last executing test programs: 3m31.442258168s ago: executing program 32 (id=225): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x3, "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"}) 3m27.36390404s ago: executing program 5 (id=320): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa0442, 0x0) lseek(r0, 0xfffffffffffffffc, 0x4) 3m27.333842505s ago: executing program 5 (id=374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '}'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4004850}, 0x20040000) 3m27.170652532s ago: executing program 5 (id=377): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000000cdb6c80000000080000904"], 0x50) 3m27.087375796s ago: executing program 5 (id=379): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) 3m26.955882588s ago: executing program 5 (id=383): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002200)={0x0, 0x0, "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"}) 3m23.852236007s ago: executing program 1 (id=412): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0xe, @sctp_ip6_spec={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x4e22, 0x4e20, 0x40}, {0x0, @random="65b45a8c01a2", 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @local, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xfe, 0x3}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r3}) 3m23.733234497s ago: executing program 1 (id=413): r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8906, 0x0) 3m22.852753204s ago: executing program 1 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 3m21.982792579s ago: executing program 1 (id=437): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd50200000009"], 0x7c}}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) 3m21.91996393s ago: executing program 1 (id=441): fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) 3m21.835734884s ago: executing program 1 (id=442): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000240)={0x40, 0xf, 0x0, 0x2c5}, 0x8, 0x8, 0x8000000, 0x0, 0x2000, 0x200001, 0x0}) 3m13.988990546s ago: executing program 33 (id=360): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000200001"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 3m11.684683861s ago: executing program 34 (id=383): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002200)={0x0, 0x0, "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"}) 3m6.826374214s ago: executing program 35 (id=442): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000240)={0x40, 0xf, 0x0, 0x2c5}, 0x8, 0x8, 0x8000000, 0x0, 0x2000, 0x200001, 0x0}) 51.806273438s ago: executing program 7 (id=1392): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[], 0x21, 0x242, &(0x7f0000000300)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls}, 0x94) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 51.691672027s ago: executing program 7 (id=1395): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) 51.664091471s ago: executing program 7 (id=1397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x30010000, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 51.559744849s ago: executing program 7 (id=1399): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 51.551911161s ago: executing program 6 (id=1400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x4, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4f, 0x1ff}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 51.540661073s ago: executing program 7 (id=1401): sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x8010) syz_open_procfs(0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f00000002c0)={&(0x7f0000000200)="1a167f09adc1173486476dd2b87047c889f0eccc6897ead2d1e5978ca143c89b57d3cca1e849be12491e5aae911cb21f3248772ee8c17d0fb48f5cd0d314fa990943c1c80ed2852aeda67f750d", 0x4d}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000025c0)={[0xd]}, 0x8) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) syz_open_pts(r0, 0x900) read(0xffffffffffffffff, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(0xffffffffffffffff, &(0x7f0000000e00)=""/4095, 0xfff) 51.511530347s ago: executing program 6 (id=1402): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e1e, 0x3, 'sed\x00', 0x21, 0x2, 0x6e}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 51.463447055s ago: executing program 6 (id=1403): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x99, 0x0, {}, 0xf0ffdfff}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x3, "d123"}]}, 0x54}}, 0x0) 51.462056516s ago: executing program 6 (id=1404): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000240)=""/30, &(0x7f0000000280)=0x1e) 51.403919735s ago: executing program 6 (id=1405): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x6395, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, [0x5, 0x5, 0x8, 0xe, 0x5, 0x8001, 0x3, 0x0, 0x8, 0x5, 0x9, 0x2, 0x3, 0x2]}, &(0x7f0000000500)=0x100) 51.403664055s ago: executing program 6 (id=1406): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 50.984041285s ago: executing program 2 (id=1412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x4, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4f, 0x1ff}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 50.954008341s ago: executing program 2 (id=1413): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 50.935481794s ago: executing program 2 (id=1414): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f00000000c0)) 50.884769622s ago: executing program 2 (id=1415): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x99, 0x0, {}, 0xf0ffdfff}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x3, "d123"}]}, 0x54}}, 0x0) 50.883507832s ago: executing program 2 (id=1416): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@link_local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33c83", 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9b5b, {0xe, 0x6, "90f26f", 0x5, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2}}}}}}}, 0x0) 50.807872485s ago: executing program 2 (id=1417): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/firmware/fdt', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000580)='memory.stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r4, &(0x7f0000002900)=[{&(0x7f0000000100)="ec53", 0x2}], 0x1) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1002, 0x200}}}]}, 0x38}}, 0x0) socket(0x1e, 0x805, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 50.676611387s ago: executing program 7 (id=1418): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) 36.221833383s ago: executing program 36 (id=1406): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 35.208983453s ago: executing program 37 (id=1418): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) 35.191369676s ago: executing program 38 (id=1417): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/firmware/fdt', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000580)='memory.stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r4, &(0x7f0000002900)=[{&(0x7f0000000100)="ec53", 0x2}], 0x1) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1002, 0x200}}}]}, 0x38}}, 0x0) socket(0x1e, 0x805, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.935965396s ago: executing program 3 (id=1789): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005e40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000800)='z', 0x1}], 0x1, &(0x7f0000000300)=ANY=[], 0x58}}], 0x1, 0x2400c444) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000440)=[{0x4, 0x4, 0x9}, {0x16, 0xff, 0x0, 0x7fff0000}]}) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="97", 0x1}], 0x1}}], 0x1, 0x84) 1.804530848s ago: executing program 0 (id=1795): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x200, 0x0, 0x200, 0x298, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xffffffff, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x7, 0x11000002]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 1.723685341s ago: executing program 0 (id=1798): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast1}], 0x10) 1.715609123s ago: executing program 0 (id=1799): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f00000002c0)={0xa, 0x4e24, 0x14, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005e40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000800)='z', 0x1}], 0x1, &(0x7f0000000300)=ANY=[], 0x58}}], 0x1, 0x2400c444) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000440)=[{0x16, 0xff, 0x0, 0x7fff0000}]}) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) 1.693337536s ago: executing program 4 (id=1800): sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x8010) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000025c0)={[0xd]}, 0x8) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, &(0x7f0000000e00)=""/4095, 0xfff) 1.383433448s ago: executing program 8 (id=1801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x20001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xb, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x9d}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc221100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.327786388s ago: executing program 9 (id=1802): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @empty, 0x8}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fspick(0xffffffffffffff9c, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x52) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) read(r3, &(0x7f0000001400)=""/4096, 0x1000) 1.236746402s ago: executing program 9 (id=1803): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @local}, 0x14) 1.19452178s ago: executing program 8 (id=1804): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x8, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) 1.160747545s ago: executing program 8 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0x9, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4009c}, 0x0) 1.121936172s ago: executing program 9 (id=1806): sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x14, 0x0, 0x1}, 0x14}}, 0x40d0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@iter={0x0}}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 1.120695042s ago: executing program 3 (id=1807): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x3e, 0x0, "bb71a3c364ca41d6357e54cdd2237388c4b31c964e00ab8d34a6ff1f56c54dc46d47f92ccd00a0ef0a007bbe00000000000000000000000000000000000000000000004000"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1.082815379s ago: executing program 9 (id=1808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56741, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x5, 0xf, 0x1, 0xf, 0x3, 0xe, 0x6, 0x22, 0x6, 0x1, 0x4], 0x3, [0x4, 0x1101, 0x200, 0x2002, 0x1, 0x4, 0x0, 0xd06, 0x7, 0x2, 0x800, 0x3, 0x5, 0x6, 0xd, 0x965], [0xfff1, 0x5, 0xffff, 0xfff5, 0x1000, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0x0, 0x8, 0x1, 0x6]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) 959.777429ms ago: executing program 8 (id=1809): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x524, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x80000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x0, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x4, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x3, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x208, 0x7, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0xcbc, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da4, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xf, 0x9, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x100401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x1, 0x0, 0x9, 0x8001, 0x5, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0xcb38, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0x100f3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xffb, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xee, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x5, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x40002, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 853.180657ms ago: executing program 0 (id=1810): ioprio_set$pid(0x2, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x2000000000006) 838.1115ms ago: executing program 3 (id=1811): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75d, 0x8e382) sendfile(r0, r0, 0x0, 0x24002de8) 828.033761ms ago: executing program 4 (id=1812): r0 = socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x1c, 0x14, 0x9, 0x3, 0x25dfdbff, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xca1de99cf558760b}, 0x20004000) 759.846893ms ago: executing program 0 (id=1813): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x403, 0x70bd25, 0x1, {0x0, 0x0, 0x4, 0x0, 0x1300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x73}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 759.376713ms ago: executing program 4 (id=1814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x20001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xb, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x9d}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc221100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 759.074703ms ago: executing program 8 (id=1815): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCSETS(r0, 0x40045431, 0x0) r2 = syz_open_pts(r0, 0x141601) ioctl$TCSETSF(r2, 0x5404, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0x1, 0x2bc, &(0x7f00000015c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x25511ad7819c8de1, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x2c400}], 0x14, 0x7800, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000470000000400000002"], 0x50) 745.733435ms ago: executing program 3 (id=1816): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x8, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) 714.7885ms ago: executing program 0 (id=1817): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005e40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000800)='z', 0x1}], 0x1, &(0x7f0000000300)=ANY=[], 0x58}}], 0x1, 0x2400c444) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000440)=[{0x4, 0x4, 0x9}, {0x16, 0xff, 0x0, 0x7fff0000}]}) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="97", 0x1}], 0x1}}], 0x1, 0x84) 671.129157ms ago: executing program 9 (id=1818): sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x14, 0x0, 0x1}, 0x14}}, 0x40d0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@iter={0x0}}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 669.818408ms ago: executing program 3 (id=1819): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x381, 0x0) io_submit(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) 639.401683ms ago: executing program 9 (id=1820): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000240)) 555.695417ms ago: executing program 3 (id=1821): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$VT_DISALLOCATE(r2, 0x5608) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(r1, 0x0, 0x0) r7 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r7, &(0x7f0000000200)={'#! ', './file0'}, 0xb) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 186.911778ms ago: executing program 4 (id=1822): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 126.585928ms ago: executing program 4 (id=1823): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x109) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffd, {0x1, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5, 0x8, 0x0, 0x4, 0x1, 0x5, 0x0, 0x1000, 0xf3, 0x0, 0xffffffffffffffff, 0x40, 0x20000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 69.013208ms ago: executing program 4 (id=1824): sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x8010) ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f00000002c0)={&(0x7f0000000200)="1a167f09adc1173486476dd2b87047c889f0eccc6897ead2d1e5978ca143c89b57d3cca1e849be12491e5aae911cb21f3248772ee8c17d0fb48f5cd0d314fa990943c1c80ed2852aeda67f750d", 0x4d}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000025c0)={[0xd]}, 0x8) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, &(0x7f0000000e00)=""/4095, 0xfff) 0s ago: executing program 8 (id=1825): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x401, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 326 audit(65.130:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba9771a8 code=0x7ffc0000 [ 65.351112][ T5548] device syzkaller0 entered promiscuous mode [ 65.427422][ T5550] netlink: 56 bytes leftover after parsing attributes in process `syz.3.409'. [ 65.571098][ T5554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 65.637379][ T5557] loop3: detected capacity change from 0 to 512 [ 65.674367][ T5557] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 65.752696][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 66.338331][ T4326] Bluetooth: hci5: command 0x0419 tx timeout [ 66.589749][ T5578] netlink: 56 bytes leftover after parsing attributes in process `syz.2.420'. [ 66.646990][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 67.042606][ T5603] netlink: 56 bytes leftover after parsing attributes in process `syz.3.432'. [ 67.195930][ T5607] loop2: detected capacity change from 0 to 2048 [ 67.313908][ T5607] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.335549][ T5607] EXT4-fs (loop2): shut down requested (0) [ 67.521224][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 67.610413][ T5628] netlink: 56 bytes leftover after parsing attributes in process `syz.3.443'. [ 68.564129][ T5655] netlink: 56 bytes leftover after parsing attributes in process `syz.2.454'. [ 68.683572][ T5661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.457'. [ 68.913228][ T5672] loop2: detected capacity change from 0 to 164 [ 68.959519][ T5290] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 69.065535][ T5678] netlink: 56 bytes leftover after parsing attributes in process `syz.2.465'. [ 69.619556][ T24] cfg80211: failed to load regulatory.db [ 70.813925][ T5639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.091595][ T5702] netlink: 56 bytes leftover after parsing attributes in process `syz.3.476'. [ 72.165359][ T5739] netlink: 56 bytes leftover after parsing attributes in process `syz.2.490'. [ 72.552551][ T5752] loop2: detected capacity change from 0 to 512 [ 72.790428][ T5763] netlink: 56 bytes leftover after parsing attributes in process `syz.3.501'. [ 73.286110][ T5776] loop3: detected capacity change from 0 to 512 [ 73.340130][ T5290] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.534383][ T5789] netlink: 56 bytes leftover after parsing attributes in process `syz.2.512'. [ 73.590658][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 73.590667][ T27] audit: type=1326 audit(73.570:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.2.514" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b771a8 code=0x0 [ 73.693192][ T5797] loop3: detected capacity change from 0 to 512 [ 73.718604][ T5797] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 73.726417][ T5797] EXT4-fs (loop3): 1 truncate cleaned up [ 73.727538][ T5797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 73.782241][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 73.822378][ T5804] loop3: detected capacity change from 0 to 512 [ 74.488468][ T5815] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 74.489640][ T5815] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.492626][ T5815] vhci_hcd vhci_hcd.0: Device attached [ 74.496133][ T5816] vhci_hcd: cannot find a urb of seqnum 4 max seqnum 0 [ 74.510642][ T4387] vhci_hcd: stop threads [ 74.512220][ T4387] vhci_hcd: release socket [ 74.513018][ T4387] vhci_hcd: disconnect device [ 74.889317][ T5823] netlink: 56 bytes leftover after parsing attributes in process `syz.3.525'. [ 75.185548][ T5837] loop2: detected capacity change from 0 to 512 [ 75.209853][ T5837] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.250041][ T5841] loop3: detected capacity change from 0 to 512 [ 75.251702][ T5841] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.254556][ T5841] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #15: comm syz.3.531: inline data xattr refers to an external xattr inode [ 75.256858][ T5841] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.531: couldn't read orphan inode 15 (err -117) [ 75.261907][ T5841] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.313080][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 75.322809][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 75.542091][ T4326] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.543918][ T4326] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.545868][ T4326] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.547738][ T4326] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.549690][ T4326] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.551801][ T4326] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.691557][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 75.708609][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.709934][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.711330][ T5853] device bridge_slave_0 entered promiscuous mode [ 75.713338][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.714457][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.715922][ T5853] device bridge_slave_1 entered promiscuous mode [ 75.725073][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.727652][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.736234][ T5853] team0: Port device team_slave_0 added [ 75.740761][ T5853] team0: Port device team_slave_1 added [ 75.746947][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.748058][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.753426][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.755724][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.756837][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.762917][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.820003][ T5853] device hsr_slave_0 entered promiscuous mode [ 75.868546][ T5853] device hsr_slave_1 entered promiscuous mode [ 75.901807][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.903023][ T5853] Cannot create hsr debugfs directory [ 76.220652][ T5190] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.279541][ T5190] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.390299][ T5190] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.392878][ T5871] device syzkaller0 entered promiscuous mode [ 76.569363][ T5190] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.574455][ T5853] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 76.592504][ T5878] loop3: detected capacity change from 0 to 2048 [ 76.604661][ T5878] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 76.609567][ T5853] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 76.630093][ T5853] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 76.679532][ T5853] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 76.739435][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.743310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.744986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.749093][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.752315][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.753995][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.755601][ T5042] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.756727][ T5042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.758664][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.762252][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.763727][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.765051][ T5042] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.766149][ T5042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.771629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.775271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.778064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.781267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.783035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.785801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.787578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.792652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.794284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.797021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.798827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.801793][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.916935][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.924798][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.926089][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.154118][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.155759][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.194327][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.196182][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.199977][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.201618][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.204074][ T5853] device veth0_vlan entered promiscuous mode [ 77.207456][ T5853] device veth1_vlan entered promiscuous mode [ 77.224163][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.226055][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.228908][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.230557][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.234339][ T5853] device veth0_macvtap entered promiscuous mode [ 77.236872][ T5853] device veth1_macvtap entered promiscuous mode [ 77.284241][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.285890][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.287489][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.293536][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.295077][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.296735][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.300533][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.302707][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.305754][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.308094][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.310848][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.312542][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.314470][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.316119][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.317884][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.320022][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.321769][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.324190][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.326885][ T5853] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.334082][ T5853] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.335671][ T5853] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.337113][ T5853] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.374963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.376623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.378012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.380902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.382861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.386424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.619058][ T4326] Bluetooth: hci6: command 0x0409 tx timeout [ 77.741537][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 77.792149][ T5927] loop2: detected capacity change from 0 to 1024 [ 77.808514][ T5927] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.808575][ T5924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.811530][ T5924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.832227][ T5927] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.863426][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 77.865832][ T4327] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.867976][ T4327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.869964][ T4327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.871568][ T4327] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.872960][ T4327] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.874192][ T4327] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.202945][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.238702][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.240136][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.242461][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.712914][ T5972] loop6: detected capacity change from 0 to 2048 [ 78.730581][ T5972] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 78.851376][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 78.873473][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.878088][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.883910][ T5934] device bridge_slave_0 entered promiscuous mode [ 78.886561][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.887705][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.890574][ T5934] device bridge_slave_1 entered promiscuous mode [ 78.899487][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.902442][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.911748][ T5934] team0: Port device team_slave_0 added [ 79.433485][ T6004] loop3: detected capacity change from 0 to 512 [ 79.502849][ T6004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.545518][ T6014] netlink: 56 bytes leftover after parsing attributes in process `syz.2.559'. [ 79.551858][ T5853] EXT4-fs (loop6): unmounting filesystem. [ 79.575015][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 79.600551][ T5934] team0: Port device team_slave_1 added [ 79.637385][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.644699][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.658711][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.712393][ T4327] Bluetooth: hci6: command 0x041b tx timeout [ 79.756433][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.758068][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.762281][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.064796][ T4326] Bluetooth: hci4: command 0x0409 tx timeout [ 80.150165][ T5934] device hsr_slave_0 entered promiscuous mode [ 80.169913][ T6039] loop3: detected capacity change from 0 to 2048 [ 80.183385][ T6039] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.189151][ T5934] device hsr_slave_1 entered promiscuous mode [ 80.218553][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.219966][ T5934] Cannot create hsr debugfs directory [ 80.638393][ T5190] device hsr_slave_0 left promiscuous mode [ 80.678750][ T5190] device hsr_slave_1 left promiscuous mode [ 80.702483][ T6047] loop6: detected capacity change from 0 to 512 [ 80.725272][ T6047] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 80.758587][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.759802][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.766300][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.767564][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.769022][ T5190] device bridge_slave_1 left promiscuous mode [ 80.771138][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.774618][ T5853] EXT4-fs (loop6): unmounting filesystem. [ 80.810167][ T5190] device bridge_slave_0 