last executing test programs: 19.326662868s ago: executing program 4 (id=187): write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0xd, 0x0, 0x0, @time={0x3, 0x83}, {0x0, 0x2}, {0x20}, @raw32={[0x0, 0xb2d1]}}], 0xfe52) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0xd4}, 0x1, 0x0, 0x0, 0x48000}, 0x2000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b853886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = fanotify_init(0x40, 0x800) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) fanotify_mark(r0, 0x21, 0x8000000, r5, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) connect$bt_rfcomm(r7, &(0x7f0000005dc0)={0x1f, @any, 0x11}, 0xa) clock_gettime(0x8, 0x0) shutdown(r5, 0x0) tee(r1, 0xffffffffffffffff, 0xd, 0x8) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x801, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x4, 0x5, &(0x7f0000000100)='\x00\x00\x00\x00', &(0x7f0000000140)=""/5, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) 18.466017168s ago: executing program 4 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket(0x8, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getdents64(r2, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000003c0)="e3402a2059ded7eb80f67f19ae87aa2c8d302d927c903e95f61931c2ed91cb8059b181b0", 0x24) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 17.49192862s ago: executing program 4 (id=215): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001dc0)={{0x3, 0x0, 0x0, 0x0, r4, 0x8, 0x2}, 0x0, 0x0, 0x7fffffff, 0x2, 0x8, 0x1, 0x6, 0x40, 0xff3a, 0x5, r0, r0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x400, @mcast1, 0x6a3}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x60}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x2000c0c0) sigaltstack(&(0x7f0000000500)={&(0x7f00000003c0)=""/167, 0x0, 0xa7}, &(0x7f00000005c0)={&(0x7f0000000540)=""/23, 0x0, 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl(0xffffffffffffffff, 0xc138fd0e, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) ioctl(0xffffffffffffffff, 0xc138fd05, &(0x7f0000000000)="04000000020000") write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x4000, 0x0, 0x0, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) 16.60920509s ago: executing program 4 (id=230): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5ae, &(0x7f00000004c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) 16.493625053s ago: executing program 4 (id=233): semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000100)=[{0x1, 0x0, 0x1000}, {0x2}, {0x1, 0x7, 0x1000}], 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)) 15.945631475s ago: executing program 1 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x407}}, {0x9, &(0x7f0000000640)=@string={0x9, 0x3, "da79952bac9a1e"}}, {0x77, &(0x7f00000006c0)=@string={0x77, 0x3, "f985de4e6c570918c0431310a5130c3b0bc8e409d3f48586e4b57936d941ec6dc6425fadf2d3c4423ea3c234023767f2c059c1736f99b1fedec54b4560a6514d093204ed9140f4d50e081e743f69b437f210a3b9cd12ddc674d1acf33953a899e4a690f737f749661b4fe0ec0ce5c88a45472adb8f"}}]}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[], 0x6f4}}, 0x0) 15.864840357s ago: executing program 4 (id=241): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001dc0)={{0x3, 0x0, 0x0, 0x0, r4, 0x8, 0x2}, 0x0, 0x0, 0x7fffffff, 0x2, 0x8, 0x1, 0x6, 0x40, 0xff3a, 0x5, r0, r0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x400, @mcast1, 0x6a3}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x60}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x2000c0c0) sigaltstack(&(0x7f0000000500)={&(0x7f00000003c0)=""/167, 0x0, 0xa7}, &(0x7f00000005c0)={&(0x7f0000000540)=""/23, 0x0, 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl(0xffffffffffffffff, 0xc138fd0e, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) ioctl(0xffffffffffffffff, 0xc138fd05, &(0x7f0000000000)="04000000020000") write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x4000, 0x0, 0x0, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) 15.712607851s ago: executing program 32 (id=241): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001dc0)={{0x3, 0x0, 0x0, 0x0, r4, 0x8, 0x2}, 0x0, 0x0, 0x7fffffff, 0x2, 0x8, 0x1, 0x6, 0x40, 0xff3a, 0x5, r0, r0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x400, @mcast1, 0x6a3}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x60}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x2000c0c0) sigaltstack(&(0x7f0000000500)={&(0x7f00000003c0)=""/167, 0x0, 0xa7}, &(0x7f00000005c0)={&(0x7f0000000540)=""/23, 0x0, 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl(0xffffffffffffffff, 0xc138fd0e, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) ioctl(0xffffffffffffffff, 0xc138fd05, &(0x7f0000000000)="04000000020000") write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x4000, 0x0, 0x0, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) 15.246644571s ago: executing program 1 (id=248): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 15.245988791s ago: executing program 1 (id=249): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvTH8gP0oXxB8gyioSG9GWFlQOXjSacDEx0YMea6kEWcDQmgghUo3Bo/EvUI8m/gWe9GLUk8ar3o0JMVxED2bN7M7Att2tbbfbBefzSab73vx6782b13kzb2cDKK1q9ieJ2BERv0TEaDO6eIVq8+PG9cszf12/PJNEvf7KH0ljvT+vX54pVt2Rf27P9zmWRqQfJrHQJt25i5fOTNdqsxfy+MT82bcn5i5eevL02elTs6dmz00dP37s6OQzT089tSHlHMnyuu+98/v3nnj9k5dmYuGN77/M8j+QL28tR1Ol6zSrUY16vV5PF80dbvw91PXeby8jLeFksI8ZYU2y8z+rrqFG+x+NgbhVeaPx4gd9zRzQU9n1adeyuc2rYnooaSwH/q+0cSir4oqf3f8W0+b2QPrr2nPNG6Cs3DfyqblkMLL79qTSvGMf6FH6OyLitYW/P82maPscAgBgY32d9X+eaNf/S+PelvV25mNDlYg4HBG7I+LuiNgTEfdENNa9LyLuX2P61SXx5f2fn7auq2CrlPX/ns3Hthb3/26O2lQG8thIo/xDyZuna7NH8mMyFkNbsvjkCml888LPH3daVm3p/2VTln7RF8zz8fvglsXbnJyen+6mzK2uvR+xb7Bd+ZObIwFJROyNiH3r2H92zE4//sX+LLxz+/Ll/13+FWzAOFP984jHmvW/EEvKX0iaKXUan5y4K2qzRyaKs2K5H368+nJrfKgl3FX5N0BW/9vanv95+YtmUIzXzq09jau/ftTxnma95/9w8mojPJzPe3d6fv7CZMRwPmPR/Klb2xbxYv2s/GMH27f/3RH/fJZv90BEZCfxgxHxUEQcyPP+cEQ8EhEHVyj/d88/+tbKR6i/9X+yQ/3nZ0AlaR2vX0dg4My3X3VKf3X1f6wRGsvnrOb/32oz2N3RAwAAgDtD2hiDTtLxm+E0HR9vfod/T2xLa+fn5g9X451zJ5tj1ZUYSosnXaMtz0Mn82fDRXxqSfxoROxqfNNoayM+PnO+NtLvwkPJbe/Q/jO/9epLL8DtY03jaEnv8gFsPu9rQnlp/1Be2j+Ul/YP5dWu/V+JuNGHrACbzPUfykv7h/LS/qG8tH8opeWvxBc/t7KeN/1vBXaf6GrzEgUGutt8IiLaLorWH+3oQSDSPh66+pV6vZv9pP2v9wtzB/LAlohY7VZXelqnS8+fFXk7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCP8GwAA///IPOO2") 15.115917954s ago: executing program 1 (id=250): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 15.096378935s ago: executing program 1 (id=251): setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10) socket$packet(0x11, 0x2, 0x300) inotify_init1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x10000000004, 0x8112) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="043e0c020105cb"], 0xf) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r4, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d00000800020000000000080009002a"], 0x38}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000010100002a00000014000180100004000000000000000000000000000c00028008000100"], 0x38}}, 0x0) 13.876232733s ago: executing program 1 (id=264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001dc0)={{0x3, 0x0, 0x0, 0x0, r4, 0x8, 0x2}, 0x0, 0x0, 0x7fffffff, 0x2, 0x8, 0x1, 0x6, 0x40, 0xff3a, 0x5, r0, r0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x400, @mcast1, 0x6a3}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x2000c0c0) sigaltstack(&(0x7f0000000500)={&(0x7f00000003c0)=""/167, 0x0, 0xa7}, &(0x7f00000005c0)={&(0x7f0000000540)=""/23, 0x0, 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl(0xffffffffffffffff, 0xc138fd0e, 0x0) ioctl(0xffffffffffffffff, 0xc138fd05, &(0x7f0000000000)="04000000020000") 13.721091246s ago: executing program 33 (id=264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001dc0)={{0x3, 0x0, 0x0, 0x0, r4, 0x8, 0x2}, 0x0, 0x0, 0x7fffffff, 0x2, 0x8, 0x1, 0x6, 0x40, 0xff3a, 0x5, r0, r0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x400, @mcast1, 0x6a3}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x2000c0c0) sigaltstack(&(0x7f0000000500)={&(0x7f00000003c0)=""/167, 0x0, 0xa7}, &(0x7f00000005c0)={&(0x7f0000000540)=""/23, 0x0, 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl(0xffffffffffffffff, 0xc138fd0e, 0x0) ioctl(0xffffffffffffffff, 0xc138fd05, &(0x7f0000000000)="04000000020000") 3.096348169s ago: executing program 3 (id=438): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000040)='./bus\x00') syz_mount_image$vfat(&(0x7f0000006600), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000cc0)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = open(&(0x7f0000000280)='./file1\x00', 0x1e9400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc4a42, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="834ea5", 0x3}], 0x1}}], 0x1, 0x20040840) sendfile(r5, r5, 0x0, 0x800000020) clock_gettime(0x0, &(0x7f0000000180)) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xe, 0x40000000000, 0xffffffffffffffff, 0xffffffeffffffffe, 0x0, 0x6, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3ff, 0x0, 0xfffffffffffffffc, 0x4, 0x4000000000, 0x6, 0x1, 0x40, 0x0, 0xfffffffffffffffd, 0x80100200000, 0xb, 0x7ffffffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x93, 0x4, 0x4, 0x1a8e, 0x0, 0xfffffffffffffffe, 0x0, 0xbb4e, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x6, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x4, 0x8000000, 0xfffffffffffffffc, 0x80000000000000, 0x8, 0x9, 0x200000000, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2c5, 0x0, 0x4, 0x81, 0xfffffffffffffff9, 0x0, 0x200000000, 0x0, 0x9, 0x0, 0x4, 0x3, 0x2, 0x0, 0x6, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffeffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000, 0x2, 0x80]}) 1.888055006s ago: executing program 3 (id=451): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) unshare(0x28040600) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000002680)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYBLOB="c97001abf7577b7e", @ANYRESOCT, @ANYRESOCT=0x0, @ANYBLOB="2cc30c26652e1807e34d433353a73fa54323002e05", @ANYBLOB="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", @ANYRES16], 0x8, 0xc29, &(0x7f00000008c0)="$eJzs3U9sHNd9B/DfG3LFldxWTOwodhsXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcqnBYGbfikuKsmiRlCjr87Gp7+7sezPvzVvPyILevAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIn7/1fMnTqaH3QoA4EG6OPrVE6fc/wHgsXLZ//8DAAAAAAAAAAAAAMB+l6KIJyPF7MXVNF6976hfaNdu3hobHtm62sFU1eyrypc/9ZOnTp/50otDZ7t5oT39EfV32zPx+ujl841XZm7Mzk3Oz09ONMam21dnJia3vYed1t/sWHUCGjfeuDlx7dp849QLpzd8fGvwg4EnjgyeG3ru+LPdsmPDIyOj60Xq933sLdxthseBKOJ4pHj+ez9NrYgoYufnov5gx36zg1UnjlWdGBseqToy1W5NL5QfXuqeiCKi0VOp2T1HW49F9NceaB/urhmxWDa/bPCxsnujs6251pWpycal1txCe6E9M30pdVpb9qcRRZxNEUsRsTJw5+5qUUR/pPjO4dV0JSL6uufhi9XE4Lu3o9jDPm5D2c5GLWKpeATGbB8biCJeixQ/e/doXC3PWf6JL0S8VuYPIt4u8+WIVH4xzkS8v8X3iEdTfxTxF+X4n1tNE9X1oHtdufC1xlemr830lO1eVz7m/eGOK8VDuj8c3JQPxj6/NtWjiFZ1xV9N9/+bHQAAAAAAAAAAAAAAAAB228Eo4plI8eq//3E1rziqeemHzw39weAv984Zf/oe+ynLvhARi8X25uQeyBMDL6VLKT3kucSPs3oU8Sd5/t+3HnZjAAAAAAAAAAAAAAAAAAAAHmtF/CRSvPTe0bQUvWuKt6evNy63rkx1VoXtrv3bXTN9bW1trZE62cw5nnMx51LO5ZwrOaPI9XM2c47nXMy5lHM550rO6Mv1czbL7FtbG8/vF3Mu5VzOuZIz+nP9nM2c4zkXcy7lXM65kjNqEf9fJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu6aIIj6MFN/+xmqKFBHNiPHo5PLAw24dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAaSEV8P1I0/rB5e1t/RKTq346j5S9nonmgzE9Hc6jMl6N5Pmeryv7mtx5C+9mZWirix5FioP7O7QHP41/rvLv9NYi3v7n+7lf7O9nX/XDwg4Enjhw+NzTy60/f7XXaqgHHLrSnb95qjA2PjIz2bO7PR/90z7bBfNxid7pORMy/+dYbrampybn7f1F+BXZQ3Qsv9uuL6N8XzXg4fecxUN7/348Uv/Pef3Rv+N37/y913t2+w8fP/3T9/v/S5h1t8/7fv7nePe7/T/Zseyn/bqTWH1FfuDFbOxJRn3/zrePtG63rk9cnp8+cOPHloaEvnz5ROxBRv9aemux5tSunCwAAAAAAAAAAAAAAAODBSUX8XqRo/Xg1NSLiVjVfa/Dc0HPHn+2Lvmq+1YZ526+PXj7feGXmxuzc5Pz85ERjbLp9dWZicruHq1fTvcaGR/akM/d0cI/bf7D+yszsm3Pt63+0sOXnh+rnr8wvzLWubv1xHIwiotm75VjV4LHhkarRU+3WdFX10paT6T++WiriPyPF1TON9Pm8Lc//2zzDf8P8/8XNO9qj+f+f6tlWHjOlIn4eKX77L5+Oz1ftPBR3nLNc7m8jxbGzn8vl4kBZrtuGznMFOjMDy7L/Gyn+8cONZbvzIZ9cL3ty2yf2EVGO/+FI8f0//278Rt628fkPW4//oc072qPxf6pn26ENzyvYcdfJ4388Urz85Dvxm3nbRz3/o/vsjaO58O3nc+zR+H+mZ9tgPu5v7U7XAQAAAAAAAAAAHmm1VMTfRYofjvSnF/O27fz9v4nNO9qjv//12Z5tE7uzXtE9X9zZyMMf/8QCAAAAwD5QS0X8JFJcX3jn9hzqjfO/e+Z//u76/M/htOnT6s/5fqV6bsBu/vlfr8F83PGddxsAAAAAAAAAAAAAAAAAAAD2lZSKeDGvpz5ezefvPO9zq/XUlyPFq//9fC6XjkSxvg78YPVr/eLM9PHzU1MzV1sLrStTk43R2dbVybLuU5Fi9W8+l+sW1frq3fXmO2u8r6/FPhcpRv6+W7azFnt3bfKn1sueLMt+KlL81z9sLNtdx/oz62VPlWX/OlJ8/Z+3Lntkvezpsux3I8WPvt7olj1Ulu0+H/Wz62VfuDpT7PqYAAAAAAAAAAAAAAAAAAAA8PippSL+LFL8z42l23P58/r/tZ63lbe/2bPe/ya3qnX+B6v1/+/2+n7W/6+eK7B4t6MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAnU4oi3ooUsxdX0/JA+b6jfqE9ffPW2PDI1tUOpqpmX1W+/KmfPHX6zJdeHDrbzY+uv9ueiddHL59vvDJzY3Zucn5+cqIxNt2+OjMxue097LT+ZseqE9C48cbNiWvX5hunXji94eNbgx8MPHFk8NzQc8ef7ZYdGx4ZGe0p01+776PfId1l+4Eo4q8ixfPf+2n64UBEETs/F/f47uy1g1UnjlWdGBseqToy1W5NL5QfXuqeiCKi0VOp2T1HD2AsdqQZsVg2v2zwsbJ7o7OtudaVqcnGpdbcQnuhPTN9KXVaW/anEUWcTRFLEbEycOfualHEG5HiO4dX078MRPR1z8MXL45+9cSpu7ej2MM+bkPZzkYtYql4BMZsHxuIIv4pUvzs3aPxrwMR/dH5iS9EvFbmDyLejs54p/KLcSbi/S2+Rzya+qOI/yvH/9xqenegvB50rysXvtb4yvS1mZ6y3evKI39/eJD2+bWpHkX8qLrir6Z/8981AAAAAAAAAAAAAAAAwD5SxK9FipfeO5qq+cG35xS3p683LreuTHWm9XXn/nXnTK+tra01UiebOcdzLuZcyrmccyVnFLl+zmaZ9bW18fx+MedSzuWcKzmjL9fP2cw5nnMx51LO5ZwrOaM/18/ZzDmeczHnUs7lnCs5Y5/M3QMAAAAAAAAAAAAAAAAAAD5ZiuqfFN/+xmpaG+isLz0enVy2Hugn3i8CAAD//+Ju/gM=") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, 0x0, 0x0) ftruncate(r0, 0x4a8e) 1.546338074s ago: executing program 3 (id=463): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x267) 1.545587644s ago: executing program 0 (id=464): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x12000051) 1.541030724s ago: executing program 6 (id=465): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) sendmsg$nl_route_sched(r0, 0x0, 0x44800) 1.517770495s ago: executing program 2 (id=466): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3fa, 0x1, 0x70bd27, 0x25dfdbfb, {0x1, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x8080) 1.494087055s ago: executing program 3 (id=467): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x31, 0x0, 0x0, 0xe12b}, {0x15, 0x0, 0x0, 0x8}, {0x6, 0x81, 0x8, 0x9}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) rt_sigqueueinfo(r0, 0x6, &(0x7f00000007c0)={0x19, 0x7f1a, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300}) 1.493663405s ago: executing program 6 (id=468): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000240)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e6963622c6164696e6963622c7569643d666f726765742c7569643d666f726765742c756d61736b3d30303030b03030303030303030303030303030303030322c6c6f6e6761642c6769643d", @ANYRESDEC=0x0, @ANYBLOB='\x00'/11], 0xfe, 0xc22, &(0x7f00000002c0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e800500"], 0x48}}, 0x8000) 1.416739637s ago: executing program 2 (id=469): r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc4a42, 0x80) fallocate(r1, 0x0, 0x0, 0x8ffff) sendfile(r0, r0, 0x0, 0x800000020) 1.405913117s ago: executing program 2 (id=470): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0b0311"], 0x7) 1.360674068s ago: executing program 2 (id=471): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000400, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1, 0x6eb, &(0x7f0000001240)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1005004, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x28, r1, 0x805, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048011}, 0x40) 984.182617ms ago: executing program 6 (id=472): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x7}, 0x8) 951.859698ms ago: executing program 6 (id=474): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000019300)={0x6, {{0x2, 0x4e24, @multicast1}}}, 0x90) 946.439828ms ago: executing program 2 (id=475): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 864.15081ms ago: executing program 5 (id=476): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0xff07}, 0x2000000) 864.011319ms ago: executing program 6 (id=477): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000200)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000040)='./bus\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000004a00030000000000000000000a005cc7"], 0x24}, 0x1, 0x0, 0x0, 0x44090}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000000300)) 849.69101ms ago: executing program 5 (id=478): timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {r1, r2+60000000}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 737.724173ms ago: executing program 5 (id=479): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) 397.25435ms ago: executing program 3 (id=480): mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYBLOB=',debug=0x0000007,version=9p20\\++},%{!