last executing test programs: 26m13.011299298s ago: executing program 2 (id=559): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240), 0x0, 0x4004, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000240)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000380)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000440)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000480)={0x0, 0xfffffffe, 0x0, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x40, 0x0, 0x30b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x4, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x373, 0x0, r9}}], 0x1, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 26m12.770544842s ago: executing program 2 (id=561): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00'}) io_setup(0x8, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 26m12.408332289s ago: executing program 2 (id=566): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000180)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3ff800, 0x3a, '\\', 0x3a, '])(*', 0x3a, './file0'}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a40)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x6) munlock(&(0x7f0000629000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r3, 0x1, 0x12, 0x0, &(0x7f0000000340)=0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/sda\x00', 0x42, 0x0) ioctl$BLKROSET(r4, 0x2284, 0x0) 26m8.409082048s ago: executing program 2 (id=577): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='utf8,sbsector=0x000000007fffffff,map=normal,check=strict,cruft,norock,session=0x000000000000002c,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,map=off,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c2cd4362430010845e1b9ec7176abd28b48bec636a87350b332c49a0841157d2d46675e9057189078afc98a81ec76778f8cc2db0478c1bb137d2727841d312faaf95dbeb068f1704de54e3235836018016effbff0e32366d751d23d0f0232dc962c5ab672049862ddd8a0721fa2c59e695f7dddf2f9c63a45f2c0591fc8223990da9c21172bb96989ee816bb90dd87ef66b2e94980991698e45197f30d11c078a95fe683fa3171b0b8e516745"], 0x1, 0x9d7, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003d40)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}}, 0x4044) write$P9_RMKNOD(r0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x2000c12, &(0x7f0000000ec0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRES32=r2, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f075ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa4c, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, 0x0, 0x40080, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000001ac0)='./sys\x00', 0x1ff) setns(0xc9, 0x0) mount(0x0, &(0x7f0000001b00)='./proc\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001b40)='./proc\x00', 0x410402, 0x0) read$FUSE(r3, &(0x7f0000001b80)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000003bc0)='./file0\x00', 0x1, 0x0) socket$inet6(0xa, 0x1, 0x5) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000003c00), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000003c40)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x50, 0x50, 0x46, 0x4f, 0x4f]}, 0x3a) 26m6.207194033s ago: executing program 2 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000180)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3ff800, 0x3a, '\\', 0x3a, '])(*', 0x3a, './file0'}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000a40)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000b00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x6) munlock(&(0x7f0000629000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r2, 0x1, 0x12, 0x0, &(0x7f0000000340)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/sda\x00', 0x42, 0x0) 26m4.444092073s ago: executing program 2 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, 0x0, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 26m2.726422159s ago: executing program 32 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, 0x0, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 9m55.901315713s ago: executing program 4 (id=2210): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="61000000000000001800128008000100687372000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) close(r2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x10, 0xfffffffffffffffd}) socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0d0027bd7000fddbdf2530000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) 9m54.550504031s ago: executing program 4 (id=2215): r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsmount(r0, 0x0, 0x70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r4, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001180)=@newtfilter={0x494, 0x2c, 0x0, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0x1, 0xb}, {0x10, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x20, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x1}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xa}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x424, 0x2, [@TCA_FLOW_POLICE={0x420, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0x2, 0x9, 0xffff, 0xfff, 0x1000, 0x1, 0x5, 0x9, 0x3ff, 0xfffffffe, 0x8001, 0x21a, 0x7, 0x2, 0x6, 0xb938, 0x401, 0xa, 0x9, 0xffff, 0xffffffff, 0x40, 0x8, 0xd, 0x3, 0x5, 0x0, 0x4, 0xe, 0x5922070c, 0x8, 0x10001, 0x4, 0xb, 0x5, 0x8001, 0x4, 0x4, 0x7, 0x2, 0x4, 0xb, 0xff, 0x3, 0x3, 0x2, 0x1, 0x617, 0x0, 0x0, 0xf356, 0xfff, 0x40, 0x0, 0x0, 0x80000000, 0xffff, 0x7, 0x1ff, 0x6, 0x5, 0x9e, 0x4, 0xfffffffa, 0x8, 0x40, 0x400, 0xffffff14, 0xb, 0xebe, 0x0, 0x6f, 0x3, 0x7, 0xffff, 0x0, 0xfffffffe, 0x1, 0x5, 0x1000, 0x3, 0x5c79, 0x1000, 0xfff, 0xe5, 0x20e0, 0x4274, 0x2, 0x5, 0x4, 0x1, 0x20, 0x2, 0x8, 0x5, 0x5, 0x5, 0x5, 0xc3, 0x3, 0x4, 0x8, 0x3ff, 0x68, 0xfffffffc, 0x3, 0xca, 0x8001, 0x73f1, 0x5, 0x800, 0x70, 0x400, 0x101, 0x6fc, 0x8000, 0xe8f, 0xe69, 0x1, 0x8d3, 0x426, 0x0, 0x2, 0xffffffff, 0x1, 0x7f, 0x1, 0x1, 0x75, 0x1, 0x5, 0x7fff, 0x4c76, 0x8000, 0x8, 0x8, 0x8000, 0x9, 0x4, 0xfffffffa, 0x7, 0x0, 0x2, 0xc, 0x4, 0xffff, 0x0, 0x3, 0x1, 0xfd, 0xd, 0x7, 0xe, 0x8, 0xffffffff, 0x8, 0x1, 0x0, 0x6, 0xc4, 0x5, 0x3, 0xfffffffb, 0x7, 0x7, 0x5, 0x3, 0x3ff, 0x0, 0x0, 0x7, 0x80000000, 0xda7, 0x7fff, 0x2, 0x5, 0xcf, 0xd, 0x0, 0x0, 0x5988, 0x9, 0x946a, 0x7fffffff, 0x1eff, 0x7, 0xa, 0xfffffeff, 0x8, 0xd, 0x24, 0xd, 0x3, 0x9, 0x4, 0x4, 0x9, 0x0, 0x1, 0x9, 0x9, 0x2, 0xff, 0x8, 0x5f6, 0x3, 0x7, 0x2, 0x3, 0x1, 0x4, 0x1e, 0xccd7, 0xe2, 0x5, 0x7, 0x6, 0x9, 0x6, 0x8, 0xffffff9a, 0xb0f2, 0x6, 0x7, 0x64d, 0xfffffffd, 0x9, 0x2, 0x97, 0x1, 0x46, 0x401, 0xfffffffa, 0x7084, 0xfffffffc, 0x7, 0x3ff, 0x6, 0x3, 0xe44, 0x1, 0x3ff, 0x2, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x1, 0x4, 0x7, 0x2, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xc8}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x494}, 0x1, 0x0, 0x0, 0x20000092}, 0x80800) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x804) r6 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) pwrite64(r6, &(0x7f0000000480)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6eeaeec2d13731c56a864fa45a465e645e6855c66e7190ed911b5d36f3db423da49146adf5742e2d98e81963fdb3911c91d94a7327708bacf3aeb1d10471980e3132947b42b079a9a09a3c48e452ca2446aa1569b8e1e028e6ebbcdd573302a47511455505e04f75899cb3edd2fd2073319dc1a43074fe7d24e00", 0x98, 0xef8d) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket(0x10, 0x803, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) lseek(0xffffffffffffffff, 0x7, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r8) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendto$packet(r7, 0x0, 0x0, 0x20000085, &(0x7f0000000400)={0x11, 0x18, r9, 0x1, 0x0, 0x6, @local}, 0x14) io_submit(r1, 0x0, &(0x7f0000003b80)) 9m52.307650681s ago: executing program 4 (id=2221): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000140)=""/102392, 0x18ff8) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) clock_settime(0x6, 0x0) pipe2$watch_queue(&(0x7f00000191c0)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000192c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000019300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000019340)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000019380)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xf, @local, 0x6}, r6}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000019400)={0x7, 0x8, 0xfa00, {r6, 0x7}}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 9m50.777816207s ago: executing program 4 (id=2223): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_procfs(0x0, 0x0) openat2(r2, 0x0, &(0x7f0000000480)={0x4400, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000bc0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d2}}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f0000000c80)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(0x0, 0x24842, 0x1a6) prlimit64(0x0, 0xe, &(0x7f0000001900)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001940)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001980)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001a80), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001ac0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b00)=0x6) syz_mount_image$vfat(&(0x7f0000001b40), &(0x7f0000001b80)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000001bc0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=@newlink={0x20, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff}, 0x20}}, 0x40c0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setns(r1, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) mount$cgroup(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x2008000, 0x0) 9m45.610989796s ago: executing program 4 (id=2231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000004c0)="05", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000045) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000005c0)={'veth0_to_team\x00', &(0x7f0000000600)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) bind$inet6(r1, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r10, 0x84, 0x4, &(0x7f00000000c0)=0x6, 0x4) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r11], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r12, {}, {0x4, 0x8}, {0x0, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x8000) 9m41.234939084s ago: executing program 4 (id=2239): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) write$UHID_INPUT(r1, &(0x7f00000018c0)={0xe, {"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", 0x942}}, 0x1006) 9m40.226240497s ago: executing program 33 (id=2239): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) write$UHID_INPUT(r1, &(0x7f00000018c0)={0xe, {"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", 0x942}}, 0x1006) 13.972936889s ago: executing program 5 (id=3497): r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsmount(r0, 0x0, 0x70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001180)=@newtfilter={0x494, 0x2c, 0x0, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0x1, 0xb}, {0x10, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x20, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x1}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xa}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x424, 0x2, [@TCA_FLOW_POLICE={0x420, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0x2, 0x9, 0xffff, 0xfff, 0x1000, 0x1, 0x5, 0x9, 0x3ff, 0xfffffffe, 0x8001, 0x21a, 0x7, 0x2, 0x6, 0xb938, 0x401, 0xa, 0x9, 0xffff, 0xffffffff, 0x40, 0x8, 0xd, 0x3, 0x5, 0x0, 0x4, 0xe, 0x5922070c, 0x8, 0x10001, 0x4, 0xb, 0x5, 0x8001, 0x4, 0x4, 0x7, 0x2, 0x4, 0xb, 0xff, 0x3, 0x3, 0x2, 0x1, 0x617, 0x0, 0x0, 0xf356, 0xfff, 0x40, 0x0, 0x0, 0x80000000, 0xffff, 0x7, 0x1ff, 0x6, 0x5, 0x9e, 0x4, 0xfffffffa, 0x8, 0x40, 0x400, 0xffffff14, 0xb, 0xebe, 0x0, 0x6f, 0x3, 0x7, 0xffff, 0x0, 0xfffffffe, 0x1, 0x5, 0x1000, 0x3, 0x5c79, 0x1000, 0xfff, 0xe5, 0x20e0, 0x4274, 0x2, 0x5, 0x4, 0x1, 0x20, 0x2, 0x8, 0x5, 0x5, 0x5, 0x5, 0xc3, 0x3, 0x4, 0x8, 0x3ff, 0x68, 0xfffffffc, 0x3, 0xca, 0x8001, 0x73f1, 0x5, 0x800, 0x70, 0x400, 0x101, 0x6fc, 0x8000, 0xe8f, 0xe69, 0x1, 0x8d3, 0x426, 0x0, 0x2, 0xffffffff, 0x1, 0x7f, 0x1, 0x1, 0x75, 0x1, 0x5, 0x7fff, 0x4c76, 0x8000, 0x8, 0x8, 0x8000, 0x9, 0x4, 0xfffffffa, 0x7, 0x0, 0x2, 0xc, 0x4, 0xffff, 0x0, 0x3, 0x1, 0xfd, 0xd, 0x7, 0xe, 0x8, 0xffffffff, 0x8, 0x1, 0x0, 0x6, 0xc4, 0x5, 0x3, 0xfffffffb, 0x7, 0x7, 0x5, 0x3, 0x3ff, 0x0, 0x0, 0x7, 0x80000000, 0xda7, 0x7fff, 0x2, 0x5, 0xcf, 0xd, 0x0, 0x0, 0x5988, 0x9, 0x946a, 0x7fffffff, 0x1eff, 0x7, 0xa, 0xfffffeff, 0x8, 0xd, 0x24, 0xd, 0x3, 0x9, 0x4, 0x4, 0x9, 0x0, 0x1, 0x9, 0x9, 0x2, 0xff, 0x8, 0x5f6, 0x3, 0x7, 0x2, 0x3, 0x1, 0x4, 0x1e, 0xccd7, 0xe2, 0x5, 0x7, 0x6, 0x9, 0x6, 0x8, 0xffffff9a, 0xb0f2, 0x6, 0x7, 0x64d, 0xfffffffd, 0x9, 0x2, 0x97, 0x1, 0x46, 0x401, 0xfffffffa, 0x7084, 0xfffffffc, 0x7, 0x3ff, 0x6, 0x3, 0xe44, 0x1, 0x3ff, 0x2, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x1, 0x4, 0x7, 0x2, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xc8}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x494}, 0x1, 0x0, 0x0, 0x20000092}, 0x80800) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x804) r5 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) pwrite64(r5, &(0x7f0000000480)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6eeaeec2d13731c56a864fa45a465e645e6855c66e7190ed911b5d36f3db423da49146adf5742e2d98e81963fdb3911c91d94a7327708bacf3aeb1d10471980e3132947b42b079a9a09a3c48e452ca2446aa1569b8e1e028e6ebbcdd573302a47511455505e04f75899cb3edd2fd2073319dc1a43074fe7d24e00", 0x98, 0xef8d) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket(0x10, 0x803, 0x4) lseek(0xffffffffffffffff, 0x7, 0x0) syz_genetlink_get_family_id$batadv(0x0, r7) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendto$packet(r6, 0x0, 0x0, 0x20000085, &(0x7f0000000400)={0x11, 0x18, r8, 0x1, 0x0, 0x6, @local}, 0x14) 13.551373162s ago: executing program 5 (id=3499): r0 = socket(0x1d, 0x2, 0x6) getpeername$packet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b010000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800800000000000000000000000002f110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b508000000000000850000000700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000600)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000840)={0x1000, {{0xa, 0x4e22, 0xba68, @rand_addr=' \x01\x00', 0x2}}}, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001180)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a31000000000c0007800800064000000eb30500050002000000050004000100000011000300686173683a69702c706f72740000000073279bd42b1cd31735335dd23cc0c0bcf8ac6746f100ecd29cebccff35367a0eaa7eac960c4a5ed018a550e2d6b7dfbd74de75d3702f10c3e80fa99697a868ffdb24fe522aa3ba217be482850e45ce5b70dda54572882cd3da4fdf3816da480a632885706ca656a94a924f4dab9b9969403ab9c359da74ac915324d75475bd007f187b06602b8ec25206b6b2bd21c113eb5eac7375cf9ca2c2f866ecce019d04d70311da942a58e029a51ce8ae59f6ca44c5c1ec1e83d89cd80023eb659202e46fe5c1c3caa0ecfa52e72bdbb986685eaeacee9a3b34332b8804d6a787bf6b3a8874e2678302e44bed1f297a2d0677a662f6723eaa52b86e72b503f353dc98862b8d01b1e1e5907ceb7f8e717d7305d2d21a0dd6ce52549adf50f2c8aad2d2d35aa4e08226dd314718ee7fb54c69559f4583e005fde614ddd1673b462bd5284cb7c4a97610287af771f1c670fae0e193abe36a25b1176cf28ca74136a67c551d40d3ef9d850b679fd0ba05940784d0d6333184293372dd65b6cf24ba4e91b21aeb04e39b94fc08895d710f916232e6b9e14c17f0f430a6ac5fedcc"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x100040d3}, 0x22000010) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r6 = syz_ublk_setup_io_uring(0xd, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, 0x0) syz_ublk_add_dev(r6, r7, r8, 0x0, &(0x7f0000000480)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000540)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) r13 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc8243, 0x40) syz_ublk_setup_queues(r12, r10, &(0x7f0000000580)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f00000009c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x200, 0x1006, 0x11, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbdd, 0x8000, 0x10000000, 0x146, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x8, 0x2, 0xbd, 0x0, r13}}], 0x1, &(0x7f0000000c40)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r9, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 11.80902424s ago: executing program 3 (id=3503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x5) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000680)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000700)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000780)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d", 0x24) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)={'nat\x00', 0x0, [0x1c000000, 0x6, 0x200, 0x8, 0x1f9]}, &(0x7f0000000840)=0x54) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f00000004c0)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r7, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 11.540623028s ago: executing program 0 (id=3504): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001000000000000000000010000"], 0x248}, 0x1, 0x0, 0x0, 0x40040}, 0x4040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000008c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000900)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000980)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000a00)="8a0cca", 0x3}], 0x1}}], 0x1, 0x2000c090) close(r1) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000640)}, {&(0x7f0000000680)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000000000000000000340000"], 0x40}, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x8, r3, 0x1, 0xba, 0x6, @broadcast}, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000740)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000007c0)={0x1, [0x0]}, &(0x7f0000000800)=0x8) setsockopt$inet_sctp6_SCTP_EVENT(r5, 0x84, 0x7f, &(0x7f0000000840)={r6, 0x8006}, 