 0x0406 tx timeout