(6,afid=0x000000003f5689cf,nodevmap,fscache,afid=0x0000000000000f9c,msize=0x00']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x1000) r1 = dup(r0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0xfff, 0x1, 0x9, 0x9}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x3}}}}}}}}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 304.013132ms ago: executing program 3 (id=481): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='nobarrier,nls=ascii,part=0x0000000000000000,nodecompose,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00'/15, @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x40, 0x729, &(0x7f00000034c0)="$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") setxattr(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r5, &(0x7f00000006c0)=@ceph_nfs_fh={0x8, 0xfe}, 0x755c00) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8008080}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") truncate(0x0, 0x6000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x200, 0x42) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003}) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) 303.808863ms ago: executing program 5 (id=482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) pselect6(0x40, &(0x7f0000000000)={0xd, 0x3, 0x3, 0x6, 0x7ff, 0x50000000000, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 193.151225ms ago: executing program 0 (id=483): read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x208, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x82) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) clock_nanosleep(0x2, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x92012, r0, 0x26000) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) 189.644805ms ago: executing program 2 (id=484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x407}}, {0x9, &(0x7f0000000640)=@string={0x9, 0x3, "da79952bac9a1e"}}, {0x77, &(0x7f00000006c0)=@string={0x77, 0x3, "f985de4e6c570918c0431310a5130c3b0bc8e409d3f48586e4b57936d941ec6dc6425fadf2d3c4423ea3c234023767f2c059c1736f99b1fedec54b4560a6514d093204ed9140f4d50e081e743f69b437f210a3b9cd12ddc674d1acf33953a899e4a690f737f749661b4fe0ec0ce5c88a45472adb8f"}}]}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 150.632946ms ago: executing program 0 (id=485): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x7}, 0x8) 129.580986ms ago: executing program 0 (id=486): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 75.355148ms ago: executing program 0 (id=487): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000010066000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 74.886808ms ago: executing program 5 (id=488): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x1000000}, 0x14}, 0x1, 0xff07}, 0x2000000) 34.314659ms ago: executing program 0 (id=489): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000001c0)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRES8, @ANYRESOCT], 0x1, 0x184, &(0x7f0000000700)="$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") 33.885009ms ago: executing program 5 (id=490): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x20, 0x1a6, &(0x7f0000000200)="$eJzsmD9P21AUxc+zHVupKqVru7RSIyUd6thOWzVDh8wd2qFq1Y2ImCjgEJR4SLIA4kMwMzIxRyz5HjAAE0vYmBiMnvMsP+cPASn8E/c3XJ93383z9bVyBoMgiBfL2enlyUEum+b6NbIwRP5cjWsUqb6fufp0VP91uGtdHPcHP0vj5zEAQXD7+2sABmUVvlgHQfLXWXH9AyXSKXn/HxhMoZeg4K/QLhj+C70q6SavN82Vuueay02vyoXFg82Dw0NxvL/hNkNV6m9T2m93e2sVz3NbixIaJrbmzW9YVvBD6k9+X9FsrHh+sKHAxtiLBfAdRjSb0Uik53+nxeerieePVosexEOJLdzvLd5m5tSknu3oSEwRDPviH/E0+nksEftTsMeQk/xJk/yj4Dc2Cu1u73O9Uam5NXfdcYrfrC+W9dUphEY0ijf4Xzr0p1fS+akZtboeGWCn4vstW2c6QuV0DPgtZ5rj6qH/Kch/HHXNRE6G5/CGfeCXvArszOyWIAiCIAiCIAiCIAiCIAjiThjJ5Xuw8CtogtJEyvkdVl8HAAD//xdmaNU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) read$FUSE(r0, &(0x7f0000000c40)={0x2020}, 0x2020) 0s ago: executing program 6 (id=491): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. [ 27.957639][ T4315] cgroup: Unknown subsys name 'net' [ 28.215969][ T4315] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.485735][ T4315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.665812][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.667814][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.669420][ T4330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.671260][ T4330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.672877][ T4330] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.674680][ T4330] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.690288][ T4328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.691858][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.703132][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.704767][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.706353][ T4335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.708152][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.708400][ T4340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.709461][ T4335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.711135][ T4340] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.713920][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.714375][ T4340] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.715143][ T4335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.716484][ T4340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.719065][ T4340] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.720672][ T4340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.726721][ T4340] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.728563][ T4335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.730057][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.741574][ T4342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.747339][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.748947][ T4342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.750912][ T4342] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.752249][ T4342] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.754603][ T4328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.877352][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 29.890451][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 29.895783][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 29.905258][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 29.935661][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 29.943960][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.945372][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.947031][ T4337] device bridge_slave_0 entered promiscuous mode [ 29.950570][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.951901][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.954381][ T4337] device bridge_slave_1 entered promiscuous mode [ 29.965163][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.966425][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.968147][ T4332] device bridge_slave_0 entered promiscuous mode [ 29.975955][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.977272][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.978919][ T4331] device bridge_slave_0 entered promiscuous mode [ 29.986830][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.988645][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.990029][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.991696][ T4332] device bridge_slave_1 entered promiscuous mode [ 29.995943][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.997167][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.998710][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.004298][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.018743][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.024139][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.025414][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.026956][ T4327] device bridge_slave_0 entered promiscuous mode [ 30.030448][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.031809][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.034020][ T4327] device bridge_slave_1 entered promiscuous mode [ 30.037980][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.041001][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.044842][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.055537][ T4337] team0: Port device team_slave_0 added [ 30.061851][ T4331] team0: Port device team_slave_0 added [ 30.064055][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.065399][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.066985][ T4341] device bridge_slave_0 entered promiscuous mode [ 30.071508][ T4337] team0: Port device team_slave_1 added [ 30.076290][ T4331] team0: Port device team_slave_1 added [ 30.078309][ T4332] team0: Port device team_slave_0 added [ 30.079527][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.080801][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.082477][ T4341] device bridge_slave_1 entered promiscuous mode [ 30.087310][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.095456][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.096735][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.101326][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.106000][ T4332] team0: Port device team_slave_1 added [ 30.109735][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.117361][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.118509][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.122699][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.127869][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.129080][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.133547][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.136514][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.142693][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.144192][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.148645][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.150965][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.152170][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.159201][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.162185][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.169443][ T4327] team0: Port device team_slave_0 added [ 30.171219][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.172410][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.177780][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.185267][ T4341] team0: Port device team_slave_0 added [ 30.187429][ T4341] team0: Port device team_slave_1 added [ 30.189188][ T4327] team0: Port device team_slave_1 added [ 30.254334][ T4337] device hsr_slave_0 entered promiscuous mode [ 30.293137][ T4337] device hsr_slave_1 entered promiscuous mode [ 30.339106][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.340416][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.345309][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.347562][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.348806][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.353551][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.404180][ T4332] device hsr_slave_0 entered promiscuous mode [ 30.453158][ T4332] device hsr_slave_1 entered promiscuous mode [ 30.493013][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.496241][ T4332] Cannot create hsr debugfs directory [ 30.497721][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.499130][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.504082][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.507064][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.508339][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.512662][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.574602][ T4331] device hsr_slave_0 entered promiscuous mode [ 30.613230][ T4331] device hsr_slave_1 entered promiscuous mode [ 30.662986][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.664378][ T4331] Cannot create hsr debugfs directory [ 30.734228][ T4327] device hsr_slave_0 entered promiscuous mode [ 30.783183][ T4327] device hsr_slave_1 entered promiscuous mode [ 30.822976][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.824356][ T4327] Cannot create hsr debugfs directory [ 30.873975][ T4341] device hsr_slave_0 entered promiscuous mode [ 30.913222][ T4341] device hsr_slave_1 entered promiscuous mode [ 30.953028][ T4341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.954448][ T4341] Cannot create hsr debugfs directory [ 31.042703][ T4337] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.090293][ T4337] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.124405][ T4337] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.166080][ T4337] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.208545][ T4331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.244239][ T4331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.287971][ T4331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.324151][ T4331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.387328][ T4332] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.422107][ T4332] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.470204][ T4332] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.505405][ T4332] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.559429][ T4327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.588964][ T4327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.646790][ T4327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.676152][ T4327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.693558][ T4330] Bluetooth: hci0: command 0x0409 tx timeout [ 31.738450][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.747493][ T4341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.765424][ T4341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.774136][ T4330] Bluetooth: hci3: command 0x0409 tx timeout [ 31.775354][ T4330] Bluetooth: hci4: command 0x0409 tx timeout [ 31.776444][ T4330] Bluetooth: hci2: command 0x0409 tx timeout [ 31.777447][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 31.804187][ T4341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.864212][ T4341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.905671][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.916025][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.922101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.924391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.926203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.927869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.929913][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.931107][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.932747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.935310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.937182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.945351][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.953970][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.955834][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.957463][ T517] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.958798][ T517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.965500][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.967394][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.969497][ T517] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.970745][ T517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.972215][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.978966][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.980666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.982152][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.983463][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.986211][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.991078][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.994056][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.995795][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.997595][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.006595][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.008192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.025012][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.026440][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.029031][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.030790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.034414][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.040090][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.041951][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.044419][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.047708][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.049507][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.059925][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.061475][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.066711][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.068526][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.070188][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.071910][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.077395][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.082252][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.096217][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.097949][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.099557][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.101208][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.102879][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.104184][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.108240][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.109954][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.111509][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.112812][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.114919][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.116858][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.118701][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.122378][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.126101][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.128591][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.136645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.138564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.140328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.141973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.153886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.159358][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.161211][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.163514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.165145][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.176372][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.182438][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.185306][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.186813][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.188046][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.192554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.194399][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.196476][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.197680][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.199070][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.200861][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.202505][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.206398][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.208063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.215242][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.219314][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.220984][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.222758][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.225644][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.227712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.229044][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.230427][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.244743][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.248572][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.254533][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.256296][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.257993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.259578][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.264186][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.267805][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.273455][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.278327][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.280424][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.281776][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.289147][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.291039][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.292688][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.294147][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.299268][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.300955][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.302673][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.307399][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.308629][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.312805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.328074][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.329923][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.340449][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.342436][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.347446][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.354327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.356480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.358200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.359849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.361678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.369881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.371465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.380579][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.384318][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.385817][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.390374][ T4337] device veth0_vlan entered promiscuous mode [ 32.391694][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.394136][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.400610][ T4337] device veth1_vlan entered promiscuous mode [ 32.408694][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.410266][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.411866][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.413725][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.417868][ T4331] device veth0_vlan entered promiscuous mode [ 32.421133][ T4331] device veth1_vlan entered promiscuous mode [ 32.427578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.429586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.431249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.436502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.438126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.440541][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.442198][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.451540][ T4337] device veth0_macvtap entered promiscuous mode [ 32.455051][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.456810][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.458196][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.459581][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.461247][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.464697][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.469127][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.470828][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.474189][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.476665][ T4337] device veth1_macvtap entered promiscuous mode [ 32.481340][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.485976][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.487599][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.489241][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.494473][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.506430][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.515701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.517630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.524026][ T4337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.525592][ T4337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.527267][ T4337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.528792][ T4337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.534424][ T4332] device veth0_vlan entered promiscuous mode [ 32.536430][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.538094][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.539738][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.541284][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.548986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.550749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.554902][ T4331] device veth0_macvtap entered promiscuous mode [ 32.560981][ T4332] device veth1_vlan entered promiscuous mode [ 32.571231][ T4331] device veth1_macvtap entered promiscuous mode [ 32.583641][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.585335][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.586910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.588593][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.590240][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.591670][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.598774][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.620218][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.621968][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.632883][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.634973][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.640083][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.641992][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.650421][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.652294][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.656815][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.662537][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.664741][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.666461][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.668264][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.670093][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.671934][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.674366][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.677195][ T4332] device veth0_macvtap entered promiscuous mode [ 32.681303][ T4341] device veth0_vlan entered promiscuous mode [ 32.684611][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.686327][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.688416][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.689981][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.691816][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.695300][ T517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.696717][ T517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.701249][ T4332] device veth1_macvtap entered promiscuous mode [ 32.708268][ T4327] device veth0_vlan entered promiscuous mode [ 32.710714][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.712477][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.714809][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.716459][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.718299][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.719700][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.725573][ T4331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.727206][ T4331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.728864][ T4331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.730550][ T4331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.740968][ T4341] device veth1_vlan entered promiscuous mode [ 32.744059][ T4327] device veth1_vlan entered promiscuous mode [ 