left promiscuous mode [ 80.811400][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.859369][ T6053] netlink: 56 bytes leftover after parsing attributes in process `syz.6.573'. [ 80.909290][ T5190] device veth1_macvtap left promiscuous mode [ 80.912642][ T5190] device veth0_macvtap left promiscuous mode [ 80.915099][ T5190] device veth1_vlan left promiscuous mode [ 80.916196][ T5190] device veth0_vlan left promiscuous mode [ 81.028635][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 81.579971][ T6083] loop3: detected capacity change from 0 to 512 [ 81.590869][ T6083] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 81.636714][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 81.683566][ T6087] netlink: 56 bytes leftover after parsing attributes in process `syz.3.584'. [ 81.749930][ T6089] fuse: Bad value for 'fd' [ 81.788425][ T4326] Bluetooth: hci6: command 0x040f tx timeout [ 81.853176][ T5190] bond1 (unregistering): Released all slaves [ 82.109056][ T4327] Bluetooth: hci4: command 0x041b tx timeout [ 82.677266][ T4327] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.688585][ T4327] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.690386][ T4327] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.691802][ T4327] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.693178][ T4327] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 82.694392][ T4327] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.267769][ T6114] loop3: detected capacity change from 0 to 512 [ 83.289999][ T6114] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.332893][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 83.353717][ T6119] fuse: Bad value for 'fd' [ 83.412070][ T6121] netlink: 56 bytes leftover after parsing attributes in process `syz.3.596'. [ 83.858454][ T4326] Bluetooth: hci6: command 0x0419 tx timeout [ 84.070527][ T5190] team0 (unregistering): Port device team_slave_1 removed [ 84.178342][ T4326] Bluetooth: hci4: command 0x040f tx timeout [ 84.233409][ T5190] team0 (unregistering): Port device team_slave_0 removed [ 84.392715][ T5190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.619209][ T5190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.738330][ T4326] Bluetooth: hci7: command 0x0409 tx timeout [ 86.109678][ T5190] bond0 (unregistering): Released all slaves [ 86.258573][ T4326] Bluetooth: hci4: command 0x0419 tx timeout [ 86.402527][ T6077] netlink: 48 bytes leftover after parsing attributes in process `syz.2.582'. [ 86.466374][ T5934] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 86.519574][ T5934] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 86.533975][ T6151] fuse: Bad value for 'fd' [ 86.564186][ T5934] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 86.602516][ T6158] loop2: detected capacity change from 0 to 512 [ 86.614899][ T6158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.625435][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 86.645113][ T5934] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 86.649820][ T6164] netlink: 56 bytes leftover after parsing attributes in process `syz.3.605'. [ 86.694222][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 86.744899][ T6178] loop6: detected capacity change from 0 to 128 [ 86.818512][ T4327] Bluetooth: hci7: command 0x041b tx timeout [ 86.835175][ T6181] device syzkaller0 entered promiscuous mode [ 86.865147][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.866693][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.064949][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.069611][ T6197] loop6: detected capacity change from 0 to 512 [ 87.105576][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 87.112524][ T6197] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 87.149283][ T6207] netlink: 56 bytes leftover after parsing attributes in process `syz.3.618'. [ 87.176924][ T5853] EXT4-fs (loop6): unmounting filesystem. [ 87.185070][ T6098] chnl_net:caif_netlink_parms(): no params data found [ 87.198807][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.200384][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.250539][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.277938][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.279757][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.281213][ T232] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.282297][ T232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.287349][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.353082][ T6225] loop6: detected capacity change from 0 to 512 [ 87.361091][ T6225] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 87.375409][ T5853] EXT4-fs (loop6): unmounting filesystem. [ 87.390259][ T6098] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.391479][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.398235][ T6098] device bridge_slave_0 entered promiscuous mode [ 87.401545][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.403190][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.404630][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.405703][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.407081][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.414218][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.432971][ T6098] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.438494][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.440277][ T6098] device bridge_slave_1 entered promiscuous mode [ 87.446787][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.449521][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.451026][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.458912][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.462357][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.464034][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.465490][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.466822][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.469585][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.476674][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.487789][ T6098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.506171][ T6098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.535412][ T6098] team0: Port device team_slave_0 added [ 87.550080][ T6098] team0: Port device team_slave_1 added [ 87.658698][ T6098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.659713][ T6098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.664030][ T6098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.676703][ T6098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.678499][ T6098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.682540][ T6098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.701567][ T6237] device syzkaller0 entered promiscuous mode [ 87.814118][ T6098] device hsr_slave_0 entered promiscuous mode [ 87.825745][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.630'. [ 87.838724][ T6098] device hsr_slave_1 entered promiscuous mode [ 87.849415][ T6256] netlink: 56 bytes leftover after parsing attributes in process `syz.6.630'. [ 87.862989][ T6098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.864142][ T6098] Cannot create hsr debugfs directory [ 87.876003][ T6260] loop2: detected capacity change from 0 to 512 [ 87.892068][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.893310][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.932948][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.963834][ T6260] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 88.074261][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 88.112674][ T6284] loop2: detected capacity change from 0 to 2048 [ 88.114162][ T6284] EXT4-fs: quotafile must be on filesystem root [ 88.149987][ T6098] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 88.189688][ T6098] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 88.234492][ T6098] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 88.259779][ T6098] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 88.284709][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.286222][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.409003][ T6306] netlink: 56 bytes leftover after parsing attributes in process `syz.6.641'. [ 88.519969][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.521641][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.525992][ T6098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.536992][ T6305] device syzkaller0 entered promiscuous mode [ 88.539948][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.541420][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.543138][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.544507][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.612587][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.614079][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.617258][ T5934] device veth0_vlan entered promiscuous mode [ 88.620922][ T6098] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.622988][ T5934] device veth1_vlan entered promiscuous mode [ 88.629056][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.630434][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.631986][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.633385][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.634489][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.635807][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.637228][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.643550][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.644677][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.646127][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.647782][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.656933][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.665983][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.686853][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.699840][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.701643][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.703436][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.705090][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.719494][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.721423][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.722982][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.724675][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.726739][ T5934] device veth0_macvtap entered promiscuous mode [ 88.733357][ T6098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.736035][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.743009][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.745069][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.747048][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.753643][ T5934] device veth1_macvtap entered promiscuous mode [ 88.786148][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.790344][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.791925][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.793594][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.795132][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.796738][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.808526][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.810342][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.813408][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.816491][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.819213][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.820931][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.822539][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.824025][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.825706][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.827199][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.829149][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.831613][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.833979][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.836747][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.843474][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.845078][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.846993][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.854963][ T5934] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.856729][ T5934] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.858105][ T5934] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.863072][ T5934] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.898966][ T4327] Bluetooth: hci7: command 0x040f tx timeout [ 88.936068][ T5042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.937406][ T5042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.944039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.952504][ T6098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.960138][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.961525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.972855][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.974188][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.975514][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.090852][ T6366] device bridge1 entered promiscuous mode [ 89.109013][ T6364] netlink: 56 bytes leftover after parsing attributes in process `syz.2.650'. [ 89.169311][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.171286][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.180103][ T6377] device syzkaller0 entered promiscuous mode [ 89.182617][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.184295][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.186806][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.193049][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.195122][ T6098] device veth0_vlan entered promiscuous mode [ 89.243256][ T6098] device veth1_vlan entered promiscuous mode [ 89.248892][ T6379] netlink: 44 bytes leftover after parsing attributes in process `syz.7.655'. [ 89.256309][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.257666][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.272015][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.273644][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.275025][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.276547][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.292580][ T6098] device veth0_macvtap entered promiscuous mode [ 89.305953][ T6098] device veth1_macvtap entered promiscuous mode [ 89.320977][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.322536][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.328947][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.330592][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.332188][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.333933][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.337726][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.339944][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.341514][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.343152][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.345584][ T6098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.348121][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.350499][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.351916][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.359309][ T6388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.361271][ T6388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.366255][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.374529][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.376151][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.377547][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.382849][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.384422][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.386120][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.387654][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.393471][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.394893][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.396533][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.403526][ T6098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.410977][ T6098] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.412507][ T6098] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.421222][ T6098] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.422447][ T6098] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.429302][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.431624][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.627633][ T5042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.629548][ T5042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.646508][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.673998][ T232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.675319][ T232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.684389][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.767492][ T6419] loop8: detected capacity change from 0 to 2048 [ 89.775508][ T6416] device syzkaller0 entered promiscuous mode [ 89.786445][ T6419] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 90.623786][ T6098] EXT4-fs (loop8): unmounting filesystem. [ 90.705132][ T6458] loop8: detected capacity change from 0 to 256 [ 90.753871][ T6462] device syzkaller0 entered promiscuous mode [ 90.978985][ T4327] Bluetooth: hci7: command 0x0419 tx timeout [ 91.013195][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.015897][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.069494][ T6484] loop2: detected capacity change from 0 to 2048 [ 91.084448][ T6484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.753533][ T6497] __nla_validate_parse: 1 callbacks suppressed [ 91.753558][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.692'. [ 91.792646][ T6499] device syzkaller0 entered promiscuous mode [ 91.838484][ T6503] loop8: detected capacity change from 0 to 164 [ 91.896376][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 91.934855][ T6505] loop8: detected capacity change from 0 to 2048 [ 91.940801][ T6505] ext4: Unknown parameter 'euid>00000000000000000000' [ 92.167404][ T6531] loop2: detected capacity change from 0 to 512 [ 92.174750][ T6531] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.189337][ T6531] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.703: bad orphan inode 131083 [ 92.193343][ T6531] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.239522][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 92.252460][ T6534] loop3: detected capacity change from 0 to 2048 [ 92.255894][ T6534] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.273212][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 92.313886][ T6539] device syzkaller0 entered promiscuous mode [ 92.323011][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.325625][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.024600][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.715'. [ 93.026262][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.715'. [ 93.182315][ T6569] loop3: detected capacity change from 0 to 2048 [ 93.204767][ T6569] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.215738][ T6567] device syzkaller0 entered promiscuous mode [ 93.284138][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 93.347553][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.349816][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.658090][ T6602] loop3: detected capacity change from 0 to 2048 [ 93.680585][ T6602] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.706020][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 94.042098][ T6625] netlink: 84 bytes leftover after parsing attributes in process `syz.3.743'. [ 94.178180][ T6628] loop7: detected capacity change from 0 to 2048 [ 94.194400][ T6628] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 94.243384][ T5934] EXT4-fs (loop7): unmounting filesystem. [ 94.369772][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.749'. [ 94.480536][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.484591][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.687715][ T6662] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 94.725314][ T5934] EXT4-fs (loop7): unmounting filesystem. [ 94.968138][ T6688] set_capacity_and_notify: 1 callbacks suppressed [ 94.968148][ T6688] loop2: detected capacity change from 0 to 512 [ 95.001755][ T6688] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.040445][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 95.129549][ T6702] loop2: detected capacity change from 0 to 2048 [ 95.141578][ T6702] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.193264][ T6707] xt_hashlimit: size too large, truncated to 1048576 [ 95.195488][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 95.735831][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.751354][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.835645][ T6746] loop8: detected capacity change from 0 to 2048 [ 95.859980][ T6746] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 95.901738][ T6098] EXT4-fs (loop8): unmounting filesystem. [ 96.464169][ T6778] loop7: detected capacity change from 0 to 2048 [ 96.481604][ T6778] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 96.533065][ T5934] EXT4-fs (loop7): unmounting filesystem. [ 97.116184][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.117745][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.126686][ T6823] loop6: detected capacity change from 0 to 2048 [ 97.142155][ T6823] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 97.194846][ T5853] EXT4-fs (loop6): unmounting filesystem. [ 97.202824][ T6830] loop3: detected capacity change from 0 to 512 [ 97.373008][ T6845] loop8: detected capacity change from 0 to 4096 [ 97.376586][ T6845] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 97.394536][ T6098] EXT4-fs (loop8): unmounting filesystem. [ 97.465610][ T6856] capability: warning: `syz.3.818' uses 32-bit capabilities (legacy support in use) [ 97.605369][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.7.821'. [ 97.743699][ T6868] loop2: detected capacity change from 0 to 256 [ 97.745979][ T6868] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.762726][ T6870] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 97.768927][ T6872] netlink: 440 bytes leftover after parsing attributes in process `syz.7.823'. [ 97.901452][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.7.832'. [ 98.346993][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.351820][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.919232][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.844'. [ 100.344082][ T4632] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested [ 100.346109][ T4632] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2 [ 100.347490][ T4632] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw [ 108.593494][ T6904] netlink: 'syz.8.837': attribute type 21 has an invalid length. [ 108.594713][ T6904] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.616369][ T6926] netlink: 48 bytes leftover after parsing attributes in process `syz.3.846'. [ 108.984052][ T6969] xt_hashlimit: size too large, truncated to 1048576 [ 109.069611][ T6972] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 109.654850][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.656429][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.351870][ T7007] netlink: 48 bytes leftover after parsing attributes in process `syz.3.867'. [ 120.446921][ T7020] netlink: 'syz.2.870': attribute type 3 has an invalid length. [ 120.497367][ T7029] loop6: detected capacity change from 0 to 1024 [ 120.550740][ T7029] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 120.552134][ T7029] System zones: 0-1, 3-36 [ 120.582236][ T7029] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.872: bad orphan inode 134217728 [ 120.582358][ T7029] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 120.646997][ T5853] EXT4-fs (loop6): unmounting filesystem. [ 120.664638][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.878'. [ 121.666800][ T7106] loop7: detected capacity change from 0 to 512 [ 121.683010][ T7106] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 121.687418][ T7106] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #16: comm syz.7.888: invalid indirect mapped block 4294967295 (level 0) [ 121.691357][ T7106] EXT4-fs (loop7): Remounting filesystem read-only [ 121.692478][ T7106] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #16: comm syz.7.888: invalid indirect mapped block 4294967295 (level 1) [ 121.695149][ T7106] EXT4-fs (loop7): Remounting filesystem read-only [ 121.696556][ T7106] EXT4-fs (loop7): 1 orphan inode deleted [ 121.697476][ T7106] EXT4-fs (loop7): 1 truncate cleaned up [ 121.698861][ T7106] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 121.707618][ T7106] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #2: block 13: comm syz.7.888: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 121.712453][ T7106] EXT4-fs (loop7): Remounting filesystem read-only [ 121.726160][ T5934] EXT4-fs (loop7): unmounting filesystem. [ 121.785130][ T7114] loop7: detected capacity change from 0 to 256 [ 121.786881][ T7114] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.796563][ T7114] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.072414][ T7125] xt_hashlimit: size too large, truncated to 1048576 [ 125.948928][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.949920][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.857602][ T7175] loop3: detected capacity change from 0 to 512 [ 131.864611][ T7178] loop7: detected capacity change from 0 to 512 [ 131.865932][ T7178] EXT4-fs: inline encryption not supported [ 131.876460][ T7178] EXT4-fs: Ignoring removed i_version option [ 131.890388][ T7178] EXT4-fs (loop7): 1 orphan inode deleted [ 131.891338][ T7178] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 131.905836][ T7175] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 131.923136][ T7178] EXT4-fs error (device loop7): ext4_add_entry:2486: inode #2: comm syz.7.913: Directory hole found for htree leaf block 0 [ 131.932552][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 132.705246][ T5934] EXT4-fs (loop7): unmounting filesystem. [ 132.808854][ T7240] fuse: Unknown parameter 'grou00000000000000000000' [ 133.864780][ T7267] fuse: Unknown parameter 'grou00000000000000000000' [ 134.248391][ T7279] 9pnet: Could not find request transport: fd0x0000000000000003 [ 143.073546][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.8.946'. [ 143.191349][ T7307] fuse: Unknown parameter 'grou00000000000000000000' [ 143.307770][ T7323] loop3: detected capacity change from 0 to 1024 [ 143.369167][ T7323] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 143.387889][ T7323] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 143.450530][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 143.525804][ T7356] fuse: Unknown parameter 'group_i00000000000000000000' [ 143.597711][ T7363] loop2: detected capacity change from 0 to 512 [ 143.628979][ T7363] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 143.630431][ T7363] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 143.635074][ T7363] System zones: 0-1, 15-15, 18-18, 34-34 [ 143.640689][ T7363] EXT4-fs (loop2): orphan cleanup on readonly fs [ 143.646404][ T7363] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.969: bg 0: block 40: padding at end of block bitmap is not set [ 143.662948][ T7363] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 143.664499][ T7363] EXT4-fs (loop2): 1 truncate cleaned up [ 143.665437][ T7363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.675916][ T7363] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 143.677203][ T7363] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 143.754199][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 148.498531][ T4326] Bluetooth: hci0: command 0x0406 tx timeout [ 148.498541][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 148.508400][ T4326] Bluetooth: hci3: command 0x0406 tx timeout [ 148.509465][ T4326] Bluetooth: hci1: command 0x0406 tx timeout [ 154.453518][ T7374] netlink: 'syz.3.970': attribute type 4 has an invalid length. [ 154.456136][ T7385] netlink: 16 bytes leftover after parsing attributes in process `syz.6.973'. [ 154.523306][ T7401] fuse: Unknown parameter 'group_i00000000000000000000' [ 154.585580][ T7411] loop3: detected capacity change from 0 to 1024 [ 154.587203][ T7411] ext4: Bad value for 'debug_want_extra_isize' [ 154.663317][ T7395] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.712229][ T7426] loop3: detected capacity change from 0 to 512 [ 154.781457][ T7426] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 154.792690][ T7441] fuse: Unknown parameter 'group_i00000000000000000000' [ 154.864758][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 154.919494][ T7453] loop3: detected capacity change from 0 to 512 [ 154.926536][ T7453] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 154.932806][ T7453] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.996: corrupted in-inode xattr [ 154.934852][ T7453] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.996: couldn't read orphan inode 15 (err -117) [ 154.939655][ T7453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 154.954470][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 155.049528][ T7469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.050987][ T7469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.976846][ T7492] fuse: Unknown parameter 'group_id00000000000000000000' [ 161.781930][ T4632] usb 1-1: no suitable firmware found! [ 161.782828][ T4632] usb 1-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 161.784803][ T4634] usb 1-1: ath9k_htc: USB layer deinitialized [ 165.782598][ T7477] tipc: Started in network mode [ 165.783485][ T7477] tipc: Node identity a25d74dc8a2c, cluster identity 4711 [ 165.784721][ T7477] tipc: Enabled bearer , priority 0 [ 165.787291][ T7478] device syzkaller0 entered promiscuous mode [ 165.795590][ T7485] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1005'. [ 165.812719][ T7486] tipc: Resetting bearer [ 165.875189][ T7510] loop7: detected capacity change from 0 to 2048 [ 165.930748][ T7510] EXT4-fs warning (device loop7): read_mmp_block:115: Error -117 while reading MMP block 15 [ 165.950716][ T7522] loop3: detected capacity change from 0 to 512 [ 165.952116][ T7522] EXT4-fs: inline encryption not supported [ 165.953246][ T7522] EXT4-fs: Ignoring removed i_version option [ 165.983436][ T7522] EXT4-fs (loop3): 1 orphan inode deleted [ 165.984672][ T7522] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 166.001388][ T7510] 9pnet_fd: Insufficient options for proto=fd [ 166.006748][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 166.024609][ T7530] fuse: Unknown parameter 'group_id00000000000000000000' [ 166.026806][ T7486] tipc: Resetting bearer [ 166.089167][ T7486] tipc: Disabling bearer [ 166.114885][ T7540] loop3: detected capacity change from 0 to 512 [ 166.117728][ T7540] ext4: Unknown parameter 'seclabel' [ 166.159568][ T7515] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.180804][ T27] audit: type=1326 audit(166.160:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.8.1024" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d771a8 code=0x0 [ 166.204215][ T7546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.208053][ T7546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.365708][ T7556] fuse: Unknown parameter 'group_id00000000000000000000' [ 166.391136][ T7558] loop2: detected capacity change from 0 to 512 [ 166.398404][ T7558] EXT4-fs: inline encryption not supported [ 166.399585][ T7558] EXT4-fs: Ignoring removed i_version option [ 166.405539][ T7558] EXT4-fs (loop2): 1 orphan inode deleted [ 166.406576][ T7558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 166.421731][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 166.707785][ T7512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.004597][ T7580] fuse: Bad value for 'user_id' [ 167.064197][ T7584] loop6: detected capacity change from 0 to 512 [ 167.093893][ T7584] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 167.127538][ T5853] EXT4-fs (loop6): unmounting filesystem. [ 168.130040][ T27] audit: type=1326 audit(168.110:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.6.1052" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1771a8 code=0x0 [ 168.139692][ T7608] fuse: Bad value for 'user_id' [ 168.164529][ T7611] xt_hashlimit: size too large, truncated to 1048576 [ 169.916052][ T7639] fuse: Bad value for 'user_id' [ 170.828105][ T27] audit: type=1326 audit(170.800:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.2.1068" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b771a8 code=0x0 [ 174.280874][ T7658] loop2: detected capacity change from 0 to 512 [ 174.295635][ T7658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 174.297001][ T7658] System zones: 1-20 [ 174.303984][ T7658] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 174.336609][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 174.506097][ T7671] fuse: Bad value for 'fd' [ 174.532984][ T7673] loop2: detected capacity change from 0 to 512 [ 174.542086][ T7673] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1079: bg 0: block 393: padding at end of block bitmap is not set [ 174.544667][ T7673] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 174.546345][ T7673] EXT4-fs (loop2): 2 truncates cleaned up [ 174.547305][ T7673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 174.555954][ T7673] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1450: inode #12: block 7: comm syz.2.1079: path /270/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 174.574222][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 175.472678][ T7682] loop2: detected capacity change from 0 to 512 [ 175.476071][ T7682] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.524159][ T7682] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 175.525939][ T7682] FAT-fs (loop2): Filesystem has been set read-only [ 177.241013][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.249633][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.283124][ T7691] fido_id[7691]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 177.371734][ T7699] loop7: detected capacity change from 0 to 512 [ 177.412784][ T7702] fuse: Bad value for 'fd' [ 178.168778][ T7713] netlink: 'syz.6.1093': attribute type 16 has an invalid length. [ 178.231327][ T7736] fuse: Bad value for 'fd' [ 178.244203][ T7070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.397121][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.403425][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.265159][ T7767] loop3: detected capacity change from 0 to 512 [ 179.274483][ T7767] EXT4-fs (loop3): 1 truncate cleaned up [ 179.275612][ T7767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.309566][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 179.327673][ T7771] fuse: Bad value for 'fd' [ 187.379190][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.380320][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.976166][ T7747] device gtp1 entered promiscuous mode [ 189.053270][ T7070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.132554][ T7793] loop7: detected capacity change from 0 to 512 [ 189.134035][ T7793] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.170948][ T7795] fuse: Bad value for 'fd' [ 189.183482][ T7793] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 189.185134][ T7793] FAT-fs (loop7): Filesystem has been set read-only [ 189.186029][ T7070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.270242][ T7804] loop7: detected capacity change from 0 to 2048 [ 189.271761][ T7804] EXT4-fs: Ignoring removed oldalloc option [ 189.286358][ T7804] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 189.287666][ T7804] System zones: 0-7 [ 189.293355][ T7804] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 189.333615][ T7804] EXT4-fs error (device loop7): ext4_find_extent:936: inode #2: comm syz.7.1128: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 189.352630][ T5934] EXT4-fs (loop7): unmounting filesystem. [ 189.488760][ T7818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.491849][ T7818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.720699][ T7832] fuse: Bad value for 'fd' [ 190.225594][ T7850] usb usb7: usbfs: process 7850 (syz.7.1147) did not claim interface 0 before use [ 190.283112][ T7856] fuse: Invalid rootmode [ 199.698499][ T4327] Bluetooth: hci6: command 0x0406 tx timeout [ 199.999280][ T7070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.035574][ T7889] fuse: Invalid rootmode [ 200.068758][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1160'. [ 200.254022][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1176'. [ 200.293254][ T7917] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1176'. [ 200.296653][ T7070] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.389938][ T7070] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.501234][ T7070] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.520978][ T7946] fuse: Invalid rootmode [ 200.545646][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.554154][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.584144][ T7070] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.605495][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1188'. [ 200.649843][ T7956] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1188'. [ 200.816129][ T7984] loop3: detected capacity change from 0 to 764 [ 200.885391][ T4632] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 200.887643][ T4632] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.958024][ T7997] fido_id[7997]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 201.249280][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1202'. [ 201.249794][ T8005] IPVS: sed: FWM 3 0x00000003 - no destination available [ 201.283451][ T8007] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1202'. [ 201.386652][ T8019] loop2: detected capacity change from 0 to 128 [ 201.436377][ T8019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 201.452857][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 201.475883][ T4631] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 201.477617][ T4631] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 201.511675][ T8025] fido_id[8025]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 201.610307][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.611965][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.105050][ T8039] loop8: detected capacity change from 0 to 128 [ 203.141423][ T4375] kworker/u4:5: attempt to access beyond end of device [ 203.141423][ T4375] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 203.225162][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1217'. [ 203.259006][ T8045] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1217'. [ 203.405529][ T1515] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 203.407883][ T1515] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 203.444220][ T8054] fido_id[8054]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 203.475991][ T8058] loop8: detected capacity change from 0 to 512 [ 203.504484][ T8058] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 203.524261][ T6098] EXT4-fs (loop8): unmounting filesystem. [ 204.818592][ T4326] Bluetooth: hci7: command 0x0406 tx timeout [ 204.828374][ T4326] Bluetooth: hci4: command 0x0406 tx timeout [ 211.524536][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 211.616119][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1228'. [ 211.643352][ T8087] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1228'. [ 211.731312][ T7070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.777962][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 211.809883][ T7070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.894422][ T7070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.900311][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.901789][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.023969][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'. [ 212.059680][ T8137] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1243'. [ 212.121544][ T7070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.228175][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1249'. [ 212.363886][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1256'. [ 212.419638][ T8176] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1256'. [ 212.632701][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1262'. [ 212.765771][ T8205] loop6: detected capacity change from 0 to 8192 [ 212.916335][ T8231] IPVS: sed: FWM 3 0x00000003 - no destination available [ 212.929319][ T8232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.930880][ T8232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.615854][ T8263] loop6: detected capacity change from 0 to 764 [ 213.642028][ T8263] Symlink component flag not implemented [ 213.647918][ T8263] Symlink component flag not implemented (122) [ 213.776882][ T8280] loop3: detected capacity change from 0 to 512 [ 213.853040][ T8284] loop6: detected capacity change from 0 to 2048 [ 213.885691][ T8280] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 213.905581][ T8284] EXT4-fs: Ignoring removed oldalloc option [ 213.944975][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 213.977277][ T8284] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 213.978728][ T8284] System zones: 0-7 [ 213.979720][ T8284] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 214.045188][ T5853] EXT4-fs (loop6): unmounting filesystem. [ 214.145929][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.163336][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.381582][ T8344] loop6: detected capacity change from 0 to 128 [ 214.669385][ T8362] loop8: detected capacity change from 0 to 2048 [ 214.672028][ T8362] EXT4-fs: Ignoring removed oldalloc option [ 214.714723][ T8362] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 214.719004][ T8362] System zones: 0-7 [ 214.720399][ T8362] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 214.747889][ T8371] loop2: detected capacity change from 0 to 512 [ 214.749769][ T8371] EXT4-fs: Ignoring removed i_version option [ 214.753339][ T8371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 214.783263][ T6098] EXT4-fs (loop8): unmounting filesystem. [ 214.830422][ T1515] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 214.833090][ T1515] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.873109][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 214.950221][ T8377] fido_id[8377]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 215.119239][ T8393] loop3: detected capacity change from 0 to 2048 [ 215.162107][ T8393] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 215.194234][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 215.270998][ T8403] loop3: detected capacity change from 0 to 2048 [ 215.272462][ T8403] EXT4-fs: Ignoring removed oldalloc option [ 215.303074][ T8403] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 215.304478][ T8403] System zones: 0-7 [ 215.305668][ T8403] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 215.403349][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 215.503745][ T8431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.505212][ T8431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.642286][ T8444] loop8: detected capacity change from 0 to 512 [ 215.675675][ T8444] EXT4-fs error (device loop8): ext4_iget_extra_inode:4763: inode #15: comm syz.8.1334: corrupted in-inode xattr [ 215.680163][ T8444] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.1334: couldn't read orphan inode 15 (err -117) [ 215.682185][ T8444] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 215.743096][ T6098] EXT4-fs (loop8): unmounting filesystem. [ 215.785219][ T8452] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 215.874271][ T4364] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 215.876174][ T4364] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.899929][ T8459] fido_id[8459]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 215.990121][ T8463] device syzkaller0 entered promiscuous mode [ 216.406138][ T8506] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.1356: iget: bad extra_isize 90 (inode size 256) [ 216.421437][ T8506] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1356: error while reading EA inode 11 err=-117 [ 216.424396][ T8506] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.1356: iget: bad extra_isize 90 (inode size 256) [ 216.482597][ T8515] EXT4-fs: Ignoring removed bh option [ 216.483523][ T8515] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.497813][ T8506] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1356: error while reading EA inode 11 err=-117 [ 216.501348][ T8506] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #18: comm syz.6.1356: iget: bad extra_isize 90 (inode size 256) [ 216.511651][ T8506] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1356: error while reading EA inode 18 err=-117 [ 216.516223][ T8515] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 216.536801][ T8506] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #18: comm syz.6.1356: iget: bad extra_isize 90 (inode size 256) [ 216.539950][ T8515] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 216.541494][ T8515] EXT4-fs (loop8): orphan cleanup on readonly fs [ 216.544971][ T8506] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1356: error while reading EA inode 18 err=-117 [ 216.549322][ T8515] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 4 [ 216.550976][ T8515] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 216.552566][ T8515] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.1357: Failed to acquire dquot type 1 [ 216.558909][ T8515] EXT4-fs (loop8): Remounting filesystem read-only [ 216.564302][ T8515] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:477: comm syz.8.1357: Invalid block bitmap block 0 in block_group 0 [ 216.566623][ T8520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.568145][ T8520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.573480][ T8515] EXT4-fs (loop8): Remounting filesystem read-only [ 216.574636][ T8515] Quota error (device loop8): write_blk: dquota write failed [ 216.575807][ T8515] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 216.577281][ T8515] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.1357: Failed to acquire dquot