0x8) setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r4, 0x84, 0x80, &(0x7f0000000880)={r6, 0x9}, 0x8) write(r0, &(0x7f0000000000)="010000000000000020", 0x9) 10.989291834s ago: executing program 0 (id=3505): r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsmount(r0, 0x0, 0x70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r4, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001180)=@newtfilter={0x48c, 0x2c, 0x0, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0x1, 0xb}, {0x10, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x20, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x1}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xa}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x41c, 0x2, [@TCA_FLOW_POLICE={0x418, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0x2, 0x9, 0xffff, 0xfff, 0x1000, 0x1, 0x5, 0x9, 0x3ff, 0xfffffffe, 0x8001, 0x21a, 0x7, 0x2, 0x6, 0xb938, 0x401, 0xa, 0x9, 0xffff, 0xffffffff, 0x40, 0x8, 0xd, 0x3, 0x5, 0x0, 0x4, 0xe, 0x5922070c, 0x8, 0x10001, 0x4, 0xb, 0x5, 0x8001, 0x4, 0x4, 0x7, 0x2, 0x4, 0xb, 0xff, 0x3, 0x3, 0x2, 0x1, 0x617, 0x0, 0x0, 0xf356, 0xfff, 0x40, 0x0, 0x0, 0x80000000, 0xffff, 0x7, 0x1ff, 0x6, 0x5, 0x9e, 0x4, 0xfffffffa, 0x8, 0x40, 0x400, 0xffffff14, 0xb, 0xebe, 0x0, 0x6f, 0x3, 0x7, 0xffff, 0x0, 0xfffffffe, 0x1, 0x5, 0x1000, 0x3, 0x5c79, 0x1000, 0xfff, 0xe5, 0x20e0, 0x4274, 0x2, 0x5, 0x4, 0x1, 0x20, 0x2, 0x8, 0x5, 0x5, 0x5, 0x5, 0xc3, 0x3, 0x4, 0x8, 0x3ff, 0x68, 0xfffffffc, 0x3, 0xca, 0x8001, 0x73f1, 0x5, 0x800, 0x70, 0x400, 0x101, 0x6fc, 0x8000, 0xe8f, 0xe69, 0x1, 0x8d3, 0x426, 0x0, 0x2, 0xffffffff, 0x1, 0x7f, 0x1, 0x1, 0x75, 0x1, 0x5, 0x7fff, 0x4c76, 0x8000, 0x8, 0x8, 0x8000, 0x9, 0x4, 0xfffffffa, 0x7, 0x0, 0x2, 0xc, 0x4, 0xffff, 0x0, 0x3, 0x1, 0xfd, 0xd, 0x7, 0xe, 0x8, 0xffffffff, 0x8, 0x1, 0x0, 0x6, 0xc4, 0x5, 0x3, 0xfffffffb, 0x7, 0x7, 0x5, 0x3, 0x3ff, 0x0, 0x0, 0x7, 0x80000000, 0xda7, 0x7fff, 0x2, 0x5, 0xcf, 0xd, 0x0, 0x0, 0x5988, 0x9, 0x946a, 0x7fffffff, 0x1eff, 0x7, 0xa, 0xfffffeff, 0x8, 0xd, 0x24, 0xd, 0x3, 0x9, 0x4, 0x4, 0x9, 0x0, 0x1, 0x9, 0x9, 0x2, 0xff, 0x8, 0x5f6, 0x3, 0x7, 0x2, 0x3, 0x1, 0x4, 0x1e, 0xccd7, 0xe2, 0x5, 0x7, 0x6, 0x9, 0x6, 0x8, 0xffffff9a, 0xb0f2, 0x6, 0x7, 0x64d, 0xfffffffd, 0x9, 0x2, 0x97, 0x1, 0x46, 0x401, 0xfffffffa, 0x7084, 0xfffffffc, 0x7, 0x3ff, 0x6, 0x3, 0xe44, 0x1, 0x3ff, 0x2, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x1, 0x4, 0x7, 0x2, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xc8}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x48c}, 0x1, 0x0, 0x0, 0x20000092}, 0x80800) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x804) r6 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) pwrite64(r6, &(0x7f0000000480)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6eeaeec2d13731c56a864fa45a465e645e6855c66e7190ed911b5d36f3db423da49146adf5742e2d98e81963fdb3911c91d94a7327708bacf3aeb1d10471980e3132947b42b079a9a09a3c48e452ca2446aa1569b8e1e028e6ebbcdd573302a47511455505e04f75899cb3edd2fd2073319dc1a43074fe7d24e00", 0x98, 0xef8d) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket(0x10, 0x803, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) lseek(0xffffffffffffffff, 0x7, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r8) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendto$packet(r7, 0x0, 0x0, 0x20000085, &(0x7f0000000400)={0x11, 0x18, r9, 0x1, 0x0, 0x6, @local}, 0x14) io_submit(r1, 0x0, &(0x7f0000003b80)) 10.722998092s ago: executing program 3 (id=3507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x4c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 10.451975789s ago: executing program 3 (id=3508): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0x11c0, 0x8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000040), 0x1004) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r6}]}, 0x3c}}, 0x8000) setpgid(r0, r6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'veth0_to_hsr\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x18c}]}}]}, 0x38}}, 0xc840) 8.848608214s ago: executing program 3 (id=3510): socket(0x1e, 0x805, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000640)='lo\x00'}) syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x880, &(0x7f0000000700)=ANY=[], 0x26, 0x367, &(0x7f0000000d00)="$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") setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001080)={@local, @local}, 0xfffffffffffffef7) unshare(0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x100000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b57) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000010c0)={0x0, 0x0, 0x4, 0x30000}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000001100)='ext2\x00', &(0x7f0000001140)='./bus\x00', 0x38880, &(0x7f0000001180), 0x1, 0x51a, &(0x7f00000011c0)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001700)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001740), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(r3, 0x0) get_robust_list(r0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.585364241s ago: executing program 0 (id=3512): socket(0x1e, 0x805, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000640)='lo\x00'}) syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x880, &(0x7f0000000700)=ANY=[], 0x26, 0x367, &(0x7f0000000d00)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x100000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b57) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000010c0)={0x0, 0x0, 0x4, 0x30000}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000001100)='ext2\x00', &(0x7f0000001140)='./bus\x00', 0x38880, &(0x7f0000001180), 0x1, 0x51a, &(0x7f00000011c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001700)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001740), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(r3, 0x0) get_robust_list(r0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.271194485s ago: executing program 5 (id=3514): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0xfffffffa, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r0, &(0x7f0000000300), 0xb375) read$FUSE(r0, &(0x7f0000001380)={0x2020}, 0x2020) 6.956534768s ago: executing program 5 (id=3515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x5) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000680)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000700)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000780)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d", 0x24) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)={'nat\x00', 0x0, [0x1c000000, 0x6, 0x200, 0x8, 0x1f9]}, &(0x7f0000000840)=0x54) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f00000004c0)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r7, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 6.929219281s ago: executing program 1 (id=3523): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000003c0)={'veth0_to_team\x00', &(0x7f0000000400)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000600)=0xd, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000640)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000680)=0x5, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000006c0)=0x2, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local}) write$tun(r4, 0x0, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d9a9238}, 0x94) 5.560448431s ago: executing program 5 (id=3516): socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_open_dev$loop(0x0, 0x4, 0xc0981) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x2002c094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x5, 0x4, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3a}, 0x0) syz_clone(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000b0e00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x40011) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f000074b000/0x1000)=nil, 0x1000, 0xb) setpriority(0x2, 0x0, 0x2) 5.558896781s ago: executing program 1 (id=3525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x5) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000680)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000700)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000780)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d", 0x24) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000007c0)={'nat\x00', 0x0, [0x1c000000, 0x6, 0x200, 0x8, 0x1f9]}, &(0x7f0000000840)=0x54) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f00000004c0)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r7, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 4.993630549s ago: executing program 0 (id=3517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x5) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000680)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000700)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000780)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d", 0x24) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000007c0)={'nat\x00', 0x0, [0x1c000000, 0x6, 0x200, 0x8, 0x1f9]}, &(0x7f0000000840)=0x54) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f00000004c0)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r7, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 4.934542275s ago: executing program 5 (id=3518): socket(0x1e, 0x805, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000640)='lo\x00'}) syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x880, &(0x7f0000000700)=ANY=[], 0x26, 0x367, &(0x7f0000000d00)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x100000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b57) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000010c0)={0x0, 0x0, 0x4, 0x30000}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000001100)='ext2\x00', &(0x7f0000001140)='./bus\x00', 0x38880, &(0x7f0000001180), 0x1, 0x51a, &(0x7f00000011c0)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001700)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001740), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(r3, 0x0) get_robust_list(r0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.621029717s ago: executing program 1 (id=3519): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090) shutdown(r3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='autofs\x00', 0x201000c, &(0x7f0000000cc0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020}, 0x5ecfb203) open$dir(0x0, 0x10001, 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x298, 0x0, 0x0, 0x200, 0x200, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x368}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x5}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 4.3926031s ago: executing program 0 (id=3520): r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsmount(r0, 0x0, 0x70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r4, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001180)=@newtfilter={0x48c, 0x2c, 0x0, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0x1, 0xb}, {0x10, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x20, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x1}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xa}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x41c, 0x2, [@TCA_FLOW_POLICE={0x418, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0x2, 0x9, 0xffff, 0xfff, 0x1000, 0x1, 0x5, 0x9, 0x3ff, 0xfffffffe, 0x8001, 0x21a, 0x7, 0x2, 0x6, 0xb938, 0x401, 0xa, 0x9, 0xffff, 0xffffffff, 0x40, 0x8, 0xd, 0x3, 0x5, 0x0, 0x4, 0xe, 0x5922070c, 0x8, 0x10001, 0x4, 0xb, 0x5, 0x8001, 0x4, 0x4, 0x7, 0x2, 0x4, 0xb, 0xff, 0x3, 0x3, 0x2, 0x1, 0x617, 0x0, 0x0, 0xf356, 0xfff, 0x40, 0x0, 0x0, 0x80000000, 0xffff, 0x7, 0x1ff, 0x6, 0x5, 0x9e, 0x4, 0xfffffffa, 0x8, 0x40, 0x400, 0xffffff14, 0xb, 0xebe, 0x0, 0x6f, 0x3, 0x7, 0xffff, 0x0, 0xfffffffe, 0x1, 0x5, 0x1000, 0x3, 0x5c79, 0x1000, 0xfff, 0xe5, 0x20e0, 0x4274, 0x2, 0x5, 0x4, 0x1, 0x20, 0x2, 0x8, 0x5, 0x5, 0x5, 0x5, 0xc3, 0x3, 0x4, 0x8, 0x3ff, 0x68, 0xfffffffc, 0x3, 0xca, 0x8001, 0x73f1, 0x5, 0x800, 0x70, 0x400, 0x101, 0x6fc, 0x8000, 0xe8f, 0xe69, 0x1, 0x8d3, 0x426, 0x0, 0x2, 0xffffffff, 0x1, 0x7f, 0x1, 0x1, 0x75, 0x1, 0x5, 0x7fff, 0x4c76, 0x8000, 0x8, 0x8, 0x8000, 0x9, 0x4, 0xfffffffa, 0x7, 0x0, 0x2, 0xc, 0x4, 0xffff, 0x0, 0x3, 0x1, 0xfd, 0xd, 0x7, 0xe, 0x8, 0xffffffff, 0x8, 0x1, 0x0, 0x6, 0xc4, 0x5, 0x3, 0xfffffffb, 0x7, 0x7, 0x5, 0x3, 0x3ff, 0x0, 0x0, 0x7, 0x80000000, 0xda7, 0x7fff, 0x2, 0x5, 0xcf, 0xd, 0x0, 0x0, 0x5988, 0x9, 0x946a, 0x7fffffff, 0x1eff, 0x7, 0xa, 0xfffffeff, 0x8, 0xd, 0x24, 0xd, 0x3, 0x9, 0x4, 0x4, 0x9, 0x0, 0x1, 0x9, 0x9, 0x2, 0xff, 0x8, 0x5f6, 0x3, 0x7, 0x2, 0x3, 0x1, 0x4, 0x1e, 0xccd7, 0xe2, 0x5, 0x7, 0x6, 0x9, 0x6, 0x8, 0xffffff9a, 0xb0f2, 0x6, 0x7, 0x64d, 0xfffffffd, 0x9, 0x2, 0x97, 0x1, 0x46, 0x401, 0xfffffffa, 0x7084, 0xfffffffc, 0x7, 0x3ff, 0x6, 0x3, 0xe44, 0x1, 0x3ff, 0x2, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x1, 0x4, 0x7, 0x2, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xc8}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x48c}, 0x1, 0x0, 0x0, 0x20000092}, 0x80800) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x804) r6 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) pwrite64(r6, &(0x7f0000000480)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6eeaeec2d13731c56a864fa45a465e645e6855c66e7190ed911b5d36f3db423da49146adf5742e2d98e81963fdb3911c91d94a7327708bacf3aeb1d10471980e3132947b42b079a9a09a3c48e452ca2446aa1569b8e1e028e6ebbcdd573302a47511455505e04f75899cb3edd2fd2073319dc1a43074fe7d24e00", 0x98, 0xef8d) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket(0x10, 0x803, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) lseek(0xffffffffffffffff, 0x7, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r8) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendto$packet(r7, 0x0, 0x0, 0x20000085, &(0x7f0000000400)={0x11, 0x18, r9, 0x1, 0x0, 0x6, @local}, 0x14) io_submit(r1, 0x0, &(0x7f0000003b80)) 3.61225769s ago: executing program 1 (id=3521): socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000001500)={0x8, 0xffffe1aa, 0x7ff, 0x1, 0x9}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000006c0)) setpgid(r0, r0) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSLCKTRMIOS(r5, 0x80047437, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000f00)=@filename='127.0.0.1:/test\x00', &(0x7f0000000f40)='./mnt\x00', &(0x7f0000000f80)='nfs\x00', 0x0, &(0x7f0000000fc0)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000800)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b49cb0b1a4bbff03a8b3db280000000000000079"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 2.405567464s ago: executing program 1 (id=3522): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x401}}}, 0x80, 0x0}, 0x40000) r5 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r5, &(0x7f0000000680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) timer_create(0xfffffffc, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000001f280)={{{@in=@dev, @in=@initdev}}, {{}, 0x0, @in=@private}}, &(0x7f000001f380)=0xe8) pipe2(&(0x7f000001f3c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r7, 0x407, 0x0) read$FUSE(r6, &(0x7f000001f400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r7, &(0x7f0000021440)={0x90, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x401, 0x7, 0xfffffffd, 0x9, 0x80000003, 0x0, 0x0, r8, r9, 0x3, 0x5}}}, 0x90) openat$adsp1(0xffffffffffffff9c, &(0x7f0000021500), 0x400000, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 1.07666541s ago: executing program 1 (id=3524): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001000000000000000000010000"], 0x248}, 0x1, 0x0, 0x0, 0x40040}, 0x4040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000008c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000900)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000980)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000a00)="8a0cca", 0x3}], 0x1}}], 0x1, 0x2000c090) close(r1) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000640)='\b', 0x1}, {&(0x7f0000000680)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000000000000000000340000"], 0x40}, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x8, r3, 0x1, 0xba, 0x6, @broadcast}, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000740)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000007c0)={0x1, [0x0]}, &(0x7f0000000800)=0x8) setsockopt$inet_sctp6_SCTP_EVENT(r5, 0x84, 0x7f, &(0x7f0000000840)={r6, 0x8006}, 0x8) setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r4, 0x84, 0x80, &(0x7f0000000880)={r6, 0x9}, 0x8) write(r0, &(0x7f0000000000)="010000000000000020", 0x9) 972.511191ms ago: executing program 3 (id=3526): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000580)) 21.047158ms ago: executing program 3 (id=3527): socket(0x1e, 0x805, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000640)='lo\x00'}) syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x880, &(0x7f0000000700)=ANY=[], 0x26, 0x367, &(0x7f0000000d00)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x100000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b57) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000010c0)={0x0, 0x0, 0x4, 0x30000}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000001100)='ext2\x00', &(0x7f0000001140)='./bus\x00', 0x38880, &(0x7f0000001180), 0x1, 0x51a, &(0x7f00000011c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001700)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001740), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(r3, 0x0) get_robust_list(r0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 0 (id=3528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a80)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000ac0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000bc0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000c00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c40)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000"], 