32.747093][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.747169][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.748454][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.750167][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.754271][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.756131][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.758395][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.761619][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.763592][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.765208][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.766715][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.768491][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.780731][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.785424][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.787153][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.788974][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.791576][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.796489][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.798132][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.799757][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.801366][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.806475][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.808223][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.818721][ T4327] device veth0_macvtap entered promiscuous mode [ 32.821232][ T4327] device veth1_macvtap entered promiscuous mode [ 32.830371][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.832275][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.840822][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.842626][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.845199][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.846938][ T4408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.847616][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.849644][ T4408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.852049][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.855145][ T4332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.856573][ T4332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.858255][ T4332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.859922][ T4332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.866307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.868073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.869713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.871457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.876035][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.877888][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.879627][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.881425][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.884192][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.886067][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.888302][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.901829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.903756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.905425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.907632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.916353][ T4327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.917842][ T4327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.919253][ T4327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.920687][ T4327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.923273][ T4341] device veth0_macvtap entered promiscuous mode [ 32.931754][ T4341] device veth1_macvtap entered promiscuous mode [ 32.945491][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.947699][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.956229][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.958029][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.959646][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.974636][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.976450][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.978397][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.978505][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.979741][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.981523][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.985241][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.987024][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.988780][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.990416][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.992806][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.000688][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.002348][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.006512][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.011891][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.015548][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.017212][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.019120][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.020872][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.022657][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.024758][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.026451][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.028992][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.039653][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.041532][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.046722][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.048121][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.048955][ T4341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.050873][ T4341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.052651][ T4341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.057858][ T4341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.064875][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.066271][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.067675][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.069396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.094465][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.095874][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.098772][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.112760][ T517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.114962][ T517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.117614][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.161484][ T4412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.167356][ T4412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.169022][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.170293][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.240551][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.257108][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.258689][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.260060][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.285288][ T4416] device syzkaller0 entered promiscuous mode [ 33.754773][ T4418] loop0: detected capacity change from 0 to 40427 [ 33.759313][ T4418] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 33.853592][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 33.853662][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 33.853679][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 34.050913][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 34.084143][ T4418] F2FS-fs (loop0): invalid crc value [ 34.097224][ T4418] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.114368][ T4418] F2FS-fs (loop0): recover fsync data on readonly fs [ 34.116131][ T4418] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 34.119471][ T4418] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 34.122416][ T4428] loop1: detected capacity change from 0 to 1024 [ 34.126920][ T4418] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.926021][ T4447] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13'. [ 34.946168][ T4342] Bluetooth: hci3: unknown advertising packet type: 0x05 [ 35.499639][ T4342] Bluetooth: hci2: command 0x040f tx timeout [ 35.699946][ T4460] jffs2: notice: (4460) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 35.933349][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 35.933374][ T4342] Bluetooth: hci4: command 0x040f tx timeout [ 35.933390][ T4339] Bluetooth: hci3: command 0x040f tx timeout [ 36.104468][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 36.137706][ T4466] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 36.148305][ T4468] loop0: detected capacity change from 0 to 512 [ 36.159330][ T4468] ======================================================= [ 36.159330][ T4468] WARNING: The mand mount option has been deprecated and [ 36.159330][ T4468] and is ignored by this kernel. Remove the mand [ 36.159330][ T4468] option from the mount to silence this warning. [ 36.159330][ T4468] ======================================================= [ 36.172946][ T4466] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 36.174231][ T4466] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 36.175397][ T4466] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 36.176527][ T4466] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 36.177633][ T4466] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 36.178780][ T4466] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 36.179901][ T4466] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 36.181036][ T4466] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 36.182214][ T4466] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 36.227755][ T4468] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 36.277703][ T4471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.280803][ T4471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.285200][ T4468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 36.287819][ T4468] EXT4-fs (loop0): orphan cleanup on readonly fs [ 36.289308][ T4468] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.20: bad orphan inode 3 [ 36.292514][ T4468] EXT4-fs (loop0): Remounting filesystem read-only [ 36.296544][ T4468] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.327644][ T4468] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.20: dx entry: limit 0 != root limit 125 [ 36.340351][ T4468] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.20: Corrupt directory, running e2fsck is recommended [ 36.371950][ T4341] EXT4-fs (loop0): unmounting filesystem. [ 36.912847][ T4489] device syzkaller0 entered promiscuous mode [ 37.282028][ T4495] loop1: detected capacity change from 0 to 512 [ 37.292834][ T4495] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.309189][ T4495] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.334997][ T4498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 37.347600][ T4495] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.350259][ T4495] EXT4-fs (loop1): 1 truncate cleaned up [ 37.351165][ T4495] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.533224][ T4342] Bluetooth: hci2: command 0x0419 tx timeout [ 37.871178][ T4510] loop2: detected capacity change from 0 to 2048 [ 37.885129][ T4510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 38.013975][ T4330] Bluetooth: hci1: command 0x0419 tx timeout [ 38.015748][ T4342] Bluetooth: hci4: command 0x0419 tx timeout [ 38.016998][ T4339] Bluetooth: hci3: command 0x0419 tx timeout [ 38.079923][ T4515] loop2: detected capacity change from 0 to 2048 [ 38.098348][ T4515] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.121807][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 38.150341][ T4519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.152799][ T4519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.160466][ T4519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.162757][ T4519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.172459][ T4519] loop2: detected capacity change from 0 to 2048 [ 38.184065][ T4328] Bluetooth: hci0: command 0x0419 tx timeout [ 38.205403][ T4519] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.258257][ T4332] EXT4-fs (loop1): unmounting filesystem. [ 38.275693][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 38.421572][ T4531] binder: 4530:4531 tried to acquire reference to desc 0, got 1 instead [ 38.424313][ T4531] binder: 4530:4531 Acquire 1 refcount change on invalid ref 2 ret -22 [ 38.467681][ T4535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 38.721242][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 38.774179][ T4539] FAULT_INJECTION: forcing a failure. [ 38.774179][ T4539] name failslab, interval 1, probability 0, space 0, times 1 [ 38.776558][ T4539] CPU: 1 PID: 4539 Comm: syz.3.45 Not tainted syzkaller #0 [ 38.777770][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 38.779350][ T4539] Call trace: [ 38.779898][ T4539] dump_backtrace+0x1c4/0x1f0 [ 38.780765][ T4539] show_stack+0x2c/0x3c [ 38.781535][ T4539] __dump_stack+0x30/0x40 [ 38.782298][ T4539] dump_stack_lvl+0xf4/0x15c [ 38.783116][ T4539] dump_stack+0x1c/0x5c [ 38.783877][ T4539] should_fail_ex+0x3cc/0x524 [ 38.784735][ T4539] __should_failslab+0xc0/0x11c [ 38.785605][ T4539] should_failslab+0x10/0x28 [ 38.786447][ T4539] kmem_cache_alloc+0x88/0x310 [ 38.787345][ T4539] prepare_creds+0x44/0x698 [ 38.788155][ T4539] lookup_user_key+0x278/0xf94 [ 38.788939][ T4539] __arm64_sys_add_key+0x3d4/0x520 [ 38.789805][ T4539] invoke_syscall+0x98/0x290 [ 38.790611][ T4539] el0_svc_common+0x13c/0x258 [ 38.791458][ T4539] do_el0_svc+0x5c/0x134 [ 38.792245][ T4539] el0_svc+0x58/0x128 [ 38.792956][ T4539] el0t_64_sync_handler+0x84/0xf0 [ 38.793854][ T4539] el0t_64_sync+0x18c/0x190 [ 38.827949][ T4541] loop3: detected capacity change from 0 to 256 [ 38.845794][ T4541] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 38.924270][ T4541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 39.321156][ T4339] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 39.321829][ T4339] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 39.324946][ T4339] CPU: 1 PID: 4339 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 39.326323][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 39.328044][ T4339] Workqueue: hci2 hci_rx_work [ 39.328838][ T4339] Call trace: [ 39.329408][ T4339] dump_backtrace+0x1c4/0x1f0 [ 39.330207][ T4339] show_stack+0x2c/0x3c [ 39.330908][ T4339] __dump_stack+0x30/0x40 [ 39.331668][ T4339] dump_stack_lvl+0xf4/0x15c [ 39.332496][ T4339] dump_stack+0x1c/0x5c [ 39.333213][ T4339] sysfs_create_dir_ns+0x244/0x264 [ 39.334154][ T4339] kobject_add_internal+0x5a8/0xb18 [ 39.335056][ T4339] kobject_add+0x144/0x20c [ 39.335854][ T4339] device_add+0x3dc/0xe4c [ 39.336656][ T4339] hci_conn_add_sysfs+0xb8/0x1bc [ 39.337546][ T4339] hci_conn_complete_evt+0x7b8/0x10b4 [ 39.338519][ T4339] hci_event_packet+0x698/0xe60 [ 39.339366][ T4339] hci_rx_work+0x310/0xa70 [ 39.340228][ T4339] process_one_work+0x7e4/0x13bc [ 39.341203][ T4339] worker_thread+0x8cc/0xfe8 [ 39.342122][ T4339] kthread+0x254/0x2e0 [ 39.342908][ T4339] ret_from_fork+0x10/0x20 [ 39.344336][ T4339] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 39.346623][ T4339] Bluetooth: hci2: failed to register connection device [ 39.725011][ T4560] loop0: detected capacity change from 0 to 40427 [ 39.727619][ T4560] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 39.730158][ T4560] F2FS-fs (loop0): invalid crc value [ 39.732095][ T4560] F2FS-fs (loop0): Found nat_bits