type 1 [ 216.578492][ T8506] EXT4-fs (loop6): 1 orphan inode deleted [ 216.584603][ T8515] EXT4-fs (loop8): Remounting filesystem read-only [ 216.586979][ T8515] Quota error (device loop8): write_blk: dquota write failed [ 216.594979][ T8506] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 216.617754][ T8515] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 216.630793][ T8515] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.1357: Failed to acquire dquot type 1 [ 216.637957][ T8515] EXT4-fs (loop8): Remounting filesystem read-only [ 216.659449][ T8515] EXT4-fs (loop8): 1 orphan inode deleted [ 216.667271][ T8515] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 216.667804][ T5853] EXT4-fs (loop6): unmounting filesystem. [ 216.684859][ T8515] EXT4-fs error (device loop8): ext4_lookup:1862: inode #2: comm syz.8.1357: deleted inode referenced: 12 [ 216.748844][ T6098] EXT4-fs (loop8): unmounting filesystem. [ 216.791857][ T8541] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 216.793202][ T8541] FAT-fs (loop7): Filesystem has been set read-only [ 216.794434][ T8541] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 52) [ 216.795838][ T8541] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 52) [ 217.076590][ T8571] device syzkaller0 entered promiscuous mode [ 217.279934][ T8597] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 217.294280][ T8597] EXT4-fs (loop3): 1 truncate cleaned up [ 217.295269][ T8597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 217.313491][ T8597] EXT4-fs error (device loop3): __ext4_remount:6650: comm syz.3.1380: Abort forced by user [ 217.315905][ T8597] EXT4-fs (loop3): Remounting filesystem read-only [ 217.317053][ T8597] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 217.347896][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 217.376848][ T8602] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 217.395179][ T8602] EXT4-fs (loop3): 1 truncate cleaned up [ 217.396083][ T8602] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 217.437271][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 217.691506][ T8635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.693059][ T8635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.793032][ T8643] device syzkaller0 entered promiscuous mode [ 218.664004][ T8698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.666139][ T8698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.507564][ T7070] device hsr_slave_0 left promiscuous mode [ 228.563560][ T7070] device hsr_slave_1 left promiscuous mode [ 228.729217][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.731023][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.736275][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.737539][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.792725][ T7070] device bridge_slave_1 left promiscuous mode [ 228.796333][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.878085][ T7070] device bridge_slave_0 left promiscuous mode [ 228.879243][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.931930][ T7070] device hsr_slave_0 left promiscuous mode [ 228.968791][ T7070] device hsr_slave_1 left promiscuous mode [ 229.042589][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.044023][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.045634][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.046744][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.048200][ T7070] device bridge_slave_1 left promiscuous mode [ 229.049374][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.089616][ T7070] device bridge_slave_0 left promiscuous mode [ 229.090726][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.130583][ T7070] device hsr_slave_0 left promiscuous mode [ 229.168412][ T7070] device hsr_slave_1 left promiscuous mode [ 229.248363][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.249704][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.252296][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.253468][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.255014][ T7070] device bridge_slave_1 left promiscuous mode [ 229.255951][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.288865][ T7070] device bridge_slave_0 left promiscuous mode [ 229.289881][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.418455][ T7070] device veth1_macvtap left promiscuous mode [ 229.419576][ T7070] device veth0_macvtap left promiscuous mode [ 229.420585][ T7070] device veth1_vlan left promiscuous mode [ 229.421559][ T7070] device veth0_vlan left promiscuous mode [ 229.501680][ T7070] device veth1_macvtap left promiscuous mode [ 229.502719][ T7070] device veth0_macvtap left promiscuous mode [ 229.503675][ T7070] device veth1_vlan left promiscuous mode [ 229.504541][ T7070] device veth0_vlan left promiscuous mode [ 229.588441][ T7070] device veth1_macvtap left promiscuous mode [ 229.589458][ T7070] device veth0_macvtap left promiscuous mode [ 229.590560][ T7070] device veth1_vlan left promiscuous mode [ 229.591687][ T7070] device veth0_vlan left promiscuous mode [ 229.918199][ T8733] set_capacity_and_notify: 6 callbacks suppressed [ 229.918209][ T8733] loop8: detected capacity change from 0 to 512 [ 229.921447][ T8733] ext4: Unknown parameter 'obj_user' [ 229.946596][ T8702] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.720976][ T7070] team0 (unregistering): Port device team_slave_1 removed [ 231.890447][ T7070] team0 (unregistering): Port device team_slave_0 removed [ 232.058803][ T7070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.258951][ T7070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.278701][ T4326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.280866][ T4326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.282628][ T4326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.284566][ T4326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.286695][ T4326] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 233.287888][ T4326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.720493][ T7070] bond0 (unregistering): Released all slaves [ 234.287227][ T4326] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.289815][ T4326] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.291743][ T4326] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.293192][ T4326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.294519][ T4326] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 234.295849][ T4326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.308911][ T4326] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.311598][ T4326] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.313451][ T4326] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.315370][ T4326] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.317267][ T4326] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 234.319172][ T4326] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.298455][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 236.071150][ T7070] team0 (unregistering): Port device team_slave_1 removed [ 236.229590][ T7070] team0 (unregistering): Port device team_slave_0 removed [ 236.338331][ T4327] Bluetooth: hci5: command 0x0409 tx timeout [ 236.338376][ T4326] Bluetooth: hci2: command 0x0409 tx timeout [ 236.389076][ T7070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.598854][ T7070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.388405][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 238.130320][ T7070] bond0 (unregistering): Released all slaves [ 238.418301][ T4326] Bluetooth: hci2: command 0x041b tx timeout [ 238.428347][ T4326] Bluetooth: hci5: command 0x041b tx timeout [ 239.458369][ T4326] Bluetooth: hci1: command 0x040f tx timeout [ 240.484222][ T7070] team0 (unregistering): Port device team_slave_1 removed [ 240.498656][ T4322] Bluetooth: hci5: command 0x040f tx timeout [ 240.499671][ T4322] Bluetooth: hci2: command 0x040f tx timeout [ 240.678990][ T7070] team0 (unregistering): Port device team_slave_0 removed [ 240.858746][ T7070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.072919][ T7070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.538411][ T4326] Bluetooth: hci1: command 0x0419 tx timeout [ 242.578360][ T4326] Bluetooth: hci2: command 0x0419 tx timeout [ 242.579426][ T4326] Bluetooth: hci5: command 0x0419 tx timeout [ 242.599299][ T7070] bond0 (unregistering): Released all slaves [ 242.972528][ T8701] __nla_validate_parse: 9 callbacks suppressed [ 242.972546][ T8701] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1418'. [ 242.975071][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1420'. [ 242.982250][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'. [ 243.366978][ T8754] chnl_net:caif_netlink_parms(): no params data found [ 243.600457][ T8756] chnl_net:caif_netlink_parms(): no params data found [ 243.606549][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.609603][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.611567][ T8754] device bridge_slave_0 entered promiscuous mode [ 243.620180][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.621391][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.622855][ T8754] device bridge_slave_1 entered promiscuous mode [ 243.641511][ T8754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.647947][ T8747] chnl_net:caif_netlink_parms(): no params data found [ 243.653237][ T8754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.657293][ T8813] device syzkaller0 entered promiscuous mode [ 243.686387][ T8756] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.687814][ T8756] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.698997][ T8756] device bridge_slave_0 entered promiscuous mode [ 243.750610][ T8756] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.751879][ T8756] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.753510][ T8756] device bridge_slave_1 entered promiscuous mode [ 243.760934][ T8754] team0: Port device team_slave_0 added [ 243.764775][ T8754] team0: Port device team_slave_1 added [ 243.784655][ T8756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.786515][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.787745][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.797109][ T8754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.804703][ T8747] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.806226][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.807823][ T8747] device bridge_slave_0 entered promiscuous mode [ 243.815989][ T8756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.818007][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.819381][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.823867][ T8754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.836757][ T8747] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.838050][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.840031][ T8747] device bridge_slave_1 entered promiscuous mode [ 243.887401][ T8756] team0: Port device team_slave_0 added [ 243.897441][ T8756] team0: Port device team_slave_1 added [ 243.904717][ T8747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.922579][ T8747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.969756][ T8754] device hsr_slave_0 entered promiscuous mode [ 244.020451][ T8754] device hsr_slave_1 entered promiscuous mode [ 244.058364][ T8754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.059688][ T8754] Cannot create hsr debugfs directory [ 244.067899][ T8747] team0: Port device team_slave_0 added [ 244.074018][ T8747] team0: Port device team_slave_1 added [ 244.087355][ T8756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.088538][ T8756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.092811][ T8756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.096886][ T8756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.097855][ T8756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.102650][ T8756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.117037][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.118162][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.122569][ T8747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.125493][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.126641][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.131201][ T8747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.196741][ T8756] device hsr_slave_0 entered promiscuous mode [ 244.248796][ T8756] device hsr_slave_1 entered promiscuous mode [ 244.271414][ T8756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.272613][ T8756] Cannot create hsr debugfs directory [ 244.319594][ T8747] device hsr_slave_0 entered promiscuous mode [ 244.354212][ T8747] device hsr_slave_1 entered promiscuous mode [ 244.389081][ T8747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.390336][ T8747] Cannot create hsr debugfs directory [ 244.563296][ T8865] device syzkaller0 entered promiscuous mode [ 245.008563][ T8898] device syzkaller0 entered promiscuous mode [ 245.598204][ T8943] loop8: detected capacity change from 0 to 128 [ 245.612532][ T8943] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 245.648533][ T8943] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 245.672679][ T8932] device syzkaller0 entered promiscuous mode [ 245.696330][ T267] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 246.151602][ T7070] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.320870][ T7070] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.419881][ T7070] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.533188][ T7070] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.575189][ T8747] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 246.611534][ T8747] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 246.679680][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1478'. [ 246.686698][ T8985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.688558][ T8747] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 246.719833][ T8747] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 246.769837][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1478'. [ 246.771391][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1478'. [ 246.786396][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.790801][ T8986] bond1: (slave bond0): making interface the new active one [ 246.794042][ T8986] bond1: (slave bond0): Enslaving as an active interface with an up link [ 246.795448][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 246.874059][ T8754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 246.920165][ T8754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.977552][ T8747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.983589][ T8754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.016954][ T8993] device syzkaller0 entered promiscuous mode [ 247.030891][ T8747] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.034519][ T8754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.080319][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.081958][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.083266][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.084827][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.086226][ T267] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.087356][ T267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.088893][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.140324][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.141976][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.143675][ T267] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.144803][ T267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.165816][ T8756] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.201072][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.251154][ T9004] xt_hashlimit: size too large, truncated to 1048576 [ 247.313610][ T8756] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.359959][ T8756] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.405858][ T8747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.407607][ T8747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.461805][ T9012] loop8: detected capacity change from 0 to 512 [ 247.486986][ T9012] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 247.501659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.503548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.505508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.507105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.533178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.536338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.546759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.559051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.562141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.574234][ T8756] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.593269][ T6098] EXT4-fs (loop8): unmounting filesystem. [ 247.665664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.667426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.707598][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.709353][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.793671][ T8747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.936272][ T8754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.954753][ T8756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.974964][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.976576][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.986330][ T8754] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.994575][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.996213][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.051669][ T8756] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.054353][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.056028][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.057655][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.058753][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.110579][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.112122][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.113693][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.115218][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.116399][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.190728][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.192308][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.193896][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.195380][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.196531][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.245962][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.247693][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.250701][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.255355][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.260235][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.263059][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.267015][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.271987][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.274667][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.279563][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.282205][ T267] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.283382][ T267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.351371][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.353085][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.354565][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.357807][ T8754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.360478][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.363917][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.366577][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.376658][ T8747] device veth0_vlan entered promiscuous mode [ 248.383856][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.385748][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.387364][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.390878][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.395747][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.403876][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.457110][ T8756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.465908][ T8756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.471815][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.474082][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.475659][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.477859][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.483307][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.487052][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.495473][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.499537][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.506910][ T8747] device veth1_vlan entered promiscuous mode [ 248.709598][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.711208][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.712485][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.713892][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.725695][ T9078] device syzkaller0 entered promiscuous mode [ 248.731094][ T8747] device veth0_macvtap entered promiscuous mode [ 248.733586][ T8747] device veth1_macvtap entered promiscuous mode [ 248.739503][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.741168][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.742713][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.811795][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.818157][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.819904][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.820915][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.821018][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.121211][ T8754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.132705][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.134069][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.148892][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.150463][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.152011][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.154675][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.156392][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.159157][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.172160][ T8747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.227023][ T7070] device hsr_slave_0 left promiscuous mode [ 249.281122][ T7070] device hsr_slave_1 left promiscuous mode [ 249.349150][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.350456][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.365634][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.366960][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.372804][ T7070] device bridge_slave_1 left promiscuous mode [ 249.373888][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.412407][ T7070] device bridge_slave_0 left promiscuous mode [ 249.413500][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.531752][ T7070] device veth1_macvtap left promiscuous mode [ 249.532863][ T7070] device veth0_macvtap left promiscuous mode [ 249.533849][ T7070] device veth1_vlan left promiscuous mode [ 249.534809][ T7070] device veth0_vlan left promiscuous mode [ 251.651800][ T7070] team0 (unregistering): Port device team_slave_1 removed [ 251.840259][ T7070] team0 (unregistering): Port device team_slave_0 removed [ 251.999200][ T7070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.198866][ T7070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.790496][ T7070] bond0 (unregistering): Released all slaves [ 254.121581][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.123401][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.126506][ T8756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.154144][ T9145] device syzkaller0 entered promiscuous mode [ 254.156814][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.159441][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.161011][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.162653][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.172083][ T8747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.246602][ T8754] device veth0_vlan entered promiscuous mode [ 254.253184][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.254882][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.256335][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.257811][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 254.267872][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.273279][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.277040][ T8747] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.279806][ T8747] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.281235][ T8747] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.282751][ T8747] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.317204][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.318873][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.324105][ T8754] device veth1_vlan entered promiscuous mode [ 254.398591][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 254.400132][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 254.402046][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 254.403546][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 254.452214][ T267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.453524][ T267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.454797][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.457762][ T8754] device veth0_macvtap entered promiscuous mode [ 254.474742][ T8754] device veth1_macvtap entered promiscuous mode [ 254.492921][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.498864][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.500439][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.502068][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.503568][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.505166][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.531656][ T8754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.539559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.541262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.542645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.544114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.579400][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.581299][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.588511][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.590191][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.596206][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.597939][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.601062][ T8754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.609271][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.611120][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.621112][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.622375][ T8754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.622457][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.623733][ T8754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.626034][ T8754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.627312][ T8754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.661343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.711785][ T9198] loop9: detected capacity change from 0 to 512 [ 254.732956][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.734681][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 254.754308][ T9198] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 254.755693][ T9198] System zones: 0-2, 18-18, 34-34 [ 254.794166][ T9205] device syzkaller0 entered promiscuous mode [ 254.797500][ T9198] EXT4-fs (loop9): 1 orphan inode deleted [ 254.800940][ T9198] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 254.824024][ T7723] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 254.827999][ T7723] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 1 [ 254.843634][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.844032][ T8756] device veth0_vlan entered promiscuous mode [ 254.844818][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.846551][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.853651][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.855343][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.856756][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.858068][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.865629][ T7723] EXT4-fs (loop9): Remounting filesystem read-only [ 254.867854][ T9198] EXT4-fs (loop9): unmounting filesystem. [ 254.956198][ T8756] device veth1_vlan entered promiscuous mode [ 254.960609][ T267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.961930][ T267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.963182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 254.964737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.019590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 255.021080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.022585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.025022][ T8756] device veth0_macvtap entered promiscuous mode [ 255.027535][ T8756] device veth1_macvtap entered promiscuous mode [ 255.046621][ T8756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.051420][ T8756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.052938][ T8756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.054729][ T8756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.056469][ T8756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.082439][ T8756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.084347][ T8756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.102034][ T8756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.111360][ T8756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.115199][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.116917][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.122590][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.124352][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.132199][ T8756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.133939][ T8756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.135519][ T8756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.137102][ T8756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.148580][ T8756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.150339][ T8756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.151923][ T8756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.153565][ T8756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.183456][ T8756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.191976][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.193618][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.197445][ T8756] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.208367][ T8756] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.209798][ T8756] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.211109][ T8756] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.304751][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.306077][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.307486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.348947][ T7070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.350229][ T7070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.351893][ T9237] device syzkaller0 entered promiscuous mode [ 255.353883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.523233][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1531'. [ 255.524610][ T9263] bond1: option mode: unable to set because the bond device has slaves [ 255.733951][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1541'. [ 255.847993][ T9303] device syzkaller0 entered promiscuous mode [ 255.964447][ T9312] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 255.981917][ T9312] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 256.008907][ T9312] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 256.011963][ T9312] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 256.022577][ T9312] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 256.025600][ T9312] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 256.028570][ T9312] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 256.035033][ T9310] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 256.039202][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1548'. [ 256.199339][ T9339] xt_hashlimit: size too large, truncated to 1048576 [ 256.395320][ T9356] device syzkaller0 entered promiscuous mode [ 256.787673][ T9395] netlink: 75 bytes leftover after parsing attributes in process `syz.9.1567'. [ 257.007800][ T9414] device syzkaller0 entered promiscuous mode [ 257.375649][ T9445] xt_hashlimit: size too large, truncated to 1048576 [ 257.608056][ T9464] device syzkaller0 entered promiscuous mode [ 258.017767][ T27] audit: type=1326 audit(257.990:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9496 comm="syz.0.1596" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df771a8 code=0x0 [ 258.193216][ T9513] device syzkaller0 entered promiscuous mode [ 258.869497][ T9548] xt_hashlimit: size too large, truncated to 1048576 [ 259.040169][ T9562] tmpfs: Bad value for 'mpol' [ 259.122823][ T9569] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 259.122957][ T9567] device syzkaller0 entered promiscuous mode [ 259.414446][ T27] audit: type=1326 audit(259.380:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.0.1617" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df771a8 code=0x0 [ 259.894440][ T9621] device syzkaller0 entered promiscuous mode [ 259.997173][ T9624] loop8: detected capacity change from 0 to 4096 [ 260.023886][ T9624] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 260.035913][ T6098] EXT4-fs (loop8): unmounting filesystem. [ 260.474501][ T9664] device syzkaller0 entered promiscuous mode [ 260.671745][ T9677] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1640'. [ 260.746031][ T9683] openvswitch: netlink: Key type 9321 is out of range max 32 [ 260.757712][ T27] audit: type=1326 audit(260.730:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.8.1643" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d771a8 code=0x0 [ 260.904789][ T9701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1647'. [ 261.165050][ T9717] device syzkaller0 entered promiscuous mode [ 261.715998][ T9766] device syzkaller0 entered promiscuous mode [ 262.083632][ T27] audit: type=1326 audit(262.060:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.0.1672" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df771a8 code=0x0 [ 262.287396][ T9827] device syzkaller0 entered promiscuous mode [ 262.910205][ T9885] device syzkaller0 entered promiscuous mode [ 263.301957][ T27] audit: type=1326 audit(263.280:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9931 comm="syz.9.1700" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff991771a8 code=0x0 [ 263.363062][ T9937] loop8: detected capacity change from 0 to 1024 [ 263.379499][ T9937] EXT4-fs: Ignoring removed bh option [ 263.433572][ T9937] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 263.524438][ T6098] EXT4-fs (loop8): unmounting filesystem. [ 263.573882][ T9961] device syzkaller0 entered promiscuous mode [ 263.817700][ T9989] loop3: detected capacity change from 0 to 512 [ 263.840316][ T9989] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1716: inode has both inline data and extents flags [ 263.842996][ T9989] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1716: couldn't read orphan inode 15 (err -117) [ 263.846505][ T9989] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 263.927764][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 264.112324][ T27] audit: type=1326 audit(264.090:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.0.1726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df771a8 code=0x7ffc0000 [ 264.116175][ T27] audit: type=1326 audit(264.090:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.0.1726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df771a8 code=0x7ffc0000 [ 264.125602][ T27] audit: type=1326 audit(264.100:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.0.1726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8df771a8 code=0x7ffc0000 [ 264.133434][ T27] audit: type=1326 audit(264.100:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.0.1726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df771a8 code=0x7ffc0000 [ 264.142317][ T27] audit: type=1326 audit(264.100:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.0.1726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df771a8 code=0x7ffc0000 [ 264.142358][ T27] audit: type=1326 audit(264.100:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.0.1726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff8df771a8 code=0x7ffc0000 [ 264.142388][ T27] audit: type=1326 audit(264.100:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.0.1726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df771a8 code=0x7ffc0000 [ 264.212867][T10030] device syzkaller0 entered promiscuous mode [ 264.297893][T10040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1730'. [ 264.801958][T10084] loop9: detected capacity change from 0 to 512 [ 264.839480][T10084] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 264.843182][T10084] EXT4-fs (loop9): 1 truncate cleaned up [ 264.844236][T10084] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 264.928946][T10090] device syzkaller0 entered promiscuous mode [ 265.028926][T10084] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 265.152392][ T8747] EXT4-fs (loop9): unmounting filesystem. [ 265.155132][T10106] loop8: detected capacity change from 0 to 2048 [ 265.185557][T10106] loop8: p3 < > p4 < > [ 265.186316][T10106] loop8: partition table partially beyond EOD, truncated [ 265.187726][T10106] loop8: p3 start 4284289 is beyond EOD, truncated [ 265.274585][T10115] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1746'. [ 265.279992][T10115] netlink: 39 bytes leftover after parsing attributes in process `syz.8.1746'. [ 265.299047][ T9158] udevd[9158]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 265.435135][T10133] loop9: detected capacity change from 0 to 512 [ 265.553236][T10137] device syzkaller0 entered promiscuous mode [ 265.626090][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1755'. [ 266.325401][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 266.325413][ T27] audit: type=1326 audit(266.300:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.4.1764" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17771a8 code=0x0 [ 266.369894][T10195] capability: warning: `syz.0.1766' uses deprecated v2 capabilities in a way that may be insecure [ 266.472573][T10201] device syzkaller0 entered promiscuous mode [ 267.484984][ T27] audit: type=1326 audit(267.460:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.3.1789" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d771a8 code=0x0 [ 267.490072][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1788'. [ 267.668074][T10295] Cannot find add_set index 0 as target [ 267.726229][T10299] device bridge1 entered promiscuous mode [ 267.766997][ T27] audit: type=1326 audit(267.740:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.0.1799" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df771a8 code=0x0 [ 268.129760][T10328] loop9: detected capacity change from 0 to 8192 [ 268.308072][T10346] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1805'. [ 268.320016][T10346] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1805'. [ 268.696237][T10373] device vlan2 entered promiscuous mode [ 268.697199][T10373] device geneve1 entered promiscuous mode [ 268.740061][ T27] audit: type=1326 audit(268.720:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10383 comm="syz.0.1817" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df771a8 code=0x0 [ 268.842493][ T7723] Bluetooth: hci3: Frame reassembly failed (-84) [ 269.335185][T10395] loop8: detected capacity change from 0 to 256 [ 269.347754][T10395] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.361337][T10409] fuse: Bad value for 'fd' [ 269.422564][T10413] loop8: detected capacity change from 0 to 2048 [ 269.439966][T10413] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 269.454973][ T7070] [ 269.455379][ T7070] ====================================================== [ 269.456568][ T7070] WARNING: possible circular locking dependency detected [ 269.457721][ T7070] syzkaller #0 Not tainted [ 269.458428][ T7070] ------------------------------------------------------ [ 269.459540][ T7070] kworker/u4:12/7070 is trying to acquire lock: [ 269.460636][ T7070] ffff000109d1e518 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x30/0x114 [ 269.462402][ T7070] [ 269.462402][ T7070] but task is already holding lock: [ 269.463632][ T7070] ffff0000def34c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1b8/0x28b4 [ 269.465265][ T7070] [ 269.465265][ T7070] which lock already depends on the new lock. [ 269.465265][ T7070] [ 269.466810][ T7070] [ 269.466810][ T7070] the existing dependency chain (in reverse order) is: [ 269.468392][ T7070] [ 269.468392][ T7070] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 269.469786][ T7070] percpu_down_read+0x70/0x2a8 [ 269.470626][ T7070] ext4_writepages+0x1b8/0x28b4 [ 269.471504][ T7070] do_writepages+0x2b0/0x504 [ 269.472373][ T7070] __writeback_single_inode+0x164/0x1554 [ 269.473376][ T7070] writeback_single_inode+0x1cc/0x740 [ 269.474363][ T7070] write_inode_now+0x150/0x1cc [ 269.475201][ T7070] iput+0x5bc/0x7e4 [ 269.475910][ T7070] ext4_xattr_block_set+0x1454/0x2880 [ 269.476843][ T7070] ext4_expand_extra_isize_ea+0xe5c/0x17ac [ 269.477859][ T7070] __ext4_expand_extra_isize+0x298/0x358 [ 269.478849][ T7070] __ext4_mark_inode_dirty+0x3e4/0x784 [ 269.479745][ T7070] ext4_evict_inode+0xb64/0x1278 [ 269.480636][ T7070] evict+0x3e0/0x828 [ 269.481376][ T7070] iput+0x754/0x7e4 [ 269.482058][ T7070] ext4_process_orphan+0x240/0x2b4 [ 269.482918][ T7070] ext4_orphan_cleanup+0x920/0x1060 [ 269.483912][ T7070] ext4_fill_super+0x594c/0x61b0 [ 269.484883][ T7070] get_tree_bdev+0x358/0x544 [ 269.485664][ T7070] ext4_get_tree+0x28/0x38 [ 269.486494][ T7070] vfs_get_tree+0x90/0x274 [ 269.487328][ T7070] do_new_mount+0x228/0x810 [ 269.488125][ T7070] path_mount+0x5bc/0xe80 [ 269.488850][ T7070] __arm64_sys_mount+0x49c/0x59c [ 269.489753][ T7070] invoke_syscall+0x98/0x2b4 [ 269.490605][ T7070] el0_svc_common+0x138/0x258 [ 269.491504][ T7070] do_el0_svc+0x58/0x130 [ 269.492303][ T7070] el0_svc+0x58/0x128 [ 269.493023][ T7070] el0t_64_sync_handler+0x84/0xf0 [ 269.493881][ T7070] el0t_64_sync+0x18c/0x190 [ 269.494716][ T7070] [ 269.494716][ T7070] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 269.495943][ T7070] __lock_acquire+0x2880/0x6800 [ 269.496845][ T7070] lock_acquire+0x20c/0x63c [ 269.497677][ T7070] down_write+0x5c/0x88 [ 269.498400][ T7070] ext4_destroy_inline_data+0x30/0x114 [ 269.499353][ T7070] ext4_writepages+0x430/0x28b4 [ 269.500209][ T7070] do_writepages+0x2b0/0x504 [ 269.500989][ T7070] __writeback_single_inode+0x164/0x1554 [ 269.501930][ T7070] writeback_sb_inodes+0x858/0x143c [ 269.502822][ T7070] wb_writeback+0x414/0xfcc [ 269.503652][ T7070] wb_workfn+0x360/0xe18 [ 269.504412][ T7070] process_one_work+0x7f8/0x13a4 [ 269.505330][ T7070] worker_thread+0x8c4/0xfec [ 269.506160][ T7070] kthread+0x250/0x2d8 [ 269.506888][ T7070] ret_from_fork+0x10/0x20 [ 269.507760][ T7070] [ 269.507760][ T7070] other info that might help us debug this: [ 269.507760][ T7070] [ 269.509491][ T7070] Possible unsafe locking scenario: [ 269.509491][ T7070] [ 269.510738][ T7070] CPU0 CPU1 [ 269.511614][ T7070] ---- ---- [ 269.512455][ T7070] lock(&sbi->s_writepages_rwsem); [ 269.513315][ T7070] lock(&ei->xattr_sem); [ 269.514415][ T7070] lock(&sbi->s_writepages_rwsem); [ 269.515585][ T7070] lock(&ei->xattr_sem); [ 269.516281][ T7070] [ 269.516281][ T7070] *** DEADLOCK *** [ 269.516281][ T7070] [ 269.517681][ T7070] 3 locks held by kworker/u4:12/7070: [ 269.518617][ T7070] #0: ffff0000c2c10938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4 [ 269.520433][ T7070] #1: ffff8000212e7c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4 [ 269.522419][ T7070] #2: ffff0000def34c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1b8/0x28b4 [ 269.524284][ T7070] [ 269.524284][ T7070] stack backtrace: [ 269.525244][ T7070] CPU: 0 PID: 7070 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 269.526521][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 269.528148][ T7070] Workqueue: writeback wb_workfn (flush-7:8) [ 269.529209][ T7070] Call trace: [ 269.529728][ T7070] dump_backtrace+0x1c0/0x1ec [ 269.530489][ T7070] show_stack+0x2c/0x3c [ 269.531187][ T7070] __dump_stack+0x30/0x40 [ 269.531924][ T7070] dump_stack_lvl+0xf4/0x15c [ 269.532693][ T7070] dump_stack+0x1c/0x5c [ 269.533430][ T7070] print_circular_bug+0x148/0x1b0 [ 269.534237][ T7070] check_noncircular+0x264/0x2f8 [ 269.535040][ T7070] __lock_acquire+0x2880/0x6800 [ 269.535899][ T7070] lock_acquire+0x20c/0x63c [ 269.536651][ T7070] down_write+0x5c/0x88 [ 269.537360][ T7070] ext4_destroy_inline_data+0x30/0x114 [ 269.538260][ T7070] ext4_writepages+0x430/0x28b4 [ 269.539052][ T7070] do_writepages+0x2b0/0x504 [ 269.539817][ T7070] __writeback_single_inode+0x164/0x1554 [ 269.540704][ T7070] writeback_sb_inodes+0x858/0x143c [ 269.541469][ T7070] wb_writeback+0x414/0xfcc [ 269.542166][ T7070] wb_workfn+0x360/0xe18 [ 269.542866][ T7070] process_one_work+0x7f8/0x13a4 [ 269.543677][ T7070] worker_thread+0x8c4/0xfec [ 269.544395][ T7070] kthread+0x250/0x2d8 [ 269.545071][ T7070] ret_from_fork+0x10/0x20 [ 269.550349][ T7070] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 269.553041][ T7070] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 269.555175][ T7070] EXT4-fs (loop8): This should not happen!! Data will be lost [ 269.555175][ T7070] [ 269.556911][ T7070] EXT4-fs (loop8): Total free blocks count 0 [ 269.558085][ T7070] EXT4-fs (loop8): Free/Dirty block details [ 269.560405][ T7070] EXT4-fs (loop8): free_blocks=66060288 [ 269.561332][ T7070] EXT4-fs (loop8): dirty_blocks=32 [ 269.562228][ T7070] EXT4-fs (loop8): Block reservation details [ 269.563208][ T7070] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 269.565288][ T6098] EXT4-fs (loop8): unmounting filesystem. [ 270.898336][ T4326] Bluetooth: hci3: command 0x1003 tx timeout [ 270.899451][ T4322] Bluetooth: hci3: Opcode 0x1003 failed: -110