0x48) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000440)=@multiplanar_mmap={0x0, 0x9, 0x4, 0x107ea04, 0x0, {}, {0x0, 0x2, 0x0, 0x40, 0x1, 0xfa, "244cb303"}, 0x3, 0x1, {0x0}}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x10) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r8, &(0x7f0000000380)={0xa, 0x0, 0x7fffc, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000380), &(0x7f00000003c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810) kernel console output (not intermixed with test programs): etlink: 12 bytes leftover after parsing attributes in process `syz.3.1714'. [ 1100.708152][T13635] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1100.714706][T13635] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1100.723230][T13635] vhci_hcd vhci_hcd.0: Device attached [ 1100.730746][T13640] vhci_hcd: connection closed [ 1100.749175][ T145] vhci_hcd: release socket [ 1100.768547][ T145] vhci_hcd: disconnect device [ 1100.776657][ T145] vhci_hcd: stop threads [ 1100.783355][ T145] vhci_hcd: release socket [ 1100.787827][ T145] vhci_hcd: disconnect device [ 1100.839761][ T790] vhci_hcd: vhci_device speed not set [ 1101.890073][T13653] loop4: detected capacity change from 0 to 32896 [ 1101.926760][T13653] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1101.965743][T13653] ext4 filesystem being mounted at /264/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.969284][T13667] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1103.978072][T13667] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1103.986844][T13667] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1103.995609][T13667] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1106.873027][ T8551] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1107.069209][T13681] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1107.075780][T13681] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1107.084782][T13681] vhci_hcd vhci_hcd.0: Device attached [ 1107.117389][T13683] vhci_hcd: connection closed [ 1107.122713][ T11] vhci_hcd: stop threads [ 1107.132193][ T11] vhci_hcd: release socket [ 1107.136634][ T11] vhci_hcd: disconnect device [ 1107.820490][T13688] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1107.827096][T13688] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1107.845205][T13688] vhci_hcd vhci_hcd.0: Device attached [ 1108.090047][ T8] vhci_hcd: vhci_device speed not set [ 1108.096083][T13689] vhci_hcd: connection closed [ 1108.489335][ T9636] vhci_hcd: stop threads [ 1108.844649][ T9636] vhci_hcd: release socket [ 1108.849898][ T9636] vhci_hcd: disconnect device [ 1108.909335][ T8] usb 33-1: new full-speed USB device number 20 using vhci_hcd [ 1108.946269][ T8] usb 33-1: enqueue for inactive port 0 [ 1109.011440][T13704] infiniband syz1: set active [ 1109.494769][T11011] rxe_eth0 speed is unknown, defaulting to 1000 [ 1109.599621][ T8] vhci_hcd: vhci_device speed not set [ 1111.752511][T13703] net_ratelimit: 10 callbacks suppressed [ 1111.752608][T13703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1112.475105][T13711] netlink: 'syz.1.1733': attribute type 4 has an invalid length. [ 1112.483436][T13711] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1733'. [ 1115.930000][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.936382][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.195518][T13755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1120.391978][T13778] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1120.398601][T13778] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1120.406339][T13778] vhci_hcd vhci_hcd.0: Device attached [ 1120.601745][T13783] vhci_hcd: connection closed [ 1120.650187][T11011] vhci_hcd: vhci_device speed not set [ 1120.668561][ T1142] vhci_hcd: stop threads [ 1120.704434][T13785] loop4: detected capacity change from 0 to 33280 [ 1120.739049][ T1142] vhci_hcd: release socket [ 1120.797052][ T1142] vhci_hcd: disconnect device [ 1120.852660][T13785] ext4: Unknown parameter 'appraise_type' [ 1120.899589][T11011] usb 33-1: new full-speed USB device number 21 using vhci_hcd [ 1121.033801][T11011] usb 33-1: enqueue for inactive port 0 [ 1121.221619][T11011] vhci_hcd: vhci_device speed not set [ 1122.150844][T13796] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1122.157406][T13796] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1122.800633][T13796] vhci_hcd vhci_hcd.0: Device attached [ 1123.029187][ T973] vhci_hcd: vhci_device speed not set [ 1123.035399][T13797] vhci_hcd: connection closed [ 1123.036342][ T145] vhci_hcd: stop threads [ 1123.045716][ T145] vhci_hcd: release socket [ 1123.050952][ T145] vhci_hcd: disconnect device [ 1123.099363][ T973] usb 41-1: new full-speed USB device number 14 using vhci_hcd [ 1123.107030][ T973] usb 41-1: enqueue for inactive port 0 [ 1123.389906][ T973] vhci_hcd: vhci_device speed not set [ 1123.417833][T13805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1125.322067][T13817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1760'. [ 1126.089662][T13830] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 1126.124332][T13830] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1126.131828][T13830] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1126.150103][T13830] loop4: detected capacity change from 0 to 256 [ 1126.297031][T13830] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1129.363046][T13850] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1129.713718][T13854] virtio-fs: tag not found [ 1130.594362][T13867] No source specified [ 1131.267740][T13868] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1131.274314][T13868] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1131.286324][T13868] vhci_hcd vhci_hcd.0: Device attached [ 1131.451015][T13874] vhci_hcd: connection closed [ 1131.451508][T11014] vhci_hcd: stop threads [ 1131.509107][T11014] vhci_hcd: release socket [ 1131.513613][T11014] vhci_hcd: disconnect device [ 1132.655628][T13882] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 1132.664681][T13882] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 1132.673530][T13882] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 1132.683514][T13882] Error parsing options; rc = [-22] [ 1133.406483][T13901] netlink: 'syz.4.1785': attribute type 1 has an invalid length. [ 1133.505592][T13901] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1136.903775][T13930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1137.699751][T13938] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1137.706311][T13938] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1137.931582][T13938] vhci_hcd vhci_hcd.0: Device attached [ 1138.141863][T13939] vhci_hcd: connection closed [ 1138.153820][ T11] vhci_hcd: stop threads [ 1138.164639][ T11] vhci_hcd: release socket [ 1138.179258][ T11] vhci_hcd: disconnect device [ 1138.242629][ T790] vhci_hcd: vhci_device speed not set [ 1138.387008][T13951] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1138.393556][T13951] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1138.414529][T13951] vhci_hcd vhci_hcd.0: Device attached [ 1138.523615][T13952] vhci_hcd: connection closed [ 1138.526169][ T11] vhci_hcd: stop threads [ 1138.556867][ T11] vhci_hcd: release socket [ 1138.567063][ T11] vhci_hcd: disconnect device [ 1138.609581][ T23] vhci_hcd: vhci_device speed not set [ 1138.625185][T13960] netlink: 'syz.3.1802': attribute type 1 has an invalid length. [ 1138.651610][T13960] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1138.903345][T13964] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1138.909921][T13964] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1138.926659][T13964] vhci_hcd vhci_hcd.0: Device attached [ 1139.289684][ T790] vhci_hcd: vhci_device speed not set [ 1140.668283][T13966] vhci_hcd: connection closed [ 1140.672232][T11014] vhci_hcd: stop threads [ 1140.709595][T11014] vhci_hcd: release socket [ 1140.721539][T11014] vhci_hcd: disconnect device [ 1140.729751][ T790] usb 41-1: new full-speed USB device number 15 using vhci_hcd [ 1140.754253][ T790] usb 41-1: enqueue for inactive port 0 [ 1140.869927][ T790] vhci_hcd: vhci_device speed not set [ 1142.046910][T13989] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1142.053474][T13989] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1142.080956][T13989] vhci_hcd vhci_hcd.0: Device attached [ 1142.221858][T13992] vhci_hcd: connection closed [ 1142.228724][T13991] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1142.239962][T13991] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1142.247882][ T145] vhci_hcd: stop threads [ 1142.256163][T13991] vhci_hcd vhci_hcd.0: Device attached [ 1142.263016][ T145] vhci_hcd: release socket [ 1142.267526][ T145] vhci_hcd: disconnect device [ 1142.950742][T13995] vhci_hcd: connection closed [ 1142.951182][T11014] vhci_hcd: stop threads [ 1142.969631][T11014] vhci_hcd: release socket [ 1142.979913][T11014] vhci_hcd: disconnect device [ 1142.999164][ T973] vhci_hcd: vhci_device speed not set [ 1143.077379][T14006] netlink: 'syz.3.1817': attribute type 1 has an invalid length. [ 1143.105204][T14006] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1143.458531][T14011] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1143.465093][T14011] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1143.473463][T14011] vhci_hcd vhci_hcd.0: Device attached [ 1144.363603][T14012] vhci_hcd: connection closed [ 1145.601638][ T145] vhci_hcd: stop threads [ 1145.640899][ T145] vhci_hcd: release socket [ 1145.654205][ T145] vhci_hcd: disconnect device [ 1145.719206][ T5871] vhci_hcd: vhci_device speed not set [ 1148.721296][T14041] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1148.727859][T14041] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1148.749530][T14041] vhci_hcd vhci_hcd.0: Device attached [ 1148.867273][T14038] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1148.873842][T14038] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1148.888529][T14038] vhci_hcd vhci_hcd.0: Device attached [ 1148.949736][ T790] vhci_hcd: vhci_device speed not set [ 1149.000083][T14042] vhci_hcd: connection closed [ 1149.048412][ T1115] vhci_hcd: stop threads [ 1149.072161][ T1115] vhci_hcd: release socket [ 1149.077804][T14040] vhci_hcd: connection closed [ 1149.082009][ T1115] vhci_hcd: disconnect device [ 1149.093030][ T1115] vhci_hcd: stop threads [ 1149.097348][ T1115] vhci_hcd: release socket [ 1149.099267][ T973] vhci_hcd: vhci_device speed not set [ 1149.107702][ T1115] vhci_hcd: disconnect device [ 1149.148332][ T790] usb 41-1: new full-speed USB device number 17 using vhci_hcd [ 1149.161211][ T790] usb 41-1: enqueue for inactive port 0 [ 1149.189749][ T973] usb 33-1: new full-speed USB device number 24 using vhci_hcd [ 1149.201679][ T973] usb 33-1: enqueue for inactive port 0 [ 1149.245284][ T790] vhci_hcd: vhci_device speed not set [ 1149.287687][ T973] vhci_hcd: vhci_device speed not set [ 1149.407151][T14051] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 1149.443207][T14051] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1149.726601][T14057] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1149.733153][T14057] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1149.740900][T14057] vhci_hcd vhci_hcd.0: Device attached [ 1149.999694][ T790] vhci_hcd: vhci_device speed not set [ 1150.533732][T14058] vhci_hcd: connection closed [ 1150.562303][ T145] vhci_hcd: stop threads [ 1150.682223][ T145] vhci_hcd: release socket [ 1150.760186][ T145] vhci_hcd: disconnect device [ 1152.611023][ T790] vhci_hcd: vhci_device speed not set [ 1152.848870][T14079] loop4: detected capacity change from 0 to 33280 [ 1152.872647][T14079] ext4: Unknown parameter 'appraise_type' [ 1152.934697][T14081] I/O error, dev loop4, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1153.089301][T14084] loop4: detected capacity change from 0 to 33280 [ 1153.671294][T14084] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 1153.680119][T14084] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1840: inode #15: comm syz.4.1840: iget: illegal inode # [ 1153.693806][T14084] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1840: couldn't read orphan inode 15 (err -117) [ 1153.708011][T14084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1153.921550][ T8551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.265290][T14098] loop4: detected capacity change from 0 to 33280 [ 1154.275908][T14098] ext4: Unknown parameter 'appraise_type' [ 1155.125461][T14103] loop4: detected capacity change from 0 to 33280 [ 1157.245781][T14103] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1157.248612][T14103] EXT4-fs: failed to create workqueue [ 1157.263804][T14103] EXT4-fs (loop4): mount failed [ 1157.986973][T14115] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 1158.044049][T14115] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1158.885313][T14125] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1158.891874][T14125] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1159.007801][T14125] vhci_hcd vhci_hcd.0: Device attached [ 1159.297099][ T8] vhci_hcd: vhci_device speed not set [ 1159.305838][T14126] vhci_hcd: connection closed [ 1159.309847][ T11] vhci_hcd: stop threads [ 1159.320329][ T11] vhci_hcd: release socket [ 1159.324965][ T11] vhci_hcd: disconnect device [ 1159.369224][ T8] usb 33-1: new full-speed USB device number 25 using vhci_hcd [ 1159.959171][ T8] usb 33-1: enqueue for inactive port 0 [ 1160.018868][T14136] loop4: detected capacity change from 0 to 33280 [ 1160.034292][T14136] ext4: Unknown parameter 'appraise_type' [ 1160.069941][ T8] vhci_hcd: vhci_device speed not set [ 1162.809659][T14142] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1162.816230][T14142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1162.834268][T14143] vhci_hcd: connection closed [ 1162.835650][T14142] vhci_hcd vhci_hcd.0: Device attached [ 1162.865270][ T1142] vhci_hcd: stop threads [ 1162.876540][ T1142] vhci_hcd: release socket [ 1162.883727][ T1142] vhci_hcd: disconnect device [ 1163.919335][T14154] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1859'. [ 1166.077520][T14173] netlink: 'syz.1.1867': attribute type 1 has an invalid length. [ 1166.622744][T14173] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1167.309698][T14183] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1167.316272][T14183] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1167.324169][T14183] vhci_hcd vhci_hcd.0: Device attached [ 1167.336811][T14184] vhci_hcd: connection closed [ 1167.340813][ T1096] vhci_hcd: stop threads [ 1167.362682][ T1096] vhci_hcd: release socket [ 1167.367152][ T1096] vhci_hcd: disconnect device [ 1168.753855][T14195] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1168.760418][T14195] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1168.768631][T14195] vhci_hcd vhci_hcd.0: Device attached [ 1169.350158][T14196] vhci_hcd: connection closed [ 1170.484378][ T9635] vhci_hcd: stop threads [ 1170.498207][ T9635] vhci_hcd: release socket [ 1170.503283][ T9635] vhci_hcd: disconnect device [ 1170.573478][ T790] vhci_hcd: vhci_device speed not set [ 1170.981368][T12539] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1174.367766][T14233] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1174.374338][T14233] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1174.382700][T14233] vhci_hcd vhci_hcd.0: Device attached [ 1174.609821][ T790] vhci_hcd: vhci_device speed not set [ 1174.814001][ T790] usb 41-1: new full-speed USB device number 19 using vhci_hcd [ 1174.850329][T14237] netlink: 'syz.0.1883': attribute type 1 has an invalid length. [ 1175.366306][T14234] vhci_hcd: connection reset by peer [ 1175.445026][ T145] vhci_hcd: stop threads [ 1175.510910][ T145] vhci_hcd: release socket [ 1175.561092][ T145] vhci_hcd: disconnect device [ 1176.180497][T14237] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1176.220953][T14249] loop4: detected capacity change from 0 to 33280 [ 1176.228722][T14249] ext4: Unknown parameter 'appraise_type' [ 1176.850830][T14254] loop4: detected capacity change from 0 to 33280 [ 1176.877521][T14254] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 1176.886269][T14254] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1886: inode #15: comm syz.4.1886: iget: illegal inode # [ 1176.919627][T14254] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1886: couldn't read orphan inode 15 (err -117) [ 1176.933552][T14254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1177.293786][ T8551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.304377][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.311295][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.375245][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 1180.799658][ T790] vhci_hcd: vhci_device speed not set [ 1181.305747][T14287] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1181.312316][T14287] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1181.320142][T14287] vhci_hcd vhci_hcd.0: Device attached [ 1181.815053][T14288] vhci_hcd: connection closed [ 1181.815492][ T1121] vhci_hcd: stop threads [ 1181.860145][ T1121] vhci_hcd: release socket [ 1181.890106][ T1121] vhci_hcd: disconnect device [ 1182.079745][ T790] vhci_hcd: vhci_device speed not set [ 1183.242694][T14304] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1183.249259][T14304] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1183.279748][T14304] vhci_hcd vhci_hcd.0: Device attached [ 1183.355915][T14307] vhci_hcd: connection closed [ 1183.357133][ T9635] vhci_hcd: stop threads [ 1183.444189][ T9635] vhci_hcd: release socket [ 1183.799188][ T9635] vhci_hcd: disconnect device [ 