in checkpoint [ 39.749912][ T4560] F2FS-fs (loop0): recover fsync data on readonly fs [ 39.751649][ T4560] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 39.755015][ T4560] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 39.758747][ T4560] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 39.876574][ T4579] loop2: detected capacity change from 0 to 256 [ 39.894252][ T4579] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.896213][ T4579] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 39.898607][ T4582] Zero length message leads to an empty skb [ 39.906081][ T4579] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 39.908574][ T4579] exFAT-fs (loop2): failed to load alloc-bitmap [ 39.909652][ T4579] exFAT-fs (loop2): failed to recognize exfat type [ 40.104178][ T4593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.106165][ T4593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.150115][ T4595] FAULT_INJECTION: forcing a failure. [ 40.150115][ T4595] name failslab, interval 1, probability 0, space 0, times 0 [ 40.152654][ T4595] CPU: 1 PID: 4595 Comm: syz.4.68 Not tainted syzkaller #0 [ 40.154012][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 40.155921][ T4595] Call trace: [ 40.156495][ T4595] dump_backtrace+0x1c4/0x1f0 [ 40.157355][ T4595] show_stack+0x2c/0x3c [ 40.158151][ T4595] __dump_stack+0x30/0x40 [ 40.158961][ T4595] dump_stack_lvl+0xf4/0x15c [ 40.159797][ T4595] dump_stack+0x1c/0x5c [ 40.160555][ T4595] should_fail_ex+0x3cc/0x524 [ 40.161421][ T4595] __should_failslab+0xc0/0x11c [ 40.162468][ T4595] should_failslab+0x10/0x28 [ 40.163373][ T4595] __kmem_cache_alloc_node+0x7c/0x318 [ 40.164450][ T4595] kmalloc_trace+0x48/0x94 [ 40.165276][ T4595] alloc_fs_context+0x7c/0x778 [ 40.166099][ T4595] fs_context_for_mount+0x34/0x44 [ 40.166975][ T4595] mq_init_ns+0xdc/0x4d8 [ 40.167723][ T4595] copy_ipcs+0x274/0x4d4 [ 40.168496][ T4595] create_new_namespaces+0x1b0/0x604 [ 40.169436][ T4595] unshare_nsproxy_namespaces+0x108/0x160 [ 40.170451][ T4595] ksys_unshare+0x3f0/0x70c [ 40.171246][ T4595] __arm64_sys_unshare+0x3c/0x50 [ 40.172077][ T4595] invoke_syscall+0x98/0x290 [ 40.172895][ T4595] el0_svc_common+0x13c/0x258 [ 40.173694][ T4595] do_el0_svc+0x5c/0x134 [ 40.174403][ T4595] el0_svc+0x58/0x128 [ 40.175090][ T4595] el0t_64_sync_handler+0x84/0xf0 [ 40.175977][ T4595] el0t_64_sync+0x18c/0x190 [ 40.214925][ T4598] Illegal XDP return value 1545294336 on prog (id 6) dev N/A, expect packet loss! [ 40.300618][ T4602] loop1: detected capacity change from 0 to 256 [ 40.325904][ T4602] FAT-fs (loop1): Directory bread(block 64) failed [ 40.327184][ T4602] FAT-fs (loop1): Directory bread(block 65) failed [ 40.328403][ T4602] FAT-fs (loop1): Directory bread(block 66) failed [ 40.329499][ T4602] FAT-fs (loop1): Directory bread(block 67) failed [ 40.331036][ T4602] FAT-fs (loop1): Directory bread(block 68) failed [ 40.331572][ T4604] loop4: detected capacity change from 0 to 256 [ 40.332250][ T4602] FAT-fs (loop1): Directory bread(block 69) failed [ 40.336089][ T4602] FAT-fs (loop1): Directory bread(block 70) failed [ 40.337417][ T4602] FAT-fs (loop1): Directory bread(block 71) failed [ 40.338737][ T4602] FAT-fs (loop1): Directory bread(block 72) failed [ 40.340056][ T4602] FAT-fs (loop1): Directory bread(block 73) failed [ 40.358426][ T4604] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 40.370404][ T4602] Bluetooth: MGMT ver 1.22 [ 40.781839][ T4612] binder: 4611:4612 got transaction to invalid handle, 1 [ 40.783680][ T4612] binder: 4612:4611 cannot find target node [ 40.784782][ T4612] binder: 4611:4612 transaction async to 0:0 failed 5/29201/-22, size 0-0 line 3062 [ 40.787421][ T4612] binder: 4611:4612 ioctl c0306201 20000500 returned -14 [ 40.937738][ T4625] loop1: detected capacity change from 0 to 128 [ 40.957458][ T4625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.002431][ T4629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.005655][ T4629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.031776][ T4332] EXT4-fs (loop1): unmounting filesystem. [ 41.073592][ T4634] loop1: detected capacity change from 0 to 2048 [ 41.078902][ T4634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 41.118487][ T4638] loop1: detected capacity change from 0 to 256 [ 41.123418][ T4638] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 41.423632][ T4339] Bluetooth: hci2: command 0x0409 tx timeout [ 41.541472][ T4645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 41.548225][ T4645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 41.571965][ T4647] FAULT_INJECTION: forcing a failure. [ 41.571965][ T4647] name failslab, interval 1, probability 0, space 0, times 0 [ 41.577202][ T4647] CPU: 0 PID: 4647 Comm: syz.4.87 Not tainted syzkaller #0 [ 41.578598][ T4647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.580542][ T4647] Call trace: [ 41.581177][ T4647] dump_backtrace+0x1c4/0x1f0 [ 41.582049][ T4647] show_stack+0x2c/0x3c [ 41.582897][ T4647] __dump_stack+0x30/0x40 [ 41.583821][ T4647] dump_stack_lvl+0xf4/0x15c [ 41.584678][ T4647] dump_stack+0x1c/0x5c [ 41.585456][ T4647] should_fail_ex+0x3cc/0x524 [ 41.586306][ T4647] __should_failslab+0xc0/0x11c [ 41.587331][ T4647] should_failslab+0x10/0x28 [ 41.588307][ T4647] kmem_cache_alloc+0x88/0x310 [ 41.589285][ T4647] security_file_alloc+0x38/0x11c [ 41.590286][ T4647] __alloc_file+0xac/0x234 [ 41.591163][ T4647] alloc_empty_file+0xa0/0x184 [ 41.592141][ T4647] alloc_file+0x64/0x564 [ 41.593020][ T4647] alloc_file_pseudo+0x16c/0x1f4 [ 41.594000][ T4647] anon_inode_getfd+0xe8/0x1a8 [ 41.594897][ T4647] __arm64_sys_fanotify_init+0x550/0x668 [ 41.595921][ T4647] invoke_syscall+0x98/0x290 [ 41.596754][ T4647] el0_svc_common+0x13c/0x258 [ 41.597607][ T4647] do_el0_svc+0x5c/0x134 [ 41.598397][ T4647] el0_svc+0x58/0x128 [ 41.599089][ T4647] el0t_64_sync_handler+0x84/0xf0 [ 41.599994][ T4647] el0t_64_sync+0x18c/0x190 [ 41.625830][ T4651] loop0: detected capacity change from 0 to 256 [ 41.635805][ T27] audit: type=1326 audit(41.620:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4652 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd792a8 code=0x7ffc0000 [ 41.639786][ T27] audit: type=1326 audit(41.620:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4652 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd792a8 code=0x7ffc0000 [ 41.646320][ T4651] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 41.649912][ T27] audit: type=1326 audit(41.620:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4652 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd792a8 code=0x7ffc0000 [ 41.667119][ T27] audit: type=1326 audit(41.620:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4652 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff9fd792a8 code=0x7ffc0000 [ 41.679780][ T27] audit: type=1326 audit(41.620:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4652 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd792a8 code=0x7ffc0000 [ 41.692604][ T27] audit: type=1326 audit(41.620:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4652 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd792a8 code=0x7ffc0000 [ 41.702497][ T27] audit: type=1326 audit(41.620:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4652 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd792a8 code=0x7ffc0000 [ 41.722034][ T27] audit: type=1326 audit(41.620:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4652 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9fd792a8 code=0x7ffc0000 [ 41.732856][ T27] audit: type=1326 audit(41.620:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4652 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd792a8 code=0x7ffc0000 [ 41.739886][ T27] audit: type=1326 audit(41.620:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4652 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd792a8 code=0x7ffc0000 [ 41.833362][ T4664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.837351][ T4664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.209752][ T4672] loop2: detected capacity change from 0 to 512 [ 42.218233][ T4672] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.229915][ T4672] EXT4-fs (loop2): 1 truncate cleaned up [ 42.236225][ T4672] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 42.623022][ T4691] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.639728][ T4691] EXT4-fs (loop3): 1 truncate cleaned up [ 42.640908][ T4691] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.675488][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 42.807387][ T4696] hfsplus: keylen 65060 too large [ 43.128987][ T4339] Bluetooth: hci4: unexpected cc 0x0c05 length: 4 > 1 [ 43.279501][ T4726] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.309586][ T4726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.337857][ T4332] EXT4-fs (loop1): unmounting filesystem. [ 43.397988][ T4730] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.515326][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 43.546541][ T4737] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.555851][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 43.612141][ T4743] jffs2: notice: (4743) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 43.741253][ T4749] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.077948][ T4332] EXT4-fs (loop1): unmounting filesystem. [ 44.123070][ T4762] set_capacity_and_notify: 6 callbacks suppressed [ 44.123088][ T4762] loop2: detected capacity change from 0 to 1024 [ 44.136965][ T4764] loop3: detected capacity change from 0 to 512 [ 44.142150][ T4764] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.156459][ T4762] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.177744][ T4764] EXT4-fs (loop3): 1 truncate cleaned up [ 44.178908][ T4764] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.215700][ T4772] loop1: detected capacity change from 0 to 8 [ 44.242083][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 44.277551][ T4317] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.310966][ T4777] loop2: detected capacity change from 0 to 512 [ 44.323169][ T4777] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.338654][ T4777] EXT4-fs (loop2): 1 truncate cleaned up [ 44.339991][ T4777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.413026][ T4374] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 44.609907][ T4374] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.611857][ T4374] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.621711][ T4374] usb 1-1: New USB device found, idVendor=246d, idProduct=c2df, bcdDevice= 1.00 [ 44.623418][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 44.624757][ T4374] usb 1-1: Product: syz [ 44.625404][ T4374] usb 1-1: Manufacturer: syz [ 45.372990][ T4328] Bluetooth: hci2: command 0x040f tx timeout [ 45.489773][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 45.525189][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 45.602156][ T4804] device syzkaller1 entered promiscuous mode [ 45.747716][ T4808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.970292][ T4815] loop4: detected capacity change from 0 to 16 [ 45.984180][ T4815] erofs: (device loop4): mounted with root inode @ nid 36. [ 46.001710][ T4815] syz.4.146: attempt to access beyond end of device [ 46.001710][ T4815] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 46.011662][ T4815] syz.4.146 sent an empty control message without MSG_MORE. [ 46.210237][ T4819] loop1: detected capacity change from 0 to 512 [ 46.220030][ T4819] EXT4-fs (loop1): 1 truncate cleaned up [ 46.221112][ T4819] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.245218][ T4819] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.148: deleted inode referenced: 15 [ 46.250011][ T4819] EXT4-fs (loop1): Remounting filesystem read-only [ 46.272509][ T4332] EXT4-fs (loop1): unmounting filesystem. [ 46.340291][ T4825] loop1: detected capacity change from 0 to 512 [ 46.347953][ T4825] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.357399][ T4825] EXT4-fs (loop1): 1 truncate cleaned up [ 46.358758][ T4825] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.436808][ T4828] loop2: detected capacity change from 0 to 512 [ 46.451072][ T4828] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.460788][ T4828] EXT4-fs (loop2): 1 truncate cleaned up [ 46.462006][ T4828] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 46.792842][ T4844] jffs2: notice: (4844) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 47.195324][ T3900] usb 1-1: USB disconnect, device number 2 [ 47.232242][ T4850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.237767][ T4850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.474300][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 47.509537][ T4332] EXT4-fs (loop1): unmounting filesystem. [ 47.557104][ T4863] loop1: detected capacity change from 0 to 164 [ 47.602742][ T4865] loop1: detected capacity change from 0 to 512 [ 47.608902][ T4865] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.612218][ T4865] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.163: bad orphan inode 15 [ 47.614956][ T4865] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 47.619551][ T4865] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.163: bad inode number: 12 [ 47.639162][ T4332] EXT4-fs (loop1): unmounting filesystem. [ 47.717897][ T4870] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.165: couldn't read orphan inode 26 (err -116) [ 47.723346][ T4870] EXT4-fs (loop3): Remounting filesystem read-only [ 47.724625][ T4870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 47.753013][ T3900] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 47.766273][ T4874] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 47.779321][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 47.796073][ T4874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c128, mo2=0002] [ 47.797539][ T4874] System zones: 1-12 [ 47.806745][ T4874] EXT4-fs (loop1): 1 truncate cleaned up [ 47.811528][ T4874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.894656][ T4884] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.898515][ T4884] EXT4-fs (loop3): 1 truncate cleaned up [ 47.899577][ T4884] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 47.966520][ T3900] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.968546][ T3900] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 47.970165][ T3900] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 47.971925][ T3900] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 47.974262][ T3900] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 47.976059][ T3900] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 47.978063][ T3900] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 47.979895][ T3900] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 47.981671][ T3900] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 47.986049][ T3900] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 47.987855][ T3900] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 47.990022][ T3900] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 47.991831][ T3900] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 47.993943][ T3900] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 47.995645][ T3900] usb 1-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 48.000355][ T3900] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 48.001936][ T3900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.006337][ T3900] usb 1-1: Product: syz [ 48.007044][ T3900] usb 1-1: Manufacturer: syz [ 48.007833][ T3900] usb 1-1: SerialNumber: syz [ 48.133637][ T4892] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.138409][ T4892] EXT4-fs (loop2): 1 truncate cleaned up [ 48.139616][ T4892] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 48.379791][ T4332] EXT4-fs (loop1): unmounting filesystem. [ 49.067074][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 49.106799][ T4901] jffs2: notice: (4901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 49.150536][ T4904] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 49.191898][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 49.217902][ T4907] set_capacity_and_notify: 5 callbacks suppressed [ 49.217912][ T4907] loop2: detected capacity change from 0 to 8 [ 49.542107][ T4907] SQUASHFS error: Failed to read block 0x4de: -5 [ 49.544572][ T4907] SQUASHFS error: Failed to read block 0x4de: -5 [ 49.549575][ T4907] SQUASHFS error: Failed to read block 0x4de: -5 [ 49.552301][ T4907] SQUASHFS error: Failed to read block 0x4de: -5 [ 49.564120][ T4907] SQUASHFS error: Failed to read block 0x4de: -5 [ 49.568216][ T4907] SQUASHFS error: Failed to read block 0x4de: -5 [ 49.571346][ T4907] SQUASHFS error: Failed to read block 0x4de: -5 [ 49.575058][ T4907] SQUASHFS error: Failed to read block 0x4de: -5 [ 49.708113][ T4924] loop2: detected capacity change from 0 to 512 [ 49.724752][ T4924] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.734457][ T4924] EXT4-fs (loop2): 1 truncate cleaned up [ 49.735690][ T4924] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.880457][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 49.899571][ T4932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.901217][ T4932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.908370][ T4932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.911154][ T4932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.372533][ T3835] usb 1-1: USB disconnect, device number 3 [ 50.485665][ T4949] capability: warning: `syz.0.192' uses deprecated v2 capabilities in a way that may be insecure [ 50.617929][ T4956] loop0: detected capacity change from 0 to 512 [ 50.627372][ T4956] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.628272][ T4957] loop2: detected capacity change from 0 to 1024 [ 50.635323][ T4956] EXT4-fs (loop0): 1 truncate cleaned up [ 50.636332][ T4956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.640588][ T4957] EXT4-fs: Ignoring removed orlov option [ 50.720003][ T4957] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.758917][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 50.802707][ T4341] EXT4-fs (loop0): unmounting filesystem. [ 50.856221][ T4963] loop2: detected capacity change from 0 to 2048 [ 50.857825][ T4963] EXT4-fs: Ignoring removed i_version option [ 50.873627][ T4967] jffs2: notice: (4967) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 50.949112][ T4963] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.956288][ T4963] fs-verity: sha512 using implementation "sha512-ce" [ 51.275318][ T4975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.277884][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 51.289356][ T4975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.305599][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 51.305608][ T27] audit: type=1326 audit(51.290:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.2.201" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff861792a8 code=0x7ffc0000 [ 51.315237][ T27] audit: type=1326 audit(51.290:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.2.201" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff861792a8 code=0x7ffc0000 [ 51.323799][ T27] audit: type=1326 audit(51.290:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.2.201" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff861792a8 code=0x7ffc0000 [ 51.330387][ T4977] loop2: detected capacity change from 0 to 1024 [ 51.331370][ T27] audit: type=1326 audit(51.290:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.2.201" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff861792a8 code=0x7ffc0000 [ 51.336574][ T4977] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 51.338368][ T4977] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 51.341305][ T4977] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #5: comm syz.2.201: unexpected bad inode w/o EXT4_IGET_BAD [ 51.344348][ T4977] EXT4-fs (loop2): no journal found [ 51.345198][ T4977] EXT4-fs (loop2): can't get journal size [ 51.346436][ T27] audit: type=1326 audit(51.300:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.2.201" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff86178fa0 code=0x7ffc0000 [ 51.350541][ T27] audit: type=1326 audit(51.300:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.2.201" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8615c16c code=0x7ffc0000 [ 51.355347][ T4977] EXT4-fs (loop2): failed to initialize system zone (-117) [ 51.356728][ T4977] EXT4-fs (loop2): mount failed [ 51.373777][ T27] audit: type=1326 audit(51.310:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.2.201" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff8617904c code=0x7ffc0000 [ 51.385744][ T27] audit: type=1326 audit(51.310:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.2.201" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8615c16c code=0x7ffc0000 [ 51.403844][ T27] audit: type=1326 audit(51.310:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.2.201" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff86178ed0 code=0x7ffc0000 [ 51.407810][ T27] audit: type=1326 audit(51.310:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.2.201" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff8615c16c code=0x7ffc0000 [ 51.432329][ T4984] loop3: detected capacity change from 0 to 128 [ 51.437379][ T4984] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.441348][ T4984] EXT4-fs (loop3): resizing filesystem from 64 to 1 blocks [ 51.443400][ T4984] EXT4-fs warning (device loop3): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 51.467350][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 51.491359][ T4990] loop3: detected capacity change from 0 to 512 [ 51.495404][ T4990] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.522513][ T4990] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.541086][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 51.560305][ T4996] loop2: detected capacity change from 0 to 512 [ 51.575653][ T4996] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.589354][ T4996] EXT4-fs (loop2): 1 truncate cleaned up [ 51.590558][ T4996] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.701842][ T5006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.707083][ T5006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.719682][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 51.804760][ T5012] loop4: detected capacity change from 0 to 512 [ 51.806806][ T5012] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.815208][ T5012] EXT4-fs (loop4): 1 truncate cleaned up [ 51.816327][ T5012] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.963559][ T9] hfsplus: b-tree write err: -5, ino 25 [ 51.964846][ T9] hfsplus: b-tree write err: -5, ino 4 [ 51.965917][ T9] hfsplus: b-tree write err: -5, ino 2 [ 51.975141][ T9] hfsplus: b-tree write err: -5, ino 20 [ 52.280660][ T5033] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.293695][ T5033] EXT4-fs (loop3): 1 truncate cleaned up [ 52.296055][ T5033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.386803][ T5042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.388410][ T5042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.570281][ T5045] EXT4-fs: inline encryption not supported [ 52.609379][ T5045] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.611253][ T5045] EXT4-fs (loop0): Test dummy encryption mode enabled [ 52.615368][ T5045] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 52.617046][ T5045] System zones: 0-5 [ 52.618544][ T5045] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.642755][ T4341] EXT4-fs (loop0): unmounting filesystem. [ 52.733440][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 53.031033][ T5065] erofs: (device loop0): mounted with root inode @ nid 36. [ 53.244280][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 53.259033][ T5067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 53.350458][ T5075] EXT4-fs: Ignoring removed i_version option [ 53.351866][ T5075] EXT4-fs: Ignoring removed oldalloc option [ 53.354454][ T5075] EXT4-fs (loop1): Test dummy encryption mode enabled [ 53.357348][ T5075] EXT4-fs (loop1): 1 truncate cleaned up [ 53.358431][ T5075] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 53.378607][ T4332] EXT4-fs (loop1): unmounting filesystem. [ 53.734341][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.736882][ T4328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.743631][ T4328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.747597][ T4328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.749424][ T4328] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.750814][ T4328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.821800][ T5096] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.828373][ T5096] EXT4-fs (loop2): 1 truncate cleaned up [ 53.900428][ T5086] chnl_net:caif_netlink_parms(): no params data found [ 53.917885][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.919567][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.921424][ T5086] device bridge_slave_0 entered promiscuous mode [ 53.926543][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.928014][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.929768][ T5086] device bridge_slave_1 entered promiscuous mode [ 53.939985][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.944481][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.955888][ T5086] team0: Port device team_slave_0 added [ 53.958659][ T5086] team0: Port device team_slave_1 added [ 53.967096][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.968655][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.977393][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.982102][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.984021][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.988740][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.126923][ T5086] device hsr_slave_0 entered promiscuous mode [ 54.131247][ T5110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.145732][ T5110] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 54.149409][ T5110] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 54.153368][ T5086] device hsr_slave_1 entered promiscuous mode [ 54.153644][ T5110] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 54.156290][ T5110] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 54.183041][ T5086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.184651][ T5086] Cannot create hsr debugfs directory [ 54.268385][ T5086] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.314731][ T5086] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.359753][ T5086] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.473415][ T5119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.251'. [ 54.663387][ T4339] Bluetooth: hci2: unknown advertising packet type: 0x05 [ 54.664165][ T5086] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.695873][ T5123] set_capacity_and_notify: 11 callbacks suppressed [ 54.695883][ T5123] loop0: detected capacity change from 0 to 512 [ 54.718948][ T5123] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 54.756689][ T5126] binder: 5125:5126 BC_FREE_BUFFER u0000000000000000 no match [ 54.805545][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.816262][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.818258][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.823836][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.831692][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.833961][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.835875][ T4974] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.837193][ T4974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.839853][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.850558][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.852546][ T4974] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.853958][ T4974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.860443][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.866919][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.873594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.876422][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.878402][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.880194][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.888141][ T5086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.892255][ T5086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.896761][ T5137] loop3: detected capacity change from 0 to 764 [ 54.898907][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.908480][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.912704][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.915731][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.921696][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.925192][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.934638][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.031821][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.038257][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.039649][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.183734][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.185468][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.195054][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.196690][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.199546][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.204537][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.211257][ T5086] device veth0_vlan entered promiscuous mode [ 55.218101][ T5086] device veth1_vlan entered promiscuous mode [ 55.231897][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.238435][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.241081][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.249718][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.254543][ T5086] device veth0_macvtap entered promiscuous mode [ 55.258984][ T5086] device veth1_macvtap entered promiscuous mode [ 