1184.015924][T14206] vhci_hcd: vhci_device speed not set [ 1187.662455][T14335] netlink: 'syz.3.1907': attribute type 1 has an invalid length. [ 1189.474859][T14335] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1191.836873][T14345] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1191.843433][T14345] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1191.851554][T14345] vhci_hcd vhci_hcd.0: Device attached [ 1191.857168][T14346] vhci_hcd: connection closed [ 1191.980519][ T9635] vhci_hcd: stop threads [ 1192.328617][ T9635] vhci_hcd: release socket [ 1192.333248][ T9635] vhci_hcd: disconnect device [ 1195.676825][T14365] loop4: detected capacity change from 0 to 33280 [ 1195.703962][T14365] ext4: Unknown parameter 'appraise_type' [ 1196.707482][T14371] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1196.714035][T14371] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1196.721750][T14371] vhci_hcd vhci_hcd.0: Device attached [ 1196.739487][T14373] vhci_hcd: connection closed [ 1196.749750][ T1121] vhci_hcd: stop threads [ 1196.758761][ T1121] vhci_hcd: release socket [ 1196.802327][ T1121] vhci_hcd: disconnect device [ 1199.760375][T14388] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1199.766932][T14388] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1199.774670][T14388] vhci_hcd vhci_hcd.0: Device attached [ 1199.989658][ T5871] vhci_hcd: vhci_device speed not set [ 1202.102520][ T5871] usb 41-1: new full-speed USB device number 20 using vhci_hcd [ 1202.209806][T14389] vhci_hcd: connection reset by peer [ 1202.235513][ T1115] vhci_hcd: stop threads [ 1202.243636][ T1115] vhci_hcd: release socket [ 1202.255234][ T1115] vhci_hcd: disconnect device [ 1202.861853][T14398] trusted_key: encrypted_key: insufficient parameters specified [ 1203.729394][T14401] netlink: 'syz.3.1923': attribute type 1 has an invalid length. [ 1203.770817][T14401] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1204.221643][T14405] loop4: detected capacity change from 0 to 33280 [ 1204.252597][T14405] ext4: Unknown parameter 'appraise_type' [ 1204.302116][T14408] I/O error, dev loop4, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1205.009556][T14410] loop4: detected capacity change from 0 to 33280 [ 1205.291337][T14410] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 1205.300660][T14410] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1925: inode #15: comm syz.4.1925: iget: illegal inode # [ 1205.321393][T14410] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1925: couldn't read orphan inode 15 (err -117) [ 1205.343626][T14410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.515135][ T8551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.437613][T14425] loop4: detected capacity change from 0 to 33280 [ 1206.461300][T14425] ext4: Unknown parameter 'appraise_type' [ 1206.500518][T14408] I/O error, dev loop4, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1206.657888][T14434] loop4: detected capacity change from 0 to 33280 [ 1207.444899][T14434] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 1207.453442][T14434] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1930: inode #15: comm syz.4.1930: iget: illegal inode # [ 1207.486457][T14434] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1930: couldn't read orphan inode 15 (err -117) [ 1207.499172][ T5871] vhci_hcd: vhci_device speed not set [ 1207.501391][T14434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1207.801335][ T8551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.234789][T14445] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1209.241355][T14445] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1209.249536][T14445] vhci_hcd vhci_hcd.0: Device attached [ 1209.268395][T14447] vhci_hcd: connection closed [ 1209.279999][ T1121] vhci_hcd: stop threads [ 1209.428427][ T1121] vhci_hcd: release socket [ 1209.599947][ T8] vhci_hcd: vhci_device speed not set [ 1209.774553][ T1121] vhci_hcd: disconnect device [ 1209.880752][ T8] usb 33-1: new full-speed USB device number 28 using vhci_hcd [ 1209.987405][ T8] usb 33-1: enqueue for inactive port 0 [ 1210.190058][ T8] vhci_hcd: vhci_device speed not set [ 1210.404660][T14451] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 1210.645676][T14451] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1214.096642][T14479] Can't find ip_set type hash:net, [ 1214.586756][T14492] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1214.593322][T14492] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1214.601126][T14492] vhci_hcd vhci_hcd.0: Device attached [ 1215.755949][T14493] vhci_hcd: connection closed [ 1215.849129][ T5871] vhci_hcd: vhci_device speed not set [ 1216.135291][ T1115] vhci_hcd: stop threads [ 1216.859566][ T1115] vhci_hcd: release socket [ 1216.888412][ T1115] vhci_hcd: disconnect device [ 1216.950761][ T5871] usb 33-1: new full-speed USB device number 29 using vhci_hcd [ 1216.958441][ T5871] usb 33-1: enqueue for inactive port 0 [ 1218.304579][ T5871] vhci_hcd: vhci_device speed not set [ 1218.466859][T14503] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1218.473420][T14503] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1218.481393][T14503] vhci_hcd vhci_hcd.0: Device attached [ 1218.583383][T14508] vhci_hcd: connection closed [ 1219.694727][ T9636] vhci_hcd: stop threads [ 1219.802835][ T8] vhci_hcd: vhci_device speed not set [ 1219.876347][ T9636] vhci_hcd: release socket [ 1219.951273][ T9636] vhci_hcd: disconnect device [ 1220.008611][ T8] usb 41-1: new full-speed USB device number 21 using vhci_hcd [ 1220.145143][ T8] usb 41-1: enqueue for inactive port 0 [ 1220.380528][ T8] vhci_hcd: vhci_device speed not set [ 1223.848774][T14538] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1223.855334][T14538] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1223.879141][T14538] vhci_hcd vhci_hcd.0: Device attached [ 1224.049603][T14541] vhci_hcd: connection closed [ 1224.050214][ T9635] vhci_hcd: stop threads [ 1224.079277][T11011] vhci_hcd: vhci_device speed not set [ 1224.092852][ T9635] vhci_hcd: release socket [ 1224.689379][ T9635] vhci_hcd: disconnect device [ 1224.831826][T11011] usb 41-1: new full-speed USB device number 22 using vhci_hcd [ 1224.839799][T11011] usb 41-1: enqueue for inactive port 0 [ 1225.245583][T11011] vhci_hcd: vhci_device speed not set [ 1225.798055][T14555] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1225.804615][T14555] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1225.813021][T14555] vhci_hcd vhci_hcd.0: Device attached [ 1226.141934][T14559] loop4: detected capacity change from 0 to 33280 [ 1226.151716][ T790] vhci_hcd: vhci_device speed not set [ 1226.225811][T14559] ext4: Unknown parameter 'appraise_type' [ 1226.279854][ T790] usb 33-1: new full-speed USB device number 30 using vhci_hcd [ 1226.569615][T14556] vhci_hcd: connection closed [ 1226.712147][ T9635] vhci_hcd: stop threads [ 1227.842568][ T9635] vhci_hcd: release socket [ 1227.847126][ T9635] vhci_hcd: disconnect device [ 1228.196479][T14564] loop4: detected capacity change from 0 to 33280 [ 1228.580110][T14564] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 1228.595573][T14564] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1963: inode #15: comm syz.4.1963: iget: illegal inode # [ 1228.612860][T14564] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1963: couldn't read orphan inode 15 (err -117) [ 1228.633212][T14564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1228.825745][ T8551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.274639][T14594] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1231.281220][T14594] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1231.288986][T14594] vhci_hcd vhci_hcd.0: Device attached [ 1231.529875][ T5871] vhci_hcd: vhci_device speed not set [ 1232.028059][T14595] vhci_hcd: connection closed [ 1232.179631][ T790] vhci_hcd: vhci_device speed not set [ 1233.419214][ T1096] vhci_hcd: stop threads [ 1233.423518][ T1096] vhci_hcd: release socket [ 1233.457284][ T1096] vhci_hcd: disconnect device [ 1233.500145][ T5871] usb 41-1: new full-speed USB device number 23 using vhci_hcd [ 1233.507791][ T5871] usb 41-1: enqueue for inactive port 0 [ 1233.540733][T14602] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1233.547316][T14602] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1233.555477][T14602] vhci_hcd vhci_hcd.0: Device attached [ 1233.589202][ T5871] vhci_hcd: vhci_device speed not set [ 1233.819045][T14603] vhci_hcd: connection closed [ 1233.823084][ T1096] vhci_hcd: stop threads [ 1233.859436][ T1096] vhci_hcd: release socket [ 1233.864122][ T1096] vhci_hcd: disconnect device [ 1233.910029][ T790] vhci_hcd: vhci_device speed not set [ 1234.638617][T14622] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1234.645210][T14622] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1235.563773][T14622] vhci_hcd vhci_hcd.0: Device attached [ 1236.219585][ T5869] vhci_hcd: vhci_device speed not set [ 1236.359518][ T5869] usb 41-1: new full-speed USB device number 24 using vhci_hcd [ 1236.394073][T14623] vhci_hcd: connection reset by peer [ 1236.403329][ T9635] vhci_hcd: stop threads [ 1236.407603][ T9635] vhci_hcd: release socket [ 1236.414648][ T9635] vhci_hcd: disconnect device [ 1238.742861][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.984057][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.029697][T14652] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1239.036223][T14652] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1239.077870][T14653] vhci_hcd: connection closed [ 1239.077898][T14652] vhci_hcd vhci_hcd.0: Device attached [ 1239.104659][ T1096] vhci_hcd: stop threads [ 1239.108939][ T1096] vhci_hcd: release socket [ 1239.119629][ T1096] vhci_hcd: disconnect device [ 1240.650909][T14681] netlink: 'syz.4.1999': attribute type 1 has an invalid length. [ 1241.063703][T14681] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1241.106502][T14687] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1241.113060][T14687] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1241.135784][T14687] vhci_hcd vhci_hcd.0: Device attached [ 1241.165012][T14693] vhci_hcd: connection closed [ 1241.166514][T11014] vhci_hcd: stop threads [ 1241.228611][T11014] vhci_hcd: release socket [ 1241.248868][T11014] vhci_hcd: disconnect device [ 1241.954856][ T5869] vhci_hcd: vhci_device speed not set [ 1244.598808][T14719] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1244.605353][T14719] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1244.613613][T14719] vhci_hcd vhci_hcd.0: Device attached [ 1244.627622][T14724] vhci_hcd: connection closed [ 1244.627847][ T9636] vhci_hcd: stop threads [ 1244.637942][ T9636] vhci_hcd: release socket [ 1244.642497][ T9636] vhci_hcd: disconnect device [ 1244.697319][T14727] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1244.703869][T14727] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1244.711736][T14727] vhci_hcd vhci_hcd.0: Device attached [ 1244.733251][T14728] vhci_hcd: connection closed [ 1244.749509][ T1096] vhci_hcd: stop threads [ 1244.771775][ T1096] vhci_hcd: release socket [ 1244.778888][ T1096] vhci_hcd: disconnect device [ 1244.871255][T14732] batman_adv: batadv0: Adding interface: dummy0 [ 1244.888083][T14732] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1245.025640][T14732] batman_adv: batadv0: Interface activated: dummy0 [ 1245.811452][T14738] netlink: 'syz.3.2013': attribute type 4 has an invalid length. [ 1245.819657][T14738] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2013'. [ 1245.932484][T14736] batadv0: mtu less than device minimum [ 1245.939282][T14736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1245.950651][T14736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1245.962958][T14736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1245.975242][T14736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1245.987566][T14736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1245.999054][T14736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1246.010481][T14736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1246.021933][T14736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1246.033267][T14736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1247.032764][T14747] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1247.039335][T14747] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1247.960383][T14747] vhci_hcd vhci_hcd.0: Device attached [ 1248.064489][ T973] vhci_hcd: vhci_device speed not set [ 1248.203938][T14752] vhci_hcd: connection closed [ 1248.204156][ T973] usb 33-1: new full-speed USB device number 31 using vhci_hcd [ 1248.217440][T14753] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1248.231192][ T9635] vhci_hcd: stop threads [ 1248.235468][ T9635] vhci_hcd: release socket [ 1248.255019][T14760] netlink: 'syz.1.2020': attribute type 1 has an invalid length. [ 1248.264874][ T9635] vhci_hcd: disconnect device [ 1248.296999][T14760] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1251.174011][T14772] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1251.180567][T14772] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1251.188802][T14772] vhci_hcd vhci_hcd.0: Device attached [ 1251.249998][T14773] vhci_hcd: connection closed [ 1251.250230][ T9636] vhci_hcd: stop threads [ 1251.259491][ T9636] vhci_hcd: release socket [ 1251.284815][ T9636] vhci_hcd: disconnect device [ 1253.429203][ T973] vhci_hcd: vhci_device speed not set [ 1255.304792][T14800] loop4: detected capacity change from 0 to 33280 [ 1255.354971][T14800] ext4: Unknown parameter 'appraise_type' [ 1257.513892][T14819] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1257.520465][T14819] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1257.528365][T14819] vhci_hcd vhci_hcd.0: Device attached [ 1257.543395][T14822] vhci_hcd: connection closed [ 1257.568371][ T12] vhci_hcd: stop threads [ 1257.630461][ T12] vhci_hcd: release socket [ 1257.641024][ T12] vhci_hcd: disconnect device [ 1261.744377][T14869] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1261.750949][T14869] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1261.761364][T14869] vhci_hcd vhci_hcd.0: Device attached [ 1261.980708][ T27] vhci_hcd: vhci_device speed not set [ 1262.050111][ T27] usb 33-1: new full-speed USB device number 32 using vhci_hcd [ 1262.873972][T14879] netlink: 'syz.4.2054': attribute type 1 has an invalid length. [ 1263.044769][T14879] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1263.118763][T14870] vhci_hcd: connection reset by peer [ 1263.125622][ T9635] vhci_hcd: stop threads [ 1263.133719][ T9635] vhci_hcd: release socket [ 1263.750463][ T9635] vhci_hcd: disconnect device [ 1266.246442][T14902] loop4: detected capacity change from 0 to 33280 [ 1266.285600][T14902] ext4: Unknown parameter 'appraise_type' [ 1266.458777][T14906] I/O error, dev loop4, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1267.042837][T14911] loop4: detected capacity change from 0 to 33280 [ 1267.388862][T14911] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 1267.398533][T14911] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2062: inode #15: comm syz.4.2062: iget: illegal inode # [ 1267.450487][T14911] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2062: couldn't read orphan inode 15 (err -117) [ 1267.468062][T14911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1267.651507][ T8551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.870324][ T27] vhci_hcd: vhci_device speed not set [ 1267.886031][T14924] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1267.892574][T14924] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1268.861258][T14924] vhci_hcd vhci_hcd.0: Device attached [ 1269.115454][ T5937] vhci_hcd: vhci_device speed not set [ 1269.518164][ T5937] usb 41-1: new full-speed USB device number 25 using vhci_hcd [ 1269.647859][T14925] vhci_hcd: connection reset by peer [ 1269.672671][T11014] vhci_hcd: stop threads [ 1269.682065][T11014] vhci_hcd: release socket [ 1269.723863][T11014] vhci_hcd: disconnect device [ 1271.847487][T14959] xt_hashlimit: max too large, truncated to 1048576 [ 1274.850565][ T5937] vhci_hcd: vhci_device speed not set [ 1279.355490][T15010] loop4: detected capacity change from 0 to 33280 [ 1280.450304][T15010] ext4: Unknown parameter 'appraise_type' [ 1280.521148][T15000] I/O error, dev loop4, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1281.301411][T15018] loop4: detected capacity change from 0 to 33280 [ 1281.355579][T15018] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 1281.363770][T15018] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2087: inode #15: comm syz.4.2087: iget: illegal inode # [ 1281.376943][T15018] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2087: couldn't read orphan inode 15 (err -117) [ 1281.391323][T15018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1281.582266][ T8551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.020355][T15032] loop4: detected capacity change from 0 to 33280 [ 1282.046366][T15032] ext4: Unknown parameter 'appraise_type' [ 1283.428097][T15039] overlayfs: failed to clone lowerpath [ 1285.095890][T15053] loop4: detected capacity change from 0 to 33280 [ 1285.134247][T15053] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1285.175670][T15053] EXT4-fs (loop4): 1 truncate cleaned up [ 1286.220606][T15053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1287.094938][ T8551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.476329][T15072] loop4: detected capacity change from 0 to 33280 [ 1288.744134][T15072] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 1288.755907][T15072] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2109: inode #15: comm syz.4.2109: iget: illegal inode # [ 