55.272198][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.274902][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.276997][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.279241][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.281150][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.284242][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.286174][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.288281][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.290169][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.292229][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.296706][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.298381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.300059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.301642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.304574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.311218][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.314183][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.316287][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.318377][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.320159][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.322430][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.327369][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.329461][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.331301][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.351117][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.359567][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.363802][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.365826][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.371158][ T5086] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.383694][ T5086] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.385925][ T5156] loop0: detected capacity change from 0 to 1024 [ 55.387178][ T5086] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.389063][ T5086] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.397526][ T5156] EXT4-fs: Ignoring removed bh option [ 55.472649][ T4546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.474101][ T4546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.477772][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.506166][ T4546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.507753][ T4546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.509144][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.712226][ T5168] FAULT_INJECTION: forcing a failure. [ 55.712226][ T5168] name failslab, interval 1, probability 0, space 0, times 0 [ 55.712352][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.714736][ T5168] CPU: 1 PID: 5168 Comm: syz.0.267 Not tainted syzkaller #0 [ 55.717067][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 55.717739][ T4328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.718712][ T5168] Call trace: [ 55.718720][ T5168] dump_backtrace+0x1c4/0x1f0 [ 55.718748][ T5168] show_stack+0x2c/0x3c [ 55.718758][ T5168] __dump_stack+0x30/0x40 [ 55.718765][ T5168] dump_stack_lvl+0xf4/0x15c [ 55.718771][ T5168] dump_stack+0x1c/0x5c [ 55.718775][ T5168] should_fail_ex+0x3cc/0x524 [ 55.718785][ T5168] __should_failslab+0xc0/0x11c [ 55.718794][ T5168] should_failslab+0x10/0x28 [ 55.718801][ T5168] kmem_cache_alloc+0x88/0x310 [ 55.718809][ T5168] getname_flags+0xb8/0x458 [ 55.718815][ T5168] user_path_at_empty+0x40/0x84 [ 55.718822][ T5168] __arm64_sys_mount+0x468/0x5a0 [ 55.718829][ T5168] invoke_syscall+0x98/0x290 [ 55.718838][ T5168] el0_svc_common+0x13c/0x258 [ 55.718847][ T5168] do_el0_svc+0x5c/0x134 [ 55.718855][ T5168] el0_svc+0x58/0x128 [ 55.718860][ T5168] el0t_64_sync_handler+0x84/0xf0 [ 55.718865][ T5168] el0t_64_sync+0x18c/0x190 [ 55.736410][ T4328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.738553][ T4328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.741851][ T4328] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.743821][ T4328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.773336][ T4328] Bluetooth: hci0: command 0x0409 tx timeout [ 55.999511][ T5169] chnl_net:caif_netlink_parms(): no params data found [ 56.016730][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.018088][ T5169] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.019746][ T5169] device bridge_slave_0 entered promiscuous mode [ 56.022212][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.042168][ T5169] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.044693][ T5169] device bridge_slave_1 entered promiscuous mode [ 56.058348][ T5169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.061628][ T5169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.071728][ T5169] team0: Port device team_slave_0 added [ 56.077378][ T5169] team0: Port device team_slave_1 added [ 56.084276][ T5169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.085835][ T5169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.090290][ T5169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.097432][ T5169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.098819][ T5169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.104381][ T5169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.144794][ T5169] device hsr_slave_0 entered promiscuous mode [ 56.183630][ T5169] device hsr_slave_1 entered promiscuous mode [ 56.223533][ T5169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.225604][ T5169] Cannot create hsr debugfs directory [ 56.285624][ T5169] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 56.324903][ T5169] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 56.366173][ T5169] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 56.414271][ T5169] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 56.508005][ T5169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.515010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.516685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.529285][ T5169] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.539382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.541164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.542835][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.544281][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.558070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.560008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.565660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.569947][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.571223][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.572824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.597082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.601114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.610866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.616571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.619005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.621246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.631397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.634495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.636085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.638505][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.939853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.967274][ T5201] loop5: detected capacity change from 0 to 2048 [ 57.030924][ T5201] EXT4-fs error (device loop5): ext4_find_extent:900: inode #2: comm syz.5.275: inode has invalid extent depth: 8 [ 57.037203][ T5201] EXT4-fs (loop5): Remounting filesystem read-only [ 57.038627][ T5207] loop0: detected capacity change from 0 to 2048 [ 57.039917][ T5201] EXT4-fs error (device loop5): ext4_find_extent:900: inode #2: comm syz.5.275: inode has invalid extent depth: 8 [ 57.048809][ T5201] EXT4-fs (loop5): Remounting filesystem read-only [ 57.081410][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.083126][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.088484][ T5169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.127894][ T5218] loop5: detected capacity change from 0 to 256 [ 57.252604][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.265200][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.267465][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.271345][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.275470][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.282070][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.292123][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.296202][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.301946][ T5169] device veth0_vlan entered promiscuous mode [ 57.308773][ T5169] device veth1_vlan entered promiscuous mode [ 57.321665][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.326849][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.329008][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.331694][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.335890][ T5169] device veth0_macvtap entered promiscuous mode [ 57.336434][ T5236] FAULT_INJECTION: forcing a failure. [ 57.336434][ T5236] name failslab, interval 1, probability 0, space 0, times 0 [ 57.339231][ T5169] device veth1_macvtap entered promiscuous mode [ 57.339297][ T5236] CPU: 1 PID: 5236 Comm: syz.0.284 Not tainted syzkaller #0 [ 57.341675][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 57.343603][ T5236] Call trace: [ 57.344224][ T5236] dump_backtrace+0x1c4/0x1f0 [ 57.345248][ T5236] show_stack+0x2c/0x3c [ 57.345823][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.346142][ T5236] __dump_stack+0x30/0x40 [ 57.347881][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.348732][ T5236] dump_stack_lvl+0xf4/0x15c [ 57.350216][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.351054][ T5236] dump_stack+0x1c/0x5c [ 57.353937][ T5236] should_fail_ex+0x3cc/0x524 [ 57.354788][ T5236] __should_failslab+0xc0/0x11c [ 57.355623][ T5236] should_failslab+0x10/0x28 [ 57.356447][ T5236] __kmem_cache_alloc_node+0x7c/0x318 [ 57.357356][ T5236] kmalloc_trace+0x48/0x94 [ 57.358114][ T5236] alloc_fs_context+0x7c/0x778 [ 57.358975][ T5236] fs_context_for_mount+0x34/0x44 [ 57.359861][ T5236] mq_init_ns+0xdc/0x4d8 [ 57.360600][ T5236] copy_ipcs+0x274/0x4d4 [ 57.361396][ T5236] create_new_namespaces+0x1b0/0x604 [ 57.362324][ T5236] unshare_nsproxy_namespaces+0x108/0x160 [ 57.363313][ T5236] ksys_unshare+0x3f0/0x70c [ 57.364120][ T5236] __arm64_sys_unshare+0x3c/0x50 [ 57.365017][ T5236] invoke_syscall+0x98/0x290 [ 57.365845][ T5236] el0_svc_common+0x13c/0x258 [ 57.366716][ T5236] do_el0_svc+0x5c/0x134 [ 57.367510][ T5236] el0_svc+0x58/0x128 [ 57.368199][ T5236] el0t_64_sync_handler+0x84/0xf0 [ 57.369060][ T5236] el0t_64_sync+0x18c/0x190 [ 57.371310][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.393060][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.395307][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.397038][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.398817][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.400429][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.402135][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.407659][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.409435][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.426080][ T5240] loop0: detected capacity change from 0 to 512 [ 57.428894][ T5169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.433188][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.434888][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.436465][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.438153][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.440891][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.442718][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.448406][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.450270][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.452085][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.455211][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.456898][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.458591][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.468184][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.470364][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.472005][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.474153][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.476974][ T5169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.481054][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.482796][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.487631][ T5169] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.489410][ T5169] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.491054][ T5169] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.492675][ T5169] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.535460][ T4974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.536858][ T4974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.538958][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.562814][ T4974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.569164][ T4974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.570752][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.588112][ T5246] loop3: detected capacity change from 0 to 1024 [ 57.707069][ T5261] loop0: detected capacity change from 0 to 16 [ 57.712226][ T5261] erofs: (device loop0): mounted with root inode @ nid 36. [ 57.723449][ T5261] syz.0.291: attempt to access beyond end of device [ 57.723449][ T5261] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 57.773392][ T4339] Bluetooth: hci2: command 0x0409 tx timeout [ 57.852955][ T4328] Bluetooth: hci0: command 0x041b tx timeout [ 58.059900][ T5276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.300'. [ 58.279748][ T5284] loop2: detected capacity change from 0 to 16 [ 58.282680][ T5284] erofs: (device loop2): mounted with root inode @ nid 36. [ 58.299776][ T5284] syz.2.303: attempt to access beyond end of device [ 58.299776][ T5284] loop2: rw=524288, sector=8, nr_sectors = 256 limit=16 [ 58.309756][ T5284] syz.2.303: attempt to access beyond end of device [ 58.309756][ T5284] loop2: rw=0, sector=16, nr_sectors = 8 limit=16 [ 58.312090][ T5284] syz.2.303: attempt to access beyond end of device [ 58.312090][ T5284] loop2: rw=0, sector=16, nr_sectors = 8 limit=16 [ 58.317822][ T5284] syz.2.303: attempt to access beyond end of device [ 58.317822][ T5284] loop2: rw=0, sector=16, nr_sectors = 8 limit=16 [ 58.320456][ T5284] syz.2.303: attempt to access beyond end of device [ 58.320456][ T5284] loop2: rw=0, sector=16, nr_sectors = 8 limit=16 [ 58.323027][ T5284] syz.2.303: attempt to access beyond end of device [ 58.323027][ T5284] loop2: rw=0, sector=16, nr_sectors = 8 limit=16 [ 58.325591][ T5284] syz.2.303: attempt to access beyond end of device [ 58.325591][ T5284] loop2: rw=0, sector=16, nr_sectors = 8 limit=16 [ 58.327933][ T5284] syz.2.303: attempt to access beyond end of device [ 58.327933][ T5284] loop2: rw=0, sector=16, nr_sectors = 8 limit=16 [ 58.330331][ T5284] syz.2.303: attempt to access beyond end of device [ 58.330331][ T5284] loop2: rw=0, sector=16, nr_sectors = 8 limit=16 [ 58.529773][ T5290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.543398][ T5290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.701364][ T5302] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.309'. [ 