1288.783254][T15072] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2109: couldn't read orphan inode 15 (err -117) [ 1288.798094][T15072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1289.063583][ T8551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.127396][T15099] Illegal XDP return value 4294967199 on prog (id 135) dev N/A, expect packet loss! [ 1292.587241][T15102] loop4: detected capacity change from 0 to 33280 [ 1292.603019][T15102] ext4: Unknown parameter 'appraise_type' [ 1297.134392][T15130] loop4: detected capacity change from 0 to 256 [ 1297.453851][T15130] FAT-fs (loop4): Directory bread(block 1285) failed [ 1297.489269][T15130] FAT-fs (loop4): Directory bread(block 1286) failed [ 1297.496100][T15130] FAT-fs (loop4): Directory bread(block 1287) failed [ 1297.535746][T15130] FAT-fs (loop4): Directory bread(block 1288) failed [ 1298.543770][T15138] vlan0: entered promiscuous mode [ 1298.903939][T15138] vlan0: entered allmulticast mode [ 1299.856240][T15138] hsr_slave_1: entered allmulticast mode [ 1300.100536][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2126'. [ 1300.185339][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.189555][T15148] hsr_slave_0: left promiscuous mode [ 1300.200533][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.668152][T15181] virtio-fs: tag not found [ 1306.442162][T15190] Can't find ip_set type hash:net, [ 1311.680571][T15228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2149'. [ 1312.976363][T15236] loop4: detected capacity change from 0 to 33280 [ 1313.067921][T15236] ext4: Unknown parameter 'appraise_type' [ 1313.141818][T15236] loop4: detected capacity change from 0 to 33280 [ 1313.201173][T15236] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 1313.211037][T15236] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2152: inode #15: comm syz.4.2152: iget: illegal inode # [ 1313.230241][T15236] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2152: couldn't read orphan inode 15 (err -117) [ 1313.245039][T15236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1313.450953][ T8551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.345152][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2161'. [ 1326.765269][T15328] loop4: detected capacity change from 0 to 33280 [ 1326.979996][T15328] ext4: Unknown parameter 'appraise_type' [ 1327.446019][T15332] I/O error, dev loop4, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1328.588431][T15344] loop4: detected capacity change from 0 to 33280 [ 1330.040648][T15332] I/O error, dev loop4, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1334.991186][T15366] loop4: detected capacity change from 0 to 33280 [ 1335.026777][T15366] ext4: Unknown parameter 'appraise_type' [ 1335.964727][T15374] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1335.971274][T15374] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1335.978856][T15374] vhci_hcd vhci_hcd.0: Device attached [ 1335.998072][T15375] vhci_hcd: connection closed [ 1336.009264][ T1142] vhci_hcd: stop threads [ 1336.067662][ T1142] vhci_hcd: release socket [ 1336.079273][ T1142] vhci_hcd: disconnect device [ 1336.612165][T15381] xt_hashlimit: max too large, truncated to 1048576 [ 1336.763154][T15383] loop4: detected capacity change from 0 to 33280 [ 1336.791491][T15383] ext4: Unknown parameter 'appraise_type' [ 1336.884072][T15368] I/O error, dev loop4, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1336.962645][T15386] loop4: detected capacity change from 0 to 33280 [ 1336.985491][T15386] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 1336.995463][T15386] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2192: inode #15: comm syz.4.2192: iget: illegal inode # [ 1337.018651][T15386] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2192: couldn't read orphan inode 15 (err -117) [ 1337.041396][T15386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1338.721715][ T8551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.640147][T15432] loop4: detected capacity change from 0 to 1024 [ 1343.775089][T15440] net_ratelimit: 11 callbacks suppressed [ 1343.775117][T15440] ip_tables: iptables: counters copy to user failed while replacing table [ 1351.861723][T15505] loop4: detected capacity change from 0 to 36864 [ 1351.869806][T15505] EXT4-fs: Ignoring removed orlov option [ 1351.895382][T15505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1352.924554][ T8551] EXT4-fs error (device loop4): ext4_lookup:1860: inode #11: comm syz-executor: iget: bad extra_isize 2336 (inode size 256) [ 1353.860818][ T8551] EXT4-fs error (device loop4): ext4_lookup:1860: inode #11: comm syz-executor: iget: bad extra_isize 2336 (inode size 256) [ 1357.174009][ T8551] bridge0: port 3(syz_tun) entered disabled state [ 1357.264872][ T8551] syz_tun (unregistering): left allmulticast mode [ 1357.440562][ T8551] bridge0: port 3(syz_tun) entered disabled state [ 1357.494392][ T8551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.437017][T15545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2242'. [ 1360.515288][T15551] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1360.527089][T15551] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1360.537223][T15551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1360.547069][T15551] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1360.557120][T15551] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1360.566389][T15551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1360.614506][T15550] rxe_eth0 speed is unknown, defaulting to 1000 [ 1360.742511][T15550] lo speed is unknown, defaulting to 1000 [ 1360.867770][T15550] chnl_net:caif_netlink_parms(): no params data found [ 1360.942339][T15550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.964219][T15550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.975836][T15550] bridge_slave_0: entered allmulticast mode [ 1360.990395][T15550] bridge_slave_0: entered promiscuous mode [ 1361.004823][T15550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.020884][T15550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.030764][T15550] bridge_slave_1: entered allmulticast mode [ 1361.038250][T15550] bridge_slave_1: entered promiscuous mode [ 1361.073288][T15550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.087861][T15550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.118551][T15550] team0: Port device team_slave_0 added [ 1361.126286][T15550] team0: Port device team_slave_1 added [ 1361.149223][T15550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.156203][T15550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1361.183096][T15550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.196335][T15550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.203512][T15550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1361.229591][T15550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.272400][T15550] hsr_slave_0: entered promiscuous mode [ 1361.278663][T15550] hsr_slave_1: entered promiscuous mode [ 1361.457029][T15550] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1361.467310][T15550] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1361.477334][T15550] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1361.487022][T15550] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1361.514465][T15550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.521591][T15550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.529913][T15550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.537014][T15550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.603724][T15550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.625351][T15550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.633104][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.639758][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.893572][T15550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.131392][T15550] veth0_vlan: entered promiscuous mode [ 1362.147664][T15550] veth1_vlan: entered promiscuous mode [ 1362.185422][T15550] veth0_macvtap: entered promiscuous mode [ 1362.198552][T15550] veth1_macvtap: entered promiscuous mode [ 1362.222231][T15550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.234004][T15550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.246292][T15550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.258395][T15550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.271505][T15550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.283430][T15550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.295798][T15550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.313572][T15550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.325291][T15550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.335391][T15550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.346270][T15550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.356455][T15550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.366963][T15550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.379066][T15550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.393720][T15550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.402856][T15550] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.412337][T15550] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.424536][T15550] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.539582][ T9635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.547464][ T9635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.598680][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.611074][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.671420][T12539] Bluetooth: hci2: command tx timeout [ 1364.750465][T12539] Bluetooth: hci2: command tx timeout [ 1366.865755][T12539] Bluetooth: hci2: command tx timeout [ 1369.007090][T12539] Bluetooth: hci2: command tx timeout [ 1372.262438][T15652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2263'. [ 1372.950991][T15646] syz.1.2262 (15646) used greatest stack depth: 17272 bytes left [ 1375.635662][T15678] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1375.642226][T15678] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1375.650161][T15678] vhci_hcd vhci_hcd.0: Device attached [ 1376.249067][ T973] vhci_hcd: vhci_device speed not set [ 1376.274107][T15679] vhci_hcd: connection closed [ 1376.274435][ T9635] vhci_hcd: stop threads [ 1376.319058][ T9635] vhci_hcd: release socket [ 1376.324345][ T9635] vhci_hcd: disconnect device [ 1376.339310][ T973] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1376.353230][ T973] usb 43-1: enqueue for inactive port 0 [ 1376.491882][ T973] vhci_hcd: vhci_device speed not set [ 1380.010504][T15704] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1380.017036][T15704] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1380.024666][T15704] vhci_hcd vhci_hcd.0: Device attached [ 1380.056677][T15705] vhci_hcd: connection closed [ 1380.057117][ T1096] vhci_hcd: stop threads [ 1380.122654][ T1096] vhci_hcd: release socket [ 1380.147467][ T1096] vhci_hcd: disconnect device [ 1386.367564][T12539] Bluetooth: hci2: command tx timeout [ 1390.587435][T15758] loop5: detected capacity change from 0 to 33280 [ 1390.595206][T15758] ext4: Unknown parameter 'appraise_type' [ 1390.766394][T15765] loop5: detected capacity change from 0 to 33280 [ 1391.157981][T15765] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 1391.169068][T15765] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2295: inode #15: comm syz.5.2295: iget: illegal inode # [ 1391.185009][T15765] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2295: couldn't read orphan inode 15 (err -117) [ 1391.622374][T15765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1391.817244][T15550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.406441][T15786] loop5: detected capacity change from 0 to 1024 [ 1394.529521][T15786] hfsplus: invalid xattr key length: 0 [ 1395.596966][ T9636] hfsplus: b-tree write err: -5, ino 8 [ 1401.099940][T15831] SET target dimension over the limit! [ 1402.027750][T15843] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2316'. [ 1403.421009][ T5869] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1404.184215][ T5869] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1404.193648][ T5869] usb 6-1: not running at top speed; connect to a high speed hub [ 1404.203943][ T5869] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1404.220581][ T5869] usb 6-1: string descriptor 0 read error: -22 [ 1404.226919][ T5869] usb 6-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 1404.237218][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.265552][T15851] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1404.285496][ T5869] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1404.383576][ T5869] usb 6-1: MIDIStreaming interface descriptor not found [ 1405.649399][T11011] usb 6-1: USB disconnect, device number 2 [ 1407.277729][T15889] loop5: detected capacity change from 0 to 33280 [ 1407.295136][T15889] ext4: Unknown parameter 'appraise_type' [ 1414.915417][T15945] loop5: detected capacity change from 0 to 33280 [ 1415.164982][T15945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1415.177757][T15945] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1415.400743][T15550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.416224][T15956] netlink: 'syz.1.2347': attribute type 12 has an invalid length. [ 1417.206837][T15976] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1417.220552][T15976] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1419.110967][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2353'. [ 1421.363861][T15999] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1421.370439][T15999] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1421.379070][T15999] vhci_hcd vhci_hcd.0: Device attached [ 1421.397983][T16004] vhci_hcd: connection closed [ 1421.398225][ T1142] vhci_hcd: stop threads [ 1421.424373][ T1142] vhci_hcd: release socket [ 1421.442425][ T1142] vhci_hcd: disconnect device [ 1423.199651][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.206997][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.778030][T16068] CIFS: Attempting to mount //127.0.0.1/share [ 1430.938105][T16075] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1430.944662][T16075] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1430.952193][T16075] vhci_hcd vhci_hcd.0: Device attached [ 1431.186584][T11011] vhci_hcd: vhci_device speed not set [ 1431.418256][T16081] vhci_hcd: connection closed [ 1431.440713][ T12] vhci_hcd: stop threads [ 1431.454162][ T12] vhci_hcd: release socket [ 1431.458691][ T12] vhci_hcd: disconnect device [ 1431.510158][T11011] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 1431.571553][T11011] usb 43-1: enqueue for inactive port 0 [ 1431.579860][T16068] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1431.704781][T11011] vhci_hcd: vhci_device speed not set [ 1433.431985][T16117] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2393'. [ 1433.885423][T16117] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1436.331606][T16141] netlink: 'syz.3.2401': attribute type 12 has an invalid length. [ 1446.601934][T16204] loop5: detected capacity change from 0 to 1024 [ 1449.669543][T16226] loop5: detected capacity change from 0 to 1024 [ 1451.290240][T16232] loop5: detected capacity change from 0 to 1024 [ 1452.513606][T16238] loop5: detected capacity change from 0 to 256 [ 1452.591242][T16238] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1454.764797][T16248] loop5: detected capacity change from 0 to 33280 [ 1454.791891][T16248] ext4: Unknown parameter 'appraise_type' [ 1460.882394][T16290] usb usb1: usbfs: process 16290 (syz.5.2437) did not claim interface 0 before use [ 1465.830990][T16324] loop5: detected capacity change from 0 to 33280 [ 1465.964696][T16324] ext4: Unknown parameter 'appraise_type' [ 1465.975528][T16325] overlayfs: failed to resolve './file1': -2 [ 1466.173930][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x82b4 instead [ 1466.193963][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x9a5e instead [ 1466.210063][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x3a18 instead [ 1466.919952][T16329] I/O error, dev loop5, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1466.930609][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x8c2e instead [ 1466.949313][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x99ac instead [ 1467.011230][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xaff5 instead [ 1467.026032][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x678e instead [ 1467.073462][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x41f8 instead [ 1467.095616][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x3c2e instead [ 1467.116841][T16339] loop5: detected capacity change from 0 to 33280 [ 1467.146540][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1a2d instead [ 1467.167536][T16339] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 1467.181159][T16339] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2445: inode #15: comm syz.5.2445: iget: illegal inode # [ 1467.197804][T16339] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2445: couldn't read orphan inode 15 (err -117) [ 1467.214660][T16339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1467.247589][T16326] jffs2: Further such events for this erase block will not be printed [ 1467.256852][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xa0b9 instead [ 1467.267650][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xe85c instead [ 1467.278585][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x0899 instead [ 1467.292558][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xf803 instead [ 1467.303382][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x4a18 