58.725783][ T5304] EXT4-fs: inline encryption not supported [ 58.731364][ T5304] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.743985][ T5304] EXT4-fs (loop3): 1 truncate cleaned up [ 58.752739][ T5304] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #12: comm syz.3.310: bad extra_isize 62 (inode size 256) [ 58.768171][ T5304] EXT4-fs (loop3): Remounting filesystem read-only [ 58.946664][ T5313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.032801][ T5317] device syzkaller0 entered promiscuous mode [ 59.842735][ T5348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.853064][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 59.880779][ T5350] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.329'. [ 59.943242][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 60.119480][ T5354] set_capacity_and_notify: 2 callbacks suppressed [ 60.119489][ T5354] loop2: detected capacity change from 0 to 1024 [ 60.184217][ T5359] loop2: detected capacity change from 0 to 1024 [ 60.197072][ T5359] EXT4-fs: Ignoring removed i_version option [ 60.211128][ T5359] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.332: lblock 3 mapped to illegal pblock 3 (length 3) [ 60.217046][ T5359] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 60.219344][ T5359] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.219344][ T5359] [ 60.566225][ T5391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.856420][ T5391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.871021][ T5397] capability: warning: `syz.5.345' uses 32-bit capabilities (legacy support in use) [ 61.137424][ T5407] binder: 5406:5407 tried to acquire reference to desc 0, got 1 instead [ 61.140386][ T5407] binder: 5407:5406 failed to get security context [ 61.142759][ T5407] binder: 5406:5407 transaction async to 5406:0 failed 10/29201/-22, size 0-0 line 3214 [ 61.159887][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 61.206658][ T5409] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.351'. [ 61.430024][ T5424] input: syz1 as /devices/virtual/input/input2 [ 61.441894][ T5424] input: failed to attach handler leds to device input2, error: -6 [ 61.442593][ T5428] loop6: detected capacity change from 0 to 256 [ 61.457602][ T5428] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 61.517570][ T5430] loop2: detected capacity change from 0 to 512 [ 61.519108][ T5430] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.536405][ T5430] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 61.548242][ T5430] EXT4-fs (loop2): 1 truncate cleaned up [ 61.945334][ T4339] Bluetooth: hci2: command 0x040f tx timeout [ 62.006801][ T5440] loop3: detected capacity change from 0 to 2048 [ 62.008424][ T5440] EXT4-fs: Ignoring removed i_version option [ 62.013300][ T4328] Bluetooth: hci0: command 0x0419 tx timeout [ 62.193358][ T5451] loop2: detected capacity change from 0 to 1024 [ 62.326338][ T5458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.328047][ T5458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.548004][ T5469] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.372'. [ 62.889902][ T5473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.893802][ T5473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.964333][ T5477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.965952][ T5477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.244472][ T5494] loop6: detected capacity change from 0 to 8 [ 63.258549][ T5494] SQUASHFS error: Failed to read block 0x4de: -5 [ 63.259707][ T5494] SQUASHFS error: Failed to read block 0x4de: -5 [ 63.261041][ T5494] SQUASHFS error: Failed to read block 0x4de: -5 [ 63.262167][ T5494] SQUASHFS error: Failed to read block 0x4de: -5 [ 63.267729][ T5494] SQUASHFS error: Failed to read block 0x4de: -5 [ 63.269273][ T5494] SQUASHFS error: Failed to read block 0x4de: -5 [ 63.270541][ T5494] SQUASHFS error: Failed to read block 0x4de: -5 [ 63.271879][ T5494] SQUASHFS error: Failed to read block 0x4de: -5 [ 63.339956][ T5503] loop3: detected capacity change from 0 to 128 [ 63.365007][ T4321] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 63.662745][ T5506] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4337] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5506] [ 63.938831][ T5532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.940704][ T5532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.005709][ T5534] loop2: detected capacity change from 0 to 128 [ 64.008348][ T5534] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 64.022290][ T4388] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 64.023548][ T4339] Bluetooth: hci2: command 0x0419 tx timeout [ 64.050948][ T5536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.055075][ T5536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.496280][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.498260][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.768799][ T5556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.770775][ T5556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.775659][ T5553] loop2: detected capacity change from 0 to 256 [ 64.799988][ T5553] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 65.150487][ T5583] loop3: detected capacity change from 0 to 128 [ 65.217367][ T5589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.219084][ T5589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.468388][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 65.468398][ T27] audit: type=1326 audit(65.450:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e1792a8 code=0x7ffc0000 [ 65.477133][ T27] audit: type=1326 audit(65.460:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e1792a8 code=0x7ffc0000 [ 66.004559][ T27] audit: type=1326 audit(65.460:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8e1792a8 code=0x7ffc0000 [ 66.117348][ T27] audit: type=1326 audit(65.460:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e1792a8 code=0x7ffc0000 [ 66.143037][ T27] audit: type=1326 audit(65.460:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e1792a8 code=0x7ffc0000 [ 66.147710][ T27] audit: type=1326 audit(65.970:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff8e1792a8 code=0x7ffc0000 [ 66.168977][ T27] audit: type=1326 audit(65.970:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e1792a8 code=0x7ffc0000 [ 66.188986][ T27] audit: type=1326 audit(65.990:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e1792a8 code=0x7ffc0000 [ 66.199542][ T27] audit: type=1326 audit(66.010:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8e1792a8 code=0x7ffc0000 [ 66.239416][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.241264][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.267983][ T5629] loop3: detected capacity change from 0 to 2048 [ 66.269432][ T27] audit: type=1326 audit(66.250:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e1792a8 code=0x7ffc0000 [ 66.313797][ T5629] EXT4-fs mount: 26 callbacks suppressed [ 66.313811][ T5629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 66.370425][ T5629] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.486680][ T5648] loop6: detected capacity change from 0 to 164 [ 66.500103][ T5648] /dev/loop6: Can't open blockdev [ 66.581831][ T5651] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 66.584202][ T5651] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.584202][ T5651] [ 66.585848][ T5651] EXT4-fs (loop3): Total free blocks count 0 [ 66.587025][ T5651] EXT4-fs (loop3): Free/Dirty block details [ 66.588143][ T5651] EXT4-fs (loop3): free_blocks=2415919104 [ 66.589252][ T5651] EXT4-fs (loop3): dirty_blocks=48 [ 66.590204][ T5651] EXT4-fs (loop3): Block reservation details [ 66.591310][ T5651] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 67.401863][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 67.542859][ T5677] loop2: detected capacity change from 0 to 1024 [ 67.618090][ T5672] loop3: detected capacity change from 0 to 2048 [ 67.631445][ T4328] Bluetooth: hci4: Malformed LE Event: 0x0d [ 67.646122][ T5672] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 67.658540][ T5672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.731607][ T5696] loop2: detected capacity change from 0 to 7 [ 67.742844][ T5696] Dev loop2: unable to read RDB block 7 [ 67.744271][ T5696] loop2: unable to read partition table [ 67.745393][ T5696] loop2: partition table beyond EOD, truncated [ 67.746529][ T5696] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 67.801349][ T5698] Bluetooth: MGMT ver 1.22 [ 67.871705][ T5708] loop6: detected capacity change from 0 to 2048 [ 67.939423][ T5708] UDF-fs: bad mount option "umask=0000°000000000000000002" or missing value [ 67.983231][ T4320] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.042699][ T5716] loop3: detected capacity change from 0 to 16 [ 68.200505][ T5716] erofs: (device loop3): mounted with root inode @ nid 36. [ 68.315426][ T5719] loop2: detected capacity change from 0 to 1024 [ 68.342262][ T5723] binder: 5722:5723 tried to acquire reference to desc 0, got 1 instead [ 68.349794][ T5723] binder: 5722:5723 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.352349][ T5723] binder: 5723 RLIMIT_NICE not set [ 68.428216][ T5728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.447946][ T5728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.475130][ T5732] loop6: detected capacity change from 0 to 256 [ 68.497631][ T5732] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 68.523714][ T5732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.477'. [ 68.961369][ T5742] 9pnet: Unknown protocol version 9p20\++} [ 69.156813][ T5750] device syzkaller0 entered promiscuous mode [ 69.310792][ T5765] erofs: (device loop5): mounted with root inode @ nid 36. [ 69.316353][ T5765] bio_check_eod: 678 callbacks suppressed [ 69.316364][ T5765] syz.5.490: attempt to access beyond end of device [ 69.316364][ T5765] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 69.320142][ T5765] syz.5.490: attempt to access beyond end of device [ 69.320142][ T5765] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 69.329095][ T5765] ================================================================== [ 69.330599][ T5765] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x39c/0x494 [ 69.332255][ T5765] Read of size 4096 at addr ffff0000d1928000 by task syz.5.490/5765 [ 69.333768][ T5765] [ 69.334189][ T5765] CPU: 1 PID: 5765 Comm: syz.5.490 Not tainted syzkaller #0 [ 69.335550][ T5765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 69.337374][ T5765] Call trace: [ 69.337988][ T5765] dump_backtrace+0x1c4/0x1f0 [ 69.338894][ T5765] show_stack+0x2c/0x3c [ 69.339694][ T5765] __dump_stack+0x30/0x40 [ 69.340463][ T5765] dump_stack_lvl+0xf4/0x15c [ 69.341293][ T5765] print_address_description+0x88/0x218 [ 69.342231][ T5765] print_report+0x50/0x68 [ 69.343008][ T5765] kasan_report+0xa8/0xfc [ 69.343841][ T5765] kasan_check_range+0x258/0x290 [ 69.344756][ T5765] memcpy+0x48/0x90 [ 69.345421][ T5765] z_erofs_transform_plain+0x39c/0x494 [ 69.346361][ T5765] z_erofs_decompress+0x9c/0xd4 [ 69.347188][ T5765] z_erofs_decompress_queue+0x103c/0x1bf4 [ 69.348244][ T5765] z_erofs_runqueue+0x1508/0x16a8 [ 69.349137][ T5765] z_erofs_read_folio+0x2dc/0x5cc [ 69.350004][ T5765] filemap_read_folio+0x134/0x384 [ 69.350873][ T5765] filemap_read+0x1290/0x20dc [ 69.351672][ T5765] generic_file_read_iter+0xf8/0x5ac [ 69.352549][ T5765] vfs_read+0x3cc/0x7b8 [ 69.353238][ T5765] ksys_read+0x12c/0x228 [ 69.353966][ T5765] __arm64_sys_read+0x7c/0x90 [ 69.354768][ T5765] invoke_syscall+0x98/0x290 [ 69.355559][ T5765] el0_svc_common+0x13c/0x258 [ 69.356421][ T5765] do_el0_svc+0x5c/0x134 [ 69.357141][ T5765] el0_svc+0x58/0x128 [ 69.357813][ T5765] el0t_64_sync_handler+0x84/0xf0 [ 69.358682][ T5765] el0t_64_sync+0x18c/0x190 [ 69.359478][ T5765] [ 69.359902][ T5765] Allocated by task 4388: [ 69.360669][ T5765] kasan_set_track+0x4c/0x80 [ 69.361521][ T5765] kasan_save_alloc_info+0x24/0x30 [ 69.362362][ T5765] __kasan_kmalloc+0xa0/0xb8 [ 69.363153][ T5765] __kmalloc_node_track_caller+0xcc/0x174 [ 69.364157][ T5765] __alloc_skb+0x260/0x728 [ 69.364945][ T5765] nsim_dev_trap_report_work+0x204/0x94c [ 69.365975][ T5765] process_one_work+0x7e4/0x13bc [ 69.367016][ T5765] worker_thread+0x8cc/0xfe8 [ 69.367930][ T5765] kthread+0x254/0x2e0 [ 69.368763][ T5765] ret_from_fork+0x10/0x20 [ 69.369654][ T5765] [ 69.370155][ T5765] Freed by task 4388: [ 69.370930][ T5765] kasan_set_track+0x4c/0x80 [ 69.371846][ T5765] kasan_save_free_info+0x38/0x5c [ 69.372783][ T5765] ____kasan_slab_free+0x148/0x1b0 [ 69.373714][ T5765] __kasan_slab_free+0x18/0x28 [ 69.374577][ T5765] slab_free_freelist_hook+0x16c/0x1e8 [ 69.375551][ T5765] __kmem_cache_free+0xbc/0x21c [ 69.376433][ T5765] kfree+0xd0/0x1a8 [ 69.377151][ T5765] skb_release_data+0x3d8/0x63c [ 69.378030][ T5765] consume_skb+0xa0/0x104 [ 69.378803][ T5765] nsim_dev_trap_report_work+0x618/0x94c [ 69.379863][ T5765] process_one_work+0x7e4/0x13bc [ 69.380826][ T5765] worker_thread+0x8cc/0xfe8 [ 69.381674][ T5765] kthread+0x254/0x2e0 [ 69.382412][ T5765] ret_from_fork+0x10/0x20 [ 69.383186][ T5765] [ 69.383610][ T5765] The buggy address belongs to the object at ffff0000d1928000 [ 69.383610][ T5765] which belongs to the cache kmalloc-4k of size 4096 [ 69.386131][ T5765] The buggy address is located 0 bytes inside of [ 69.386131][ T5765] 4096-byte region [ffff0000d1928000, ffff0000d1929000) [ 69.388422][ T5765] [ 69.388847][ T5765] The buggy address belongs to the physical page: [ 69.389986][ T5765] page:0000000004ffa798 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111928 [ 69.391847][ T5765] head:0000000004ffa798 order:3 compound_mapcount:0 compound_pincount:0 [ 69.393343][ T5765] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 69.394855][ T5765] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002a80 [ 69.396418][ T5765] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 69.397934][ T5765] page dumped because: kasan: bad access detected [ 69.399075][ T5765] [ 69.399491][ T5765] Memory state around the buggy address: [ 69.400522][ T5765] ffff0000d1927f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.402002][ T5765] ffff0000d1927f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.403448][ T5765] >ffff0000d1928000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.404919][ T5765] ^ [ 69.405655][ T5765] ffff0000d1928080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.407119][ T5765] ffff0000d1928100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.408493][ T5765] ================================================================== [ 69.469157][ T5768] device syzkaller0 entered promiscuous mode [ 69.471971][ T5765] Disabling lock debugging due to kernel taint [ 69.473593][ T5765] syz.5.490: attempt to access beyond end of device [ 69.473593][ T5765] loop5: rw=0, sector=1056, nr_sectors = 8 limit=16 [ 69.613790][ T14] cfg80211: failed to load regulatory.db [ 69.853142][ T4388] hfsplus: b-tree write err: -5, ino 25 [ 69.854343][ T4388] hfsplus: b-tree write err: -5, ino 4 [ 69.855306][ T4388] hfsplus: b-tree write err: -5, ino 2 [ 69.856297][ T4388] hfsplus: b-tree write err: -5, ino 22