instead [ 1467.318963][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x55db instead [ 1467.335929][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xe9ef instead [ 1467.349126][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xff62 instead [ 1467.364113][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x9d04 instead [ 1467.375747][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0xcb4e instead [ 1467.388591][T16326] jffs2: Further such events for this erase block will not be printed [ 1467.399128][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4291 instead [ 1467.409679][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x4800 instead [ 1467.422714][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xcf10 instead [ 1467.440109][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xb817 instead [ 1467.470522][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x6093 instead [ 1467.498988][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x5237 instead [ 1467.525151][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x476e instead [ 1467.548853][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0xaa37 instead [ 1467.606377][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x203a instead [ 1467.640382][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x573c instead [ 1467.668066][T16326] jffs2: Further such events for this erase block will not be printed [ 1467.691787][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4bb7 instead [ 1467.722603][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x80dd instead [ 1467.747169][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x29c0 instead [ 1467.778973][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xc278 instead [ 1467.813870][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x19bc instead [ 1467.838981][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x3967 instead [ 1467.888218][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x1d06 instead [ 1467.916222][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xa983 instead [ 1467.939207][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xbfec instead [ 1467.974151][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xe914 instead [ 1467.996991][T16326] jffs2: Further such events for this erase block will not be printed [ 1468.008722][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x7139 instead [ 1468.045874][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x28e2 instead [ 1468.064420][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xbe89 instead [ 1468.087449][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x266a instead [ 1468.110327][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0xd848 instead [ 1468.126724][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xca3e instead [ 1468.143311][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x23b1 instead [ 1468.155320][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xea4e instead [ 1468.166331][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0xbf4c instead [ 1468.183704][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xc222 instead [ 1468.201865][T16326] jffs2: Further such events for this erase block will not be printed [ 1468.223489][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xd723 instead [ 1468.242810][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x8c56 instead [ 1468.263483][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0xec6c instead [ 1468.275440][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x7ba2 instead [ 1468.304918][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xbf9b instead [ 1468.316848][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x6dcf instead [ 1468.334783][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xa401 instead [ 1468.352156][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x6b1f instead [ 1468.367718][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0xa166 instead [ 1468.380212][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xe76a instead [ 1468.395414][T16326] jffs2: Further such events for this erase block will not be printed [ 1468.421605][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0xc809 instead [ 1468.436099][T15550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.453514][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x02a7 instead [ 1468.517306][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x1617 instead [ 1468.554045][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xff9d instead [ 1468.574513][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xbe3c instead [ 1468.591822][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x9d1e instead [ 1469.548964][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xa7ff instead [ 1469.590322][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x5976 instead [ 1469.635073][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xa155 instead [ 1469.655852][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x9f57 instead [ 1469.672520][T16326] jffs2: Further such events for this erase block will not be printed [ 1469.683294][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x8d65 instead [ 1469.694107][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xe201 instead [ 1469.706071][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xff30 instead [ 1469.717463][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x1bbf instead [ 1469.732557][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x4962 instead [ 1469.743715][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x9f5c instead [ 1469.755198][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf04f instead [ 1469.765908][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0xfbed instead [ 1469.776621][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x013a instead [ 1469.795578][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x4d6d instead [ 1469.807126][T16326] jffs2: Further such events for this erase block will not be printed [ 1469.815871][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x50d3 instead [ 1469.826500][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x4033 instead [ 1469.855316][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x7dde instead [ 1469.876446][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0xd5fa instead [ 1469.898985][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0xe1a9 instead [ 1469.929001][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xa18a instead [ 1469.948945][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xa311 instead [ 1469.970782][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xe304 instead [ 1469.998939][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x8952 instead [ 1470.020990][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xecbf instead [ 1470.041902][T16326] jffs2: Further such events for this erase block will not be printed [ 1470.069629][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xde33 instead [ 1470.113955][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0xc89d instead [ 1470.134898][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x21a1 instead [ 1470.159265][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x22ac instead [ 1470.189139][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x402c instead [ 1470.210287][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xf13a instead [ 1470.236311][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x28f1 instead [ 1470.275698][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x1c37 instead [ 1470.310485][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x542b instead [ 1470.330378][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xf1c0 instead [ 1470.355372][T16326] jffs2: Further such events for this erase block will not be printed [ 1470.369492][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x210d instead [ 1470.388751][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x5061 instead [ 1470.419030][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x06dc instead [ 1470.438936][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xd308 instead [ 1470.458927][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x8f66 instead [ 1470.489000][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xe193 instead [ 1470.508914][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xc5ee instead [ 1470.528923][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x63eb instead [ 1470.559272][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x6ca2 instead [ 1470.578954][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x2246 instead [ 1470.598937][T16326] jffs2: Further such events for this erase block will not be printed [ 1470.624601][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xf717 instead [ 1470.649061][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x2177 instead [ 1470.685511][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x54e7 instead [ 1470.708915][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x5cf4 instead [ 1470.742831][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xd6df instead [ 1470.790021][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x0733 instead [ 1470.820977][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5c60 instead [ 1470.832803][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0xb8bb instead [ 1470.866869][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xcbb2 instead [ 1470.896079][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x802c instead [ 1470.952957][T16326] jffs2: Further such events for this erase block will not be printed [ 1471.937517][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x7f4a instead [ 1471.990769][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x63e7 instead [ 1472.458987][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xf9ec instead [ 1472.557556][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x07a1 instead [ 1472.583615][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x7fce instead [ 1473.265516][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x4d19 instead [ 1473.280965][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xa798 instead [ 1473.293163][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xa249 instead [ 1473.304732][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x4180 instead [ 1473.316338][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x85c9 instead [ 1473.327834][T16326] jffs2: Further such events for this erase block will not be printed [ 1473.338296][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x5c9a instead [ 1473.350115][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x17b1 instead [ 1473.361563][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x26b1 instead [ 1473.380834][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xb8a5 instead [ 1473.392707][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xb0cd instead [ 1473.404161][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xf013 instead [ 1473.417268][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x0e14 instead [ 1473.435496][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x7193 instead [ 1473.458033][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xfb89 instead [ 1473.482946][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x6b4c instead [ 1473.533760][T16326] jffs2: Further such events for this erase block will not be printed [ 1473.563972][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x748b instead [ 1473.635197][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x123a instead [ 1473.651350][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xc54e instead [ 1473.663157][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xd0c7 instead [ 1473.674636][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x2b2e instead [ 1473.686234][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xe762 instead [ 1473.697653][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x4681 instead [ 1473.717315][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x05d7 instead [ 1473.745480][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x19ab instead [ 1473.768634][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0xd219 instead [ 1473.780859][T16326] jffs2: Further such events for this erase block will not be printed [ 1473.791031][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xe644 instead [ 1473.804121][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x6663 instead [ 1473.838686][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xd635 instead [ 1473.853620][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xb669 instead [ 1473.900367][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x95f3 instead [ 1473.954868][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x76df instead [ 1473.993820][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x85ae instead [ 1474.017084][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x2bd5 instead [ 1474.054892][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xd4d5 instead [ 1474.100302][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xe23c instead [ 1474.115577][T16326] jffs2: Further such events for this erase block will not be printed [ 1474.128501][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x6806 instead [ 1474.140866][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x626f instead [ 1476.250089][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x6e72 instead [ 1476.280247][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x0490 instead [ 1476.290760][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0xe228 instead [ 1476.301224][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0xbf77 instead [ 1476.311655][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x1f5e instead [ 1476.322061][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x710b instead [ 1476.332486][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x042d instead [ 1476.343724][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0xcb8c instead [ 1476.355227][T16326] jffs2: Further such events for this erase block will not be printed [ 1476.363884][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0xf10b instead [ 1476.378994][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x1446 instead [ 1476.397763][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x5e91 instead [ 1476.415480][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0xbb36 instead [ 1476.446820][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xedb6 instead [ 1476.458664][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0xdf3b instead [ 1476.469150][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xa963 instead [ 1476.483439][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0xfb5b instead [ 1476.544381][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x4827 instead [ 1476.563141][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0xba98 instead [ 1476.586746][T16326] jffs2: Further such events for this erase block will not be printed [ 1476.609421][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0xf912 instead [ 1476.650357][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x3140 instead [ 1476.662384][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0xc239 instead [ 1476.674439][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x3dcf instead [ 1476.686310][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0xb392 instead [ 1476.698217][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x9b56 instead [ 1476.714528][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x0c36 instead [ 1476.739608][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0xe741 instead [ 1476.763379][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x7f2c instead [ 1476.785226][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0xb9b4 instead [ 1476.814397][T16326] jffs2: Further such events for this erase block will not be printed [ 1476.841259][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x1bf4 instead [ 1476.863205][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0xd978 instead [ 1476.890476][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x62ee instead [ 1476.913978][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x4303 instead [ 1476.940403][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x1a70 instead [ 1476.963648][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0xf62c instead [ 1476.989277][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xc0ab instead [ 1477.019924][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x48b0 instead [ 1477.049983][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x37ac instead [ 1477.083117][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x1513 instead [ 1477.110072][T16326] jffs2: Further such events for this erase block will not be printed [ 1477.130638][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x1a6c instead [ 1477.153300][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0xc000 instead [ 1477.180434][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x590a instead [ 1477.202756][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0xbf37 instead [ 1477.229426][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x3384 instead [ 1477.249917][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x7ff2 instead [ 1477.273772][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd81b instead [ 1477.300552][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0xc963 instead [ 1477.325441][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0xef8a instead [ 1477.350342][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0xca84 instead [ 1477.372634][T16326] jffs2: Further such events for this erase block will not be printed [ 1477.417044][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x6c18 instead [ 1477.440504][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x5d34 instead [ 1477.462242][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x48f3 instead [ 1477.489395][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x14be instead [ 1477.509884][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x785c instead [ 1477.530417][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x9688 instead [ 1477.560317][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xdec0 instead [ 1477.600001][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x7343 instead [ 1477.620282][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x2d67 instead [ 1477.640525][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x2437 instead [ 1477.672012][T16326] jffs2: Further such events for this erase block will not be printed [ 1477.693600][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x059b instead [ 1477.719872][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x8887 instead [ 1477.739393][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0xdd98 instead [ 1477.769758][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0xb7c0 instead [ 1477.790649][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x1dc4 instead [ 1477.819926][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0xe137 instead [ 1477.842643][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xcfaf instead [ 1477.860422][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0xe9af instead [ 1477.880465][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x0f1f instead [ 1477.906443][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x7a28 instead [ 1477.940023][T16326] jffs2: Further such events for this erase block will not be printed [ 1477.948464][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0xaf40 instead [ 1477.962789][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x5e4f instead [ 1477.974644][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x80b5 instead [ 1477.994733][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x5aef instead [ 1478.020015][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x3f7e instead [ 1478.031370][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x9a4e instead [ 1478.047706][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x1192 instead [ 1478.064980][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x1b86 instead [ 1478.076811][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0xacd4 instead [ 1478.092852][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x25c8 instead [ 1478.105133][T16326] jffs2: Further such events for this erase block will not be printed [ 1478.115130][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x2e80 instead [ 1478.126919][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0xe6af instead [ 1478.143049][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x78c6 instead [ 1478.154913][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x7468 instead [ 1478.170315][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x6c02 instead [ 1478.181969][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0xfc85 instead [ 1478.193362][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x2cb0 instead [ 1478.207849][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x4268 instead [ 1478.229976][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x6c81 instead [ 1478.241618][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0xe279 instead [ 1478.261032][T16326] jffs2: Further such events for this erase block will not be printed [ 1478.280284][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0xde6c instead [ 1478.291701][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x5deb instead [ 1478.303168][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0xe9e3 instead [ 1478.314247][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0xaa00 instead [ 1478.328568][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0xd377 instead [ 1478.341491][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x14b1 instead [ 1478.353428][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x3a97 instead [ 1478.366205][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x7f50 instead [ 1478.378509][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xaa38 instead [ 1478.390431][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x2bb1 instead [ 1478.403025][T16326] jffs2: Further such events for this erase block will not be printed [ 1478.412903][T16326] jffs2: Old JFFS2 bitmask found at 0x00019544 [ 1478.427136][T16326] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 1478.436524][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x06ad instead [ 1478.448061][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x519a instead [ 1478.462914][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0xd8b0 instead [ 1478.475057][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x0a48 instead [ 1478.486420][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0xf800 instead [ 1478.498479][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x567a instead [ 1478.510365][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x03a7 instead [ 1478.528399][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x81af instead [ 1478.539730][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x5f98 instead [ 1478.553305][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0xb24e instead [ 1478.564097][T16326] jffs2: Further such events for this erase block will not be printed [ 1478.573628][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x47fc instead [ 1478.585731][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0xc09d instead [ 1478.597138][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0xc244 instead [ 1478.608527][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x08a5 instead [ 1478.620368][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0xfdcf instead [ 1478.634922][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x2fd6 instead [ 1478.646376][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd887 instead [ 1478.657722][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x752c instead [ 1478.672639][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x563b instead [ 1478.684103][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xe8fd instead [ 1478.695611][T16326] jffs2: Further such events for this erase block will not be printed [ 1478.706178][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x059d instead [ 1478.717595][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x8491 instead [ 1478.729887][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0xa134 instead [ 1478.741283][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x6990 instead [ 1478.755490][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x5648 instead [ 1478.766939][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0xe09a instead [ 1478.778337][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x0d1e instead [ 1478.790011][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x1296 instead [ 1478.804562][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xb4e9 instead [ 1478.815623][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xf4ec instead [ 1478.827125][T16326] jffs2: Further such events for this erase block will not be printed [ 1478.836042][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x0ef1 instead [ 1478.847072][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x192b instead [ 1478.858634][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0xb741 instead [ 1478.870102][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x87c2 instead [ 1478.884117][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0xc2c9 instead [ 1478.895251][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x3b86 instead [ 1478.907119][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xe33a instead [ 1478.918767][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0xaa71 instead [ 1478.930359][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0xbe1a instead [ 1478.942143][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x7f64 instead [ 1478.955205][T16326] jffs2: Further such events for this erase block will not be printed [ 1478.964787][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0xbeaa instead [ 1478.976162][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x88fc instead [ 1478.987620][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x12f6 instead [ 1478.999780][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x77e3 instead [ 1479.011492][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0xe389 instead [ 1479.023448][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x1310 instead [ 1479.035356][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xa439 instead [ 1479.048123][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x66a6 instead [ 1479.059932][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x6df7 instead [ 1479.071310][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x0bcb instead [ 1479.082771][T16326] jffs2: Further such events for this erase block will not be printed [ 1479.093959][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x736e instead [ 1479.105107][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x69fa instead [ 1479.115969][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0xa304 instead [ 1479.127216][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x1438 instead [ 1479.138541][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x9a40 instead [ 1479.150331][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x16d1 instead [ 1479.163918][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf6f5 instead [ 1479.175064][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x42f7 instead [ 1479.186110][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x2f75 instead [ 1479.197595][T16326] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x85ca instead [ 1479.210007][T16326] jffs2: Further such events for this erase block will not be printed [ 1479.218411][T16326] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1479.232668][T16326] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1479.351836][T16400] CIFS: Attempting to mount //127.0.0.1/share [ 1479.361501][T16400] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1479.369651][T16400] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1485.026620][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.045022][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.341202][T16451] loop5: detected capacity change from 0 to 512 [ 1486.363389][T16451] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1487.432894][T15551] Bluetooth: hci2: command 0x0406 tx timeout [ 1490.545040][T16488] loop5: detected capacity change from 0 to 1024 [ 1491.801635][ T28] audit: type=1326 audit(1794567366.532:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16490 comm="syz.0.2491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d291a94d9 code=0x0 [ 1492.006323][T16496] Cannot find add_set index 0 as target [ 1495.280487][ T5937] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1495.848592][ T5937] usb 6-1: device descriptor read/64, error -71 [ 1496.260911][ T5937] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1496.951645][ T5937] usb 6-1: device descriptor read/64, error -71 [ 1497.070593][ T5937] usb usb6-port1: attempt power cycle [ 1500.117111][T16549] loop5: detected capacity change from 0 to 33280 [ 1500.361683][T16549] ext4: Unknown parameter 'appraise_type' [ 1504.920163][ T790] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1505.343171][ T790] usb 6-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 1505.379539][ T790] usb 6-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1505.420102][ T790] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1505.444307][ T790] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1505.548409][ T790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.567381][ T790] usb 6-1: config 0 descriptor?? [ 1506.248169][T16603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1506.826744][T16604] overlayfs: failed to clone lowerpath [ 1506.960670][T16606] 9pnet_fd: Insufficient options for proto=fd [ 1507.887477][ T790] usb 6-1: string descriptor 0 read error: -71 [ 1508.289106][T16616] xt_connbytes: Forcing CT accounting to be enabled [ 1508.295826][T16616] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1508.702154][T16615] netlink: 'syz.0.2519': attribute type 7 has an invalid length. [ 1509.013294][ T790] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1509.080746][ T790] usb 6-1: USB disconnect, device number 6 [ 1513.973439][T16659] loop5: detected capacity change from 0 to 164 [ 1514.561477][T16659] rock: directory entry would overflow storage [ 1514.567681][T16659] rock: sig=0x5252, size=5, remaining=3 [ 1514.574764][T16659] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1517.476907][T16681] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1517.483492][T16681] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1517.491354][T16681] vhci_hcd vhci_hcd.0: Device attached [ 1517.663980][T16682] vhci_hcd: connection closed [ 1517.687145][ T11] vhci_hcd: stop threads [ 1517.820629][ T973] vhci_hcd: vhci_device speed not set [ 1517.853818][ T11] vhci_hcd: release socket [ 1517.942822][ T11] vhci_hcd: disconnect device [ 1518.024898][ T973] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 1518.164641][ T973] usb 43-1: enqueue for inactive port 0 [ 1518.343403][ T973] vhci_hcd: vhci_device speed not set [ 1519.635291][T16694] loop5: detected capacity change from 0 to 33280 [ 1519.660281][T16694] ext4: Unknown parameter 'appraise_type' [ 1522.302219][T16711] loop5: detected capacity change from 0 to 1024 [ 1523.578335][T16726] loop5: detected capacity change from 0 to 1024 [ 1524.443044][T16729] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1524.454084][T16729] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1524.485369][T16660] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1526.176317][T16739] loop5: detected capacity change from 0 to 33280 [ 1526.190945][T16739] ext4: Unknown parameter 'appraise_type' [ 1527.909090][T16753] loop5: detected capacity change from 0 to 128 [ 1528.252558][T16760] xt_connbytes: Forcing CT accounting to be enabled [ 1528.262473][T16760] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1530.808392][T16777] loop5: detected capacity change from 0 to 1024 [ 1531.909094][T16791] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1531.915660][T16791] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1531.923221][T16791] vhci_hcd vhci_hcd.0: Device attached [ 1532.001574][T16790] netlink: 'syz.3.2562': attribute type 1 has an invalid length. [ 1532.148652][ T5871] vhci_hcd: vhci_device speed not set [ 1532.207285][T16792] vhci_hcd: connection closed [ 1532.207775][ T9635] vhci_hcd: stop threads [ 1532.218161][ T9635] vhci_hcd: release socket [ 1532.222873][ T9635] vhci_hcd: disconnect device [ 1532.241128][T16790] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1532.269039][ T5871] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 1532.276638][ T5871] usb 43-1: enqueue for inactive port 0 [ 1532.379127][ T5871] vhci_hcd: vhci_device speed not set [ 1533.000548][T16802] overlayfs: failed to clone lowerpath [ 1533.700451][T16803] 9pnet_fd: Insufficient options for proto=fd [ 1534.815913][T16812] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1542.474449][T16861] loop5: detected capacity change from 0 to 1024 [ 1542.553928][T16866] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1544.026658][T16861] hfsplus: request for non-existent node 33554434 in B*Tree [ 1544.115307][T16861] hfsplus: request for non-existent node 33554434 in B*Tree [ 1544.178244][T16861] hfsplus: request for non-existent node 33554434 in B*Tree [ 1544.305761][T16861] hfsplus: request for non-existent node 33554434 in B*Tree [ 1544.463525][T16861] hfsplus: request for non-existent node 33554434 in B*Tree [ 1544.525424][T16861] hfsplus: request for non-existent node 33554434 in B*Tree [ 1545.946044][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.953609][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.374235][T16910] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1554.315921][T16949] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1560.064227][T16989] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1560.367776][T16993] virtio-fs: tag not found [ 1570.108270][T17071] xt_connbytes: Forcing CT accounting to be enabled [ 1570.115071][T17071] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1571.978700][T17087] netlink: 'syz.3.2636': attribute type 1 has an invalid length. [ 1572.015518][T17087] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1573.846255][T17112] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1577.686573][T17137] netlink: 'syz.0.2648': attribute type 1 has an invalid length. [ 1577.762590][T17137] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1579.131769][T17157] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1579.366819][T17159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1579.444888][T17160] overlayfs: failed to resolve 'upper': -2 [ 1582.182126][T17183] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 1582.252209][T17183] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1583.213618][T17201] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1585.133817][T17218] netlink: 'syz.0.2670': attribute type 1 has an invalid length. [ 1585.244843][T17218] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1587.541873][T17243] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1588.621776][T17254] netlink: 'syz.5.2680': attribute type 1 has an invalid length. [ 1589.390436][T17254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1589.500054][T17262] bond1: (slave gretap1): making interface the new active one [ 1589.522492][T17262] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1592.224715][T17299] netlink: 'syz.1.2693': attribute type 1 has an invalid length. [ 1592.297461][T17299] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1595.285559][T17327] netlink: 'syz.0.2702': attribute type 1 has an invalid length. [ 1596.040751][T17327] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1600.201972][T17387] netlink: 'syz.3.2715': attribute type 1 has an invalid length. [ 1600.251792][T17387] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1601.994863][T17417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1603.224385][T17432] netlink: 'syz.1.2732': attribute type 1 has an invalid length. [ 1603.340679][T17432] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1607.028113][T17470] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 1607.243225][T17470] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1607.384473][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.396830][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.644253][T17525] netlink: 'syz.5.2757': attribute type 1 has an invalid length. [ 1611.683339][T17525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1614.711550][T17555] netlink: 'syz.5.2767': attribute type 1 has an invalid length. [ 1614.755802][T17555] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1616.294014][T17575] virtio-fs: tag not found [ 1617.921614][T17590] netlink: 'syz.5.2776': attribute type 1 has an invalid length. [ 1618.055349][T17590] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1621.332976][T17626] netlink: 'syz.5.2787': attribute type 1 has an invalid length. [ 1621.574738][T17626] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1624.244744][T17661] netlink: 'syz.0.2796': attribute type 1 has an invalid length. [ 1624.365441][T17661] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1626.892306][T17695] netlink: 'syz.0.2807': attribute type 1 has an invalid length. [ 1626.919152][T17695] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1627.608229][T17704] rxe_eth0 speed is unknown, defaulting to 1000 [ 1627.791693][T17704] lo speed is unknown, defaulting to 1000 [ 1628.037065][T12539] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1629.981572][T17731] netlink: 'syz.5.2816': attribute type 1 has an invalid length. [ 1630.061690][T17731] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1630.405642][T17738] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2818'. [ 1631.875944][T17748] ip_tables: iptables: counters copy to user failed while replacing table [ 1632.809738][T17757] netlink: 'syz.5.2826': attribute type 1 has an invalid length. [ 1632.872720][T17757] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1633.636399][T17770] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1636.447190][T17786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2834'. [ 1636.851537][T17790] netlink: 'syz.1.2836': attribute type 1 has an invalid length. [ 1637.014237][T17790] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1638.448885][T17817] ±ÿ)”ëfl: renamed from lo (while UP) [ 1639.005095][T17826] netlink: 'syz.0.2846': attribute type 1 has an invalid length. [ 1639.073873][T17826] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1639.261313][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'. [ 1639.274608][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'. [ 1639.285042][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'. [ 1639.296608][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'. [ 1639.306750][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'. [ 1639.316502][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'. [ 1639.643836][T17841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2849'. [ 1641.767480][T17861] netlink: 'syz.5.2857': attribute type 1 has an invalid length. [ 1641.807689][T17861] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1643.543330][T17880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2862'. [ 1644.902290][T17898] netlink: 'syz.5.2868': attribute type 1 has an invalid length. [ 1644.975232][T17898] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1646.592955][T17917] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1648.534765][T17939] netlink: 'syz.5.2879': attribute type 1 has an invalid length. [ 1648.604661][T17939] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1648.622619][T17941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2878'. [ 1649.871610][ T973] libceph: connect (1)0.0.0.0:6789 error -22 [ 1649.878036][ T973] libceph: mon0 (1)0.0.0.0:6789 connect error [ 1649.934289][ T28] audit: type=1326 audit(1794567524.662:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17955 comm="syz.3.2884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e95a94d9 code=0x7ffc0000 [ 1650.026910][T17964] bond_slave_0: entered promiscuous mode [ 1650.033256][T17964] bond_slave_1: entered promiscuous mode [ 1650.038961][T17964] geneve1: entered promiscuous mode [ 1650.044821][T17964] bridge0: entered promiscuous mode [ 1650.052422][T17964] vlan0: entered promiscuous mode [ 1650.057521][T17964] bond0: entered promiscuous mode [ 1650.060449][ T28] audit: type=1326 audit(1794567524.692:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17955 comm="syz.3.2884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e95a94d9 code=0x7ffc0000 [ 1650.092711][ T28] audit: type=1326 audit(1794567524.692:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17955 comm="syz.3.2884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f95e95a94d9 code=0x7ffc0000 [ 1650.155461][ T28] audit: type=1326 audit(1794567524.692:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17955 comm="syz.3.2884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e95a94d9 code=0x7ffc0000 [ 1650.192425][ T28] audit: type=1326 audit(1794567524.722:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17955 comm="syz.3.2884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f95e95a94d9 code=0x7ffc0000 [ 1650.193731][T11011] libceph: connect (1)0.0.0.0:6789 error -22 [ 1650.237813][ T28] audit: type=1326 audit(1794567524.722:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17955 comm="syz.3.2884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e95a94d9 code=0x7ffc0000 [ 1650.275148][T11011] libceph: mon0 (1)0.0.0.0:6789 connect error [ 1650.294801][ T28] audit: type=1326 audit(1794567524.722:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17955 comm="syz.3.2884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e95a94d9 code=0x7ffc0000 [ 1650.326314][ T28] audit: type=1326 audit(1794567524.722:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17955 comm="syz.3.2884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f95e95a94d9 code=0x7ffc0000 [ 1650.368683][ T28] audit: type=1326 audit(1794567524.722:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17955 comm="syz.3.2884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e95a94d9 code=0x7ffc0000 [ 1650.407703][ T28] audit: type=1326 audit(1794567524.722:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17955 comm="syz.3.2884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f95e95a94d9 code=0x7ffc0000 [ 1650.809462][T11011] libceph: connect (1)0.0.0.0:6789 error -22 [ 1650.815629][T11011] libceph: mon0 (1)0.0.0.0:6789 connect error [ 1651.009088][T17957] ceph: No mds server is up or the cluster is laggy [ 1651.223534][T17978] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1652.073533][T17983] netlink: 'syz.3.2890': attribute type 1 has an invalid length. [ 1652.190469][T17983] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1653.326120][T18003] x_tables: duplicate underflow at hook 1 [ 1653.916862][T18005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2895'. [ 1655.171537][T18025] netlink: 'syz.0.2902': attribute type 1 has an invalid length. [ 1656.235473][T18025] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1656.294689][T18030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1656.380266][T18036] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1657.337240][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2907'. [ 1659.606464][T18066] netlink: 'syz.1.2913': attribute type 1 has an invalid length. [ 1659.917138][T18066] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1660.461963][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2917'. [ 1660.692432][T18084] xfrm0: entered allmulticast mode [ 1660.713204][T18084] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1660.746216][T18085] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1660.819681][T18084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1660.841476][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1661.525023][T18097] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1661.711183][T18102] netlink: 'syz.1.2923': attribute type 1 has an invalid length. [ 1661.863683][T18102] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1663.911381][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2929'. [ 1664.412017][T18138] netlink: 'syz.0.2934': attribute type 1 has an invalid length. [ 1664.571562][T18138] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1665.001675][T18152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2944'. [ 1668.306812][T18187] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1668.851978][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.858576][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.341075][T18221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2953'. [ 1674.608055][T18243] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1676.443370][T18267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2967'. [ 1679.425978][T18303] netlink: 'syz.5.2978': attribute type 1 has an invalid length. [ 1679.829915][T18303] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1684.980389][T18354] netlink: 'syz.0.2992': attribute type 1 has an invalid length. [ 1685.051182][T18354] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1691.806899][T18410] netlink: 'syz.0.3007': attribute type 1 has an invalid length. [ 1692.678617][T18410] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1699.926211][T18483] netlink: 'syz.5.3024': attribute type 1 has an invalid length. [ 1700.087887][T18483] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1703.656317][T18523] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1706.221336][T18540] netlink: 'syz.5.3038': attribute type 1 has an invalid length. [ 1706.322741][T18540] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1708.985027][T18569] 9pnet_fd: Insufficient options for proto=fd [ 1709.495498][T18577] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 1709.678050][T18584] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1719.773653][T18664] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1727.198118][T18722] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1730.621041][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.627400][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.081294][T18771] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1738.722145][T18820] netlink: 'syz.1.3113': attribute type 1 has an invalid length. [ 1739.680467][T18820] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1740.599389][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 1743.027791][T18860] 9pnet_fd: Insufficient options for proto=fd [ 1752.537508][T18921] 9pnet_fd: Insufficient options for proto=fd [ 1753.373593][T18924] bridge0: port 4(netdevsim0) entered blocking state [ 1753.380496][T18924] bridge0: port 4(netdevsim0) entered disabled state [ 1753.387331][T18924] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1753.397009][T18924] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1753.406253][T18924] bridge0: port 4(netdevsim0) entered blocking state [ 1753.413006][T18924] bridge0: port 4(netdevsim0) entered listening state [ 1758.046549][T18957] netlink: 'syz.0.3135': attribute type 1 has an invalid length. [ 1758.166227][T18957] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1764.797017][T19039] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1768.668845][ C0] bridge0: port 4(netdevsim0) entered learning state [ 1768.802801][T19075] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.813089][T19075] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.825032][T19075] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.835816][T19075] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1769.526217][T19077] netlink: 'syz.0.3163': attribute type 1 has an invalid length. [ 1769.563297][T19077] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1779.241103][T19164] netlink: 'syz.3.3187': attribute type 1 has an invalid length. [ 1779.351008][T19164] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1781.139676][T19186] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1784.028843][ C0] bridge0: port 4(netdevsim0) entered forwarding state [ 1784.035776][ C0] bridge0: topology change detected, propagating [ 1790.856700][T19283] bridge0: port 4(netdevsim0) entered blocking state [ 1790.864622][T19283] bridge0: port 4(netdevsim0) entered disabled state [ 1790.872542][T19283] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1790.882005][T19283] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1790.890784][T19283] bridge0: port 4(netdevsim0) entered blocking state [ 1790.897553][T19283] bridge0: port 4(netdevsim0) entered listening state [ 1791.704262][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.710896][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1806.111854][T19386] overlayfs: failed to clone upperpath [ 1806.418811][ C1] bridge0: port 4(netdevsim0) entered learning state [ 1812.664731][T19440] netlink: 'syz.0.3246': attribute type 1 has an invalid length. [ 1812.943649][T19440] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1816.907676][T19475] Process accounting resumed [ 1820.066059][T19518] netlink: 'syz.0.3261': attribute type 1 has an invalid length. [ 1821.232797][T19518] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1821.731026][T19546] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3265'. [ 1821.778849][ C1] bridge0: port 4(netdevsim0) entered forwarding state [ 1821.779913][T19546] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3265'. [ 1821.785746][ C1] bridge0: topology change detected, propagating [ 1826.871639][T19599] netlink: 'syz.0.3276': attribute type 1 has an invalid length. [ 1827.706330][T19599] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1832.635340][T19644] smc: removing ib device syz1 [ 1834.942750][T19662] netlink: 'syz.3.3288': attribute type 1 has an invalid length. [ 1835.190443][T19662] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1839.900829][T19727] netlink: 'syz.0.3303': attribute type 1 has an invalid length. [ 1839.963056][T19727] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1841.071182][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3305'. [ 1849.795673][T19813] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1853.185158][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.193464][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.422838][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1854.422875][ T28] audit: type=1326 audit(1794567729.002:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19844 comm="syz.1.3328" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa97ba94d9 code=0x0 [ 1856.414609][T19876] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1858.738032][T19920] 9pnet_fd: Insufficient options for proto=fd [ 1861.464944][T19952] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1866.230085][T20028] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1867.350501][T20037] netlink: 'syz.0.3361': attribute type 1 has an invalid length. [ 1867.923923][T20037] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1879.505524][T20171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3387'. [ 1889.416666][T20304] autofs4:pid:20304:autofs_fill_super: called with bogus options [ 1890.304801][T20310] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1904.635389][T20487] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1906.385677][T20505] netlink: 'syz.1.3455': attribute type 1 has an invalid length. [ 1907.200840][T20505] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1910.180730][T20556] netlink: 'syz.1.3460': attribute type 1 has an invalid length. [ 1910.238414][T20556] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1914.585639][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.594472][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.620653][T20619] netlink: 'syz.1.3474': attribute type 1 has an invalid length. [ 1915.724752][T20619] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1915.858188][T20625] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1921.093135][T20674] netlink: 'syz.3.3486': attribute type 1 has an invalid length. [ 1921.128278][T20674] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1923.615541][ T28] audit: type=1326 audit(1794567798.302:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.5.3492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25affa94d9 code=0x7ffc0000 [ 1923.933558][ T28] audit: type=1326 audit(1794567798.302:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.5.3492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25affa94d9 code=0x7ffc0000 [ 1924.117256][ T28] audit: type=1326 audit(1794567798.302:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.5.3492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25affa94d9 code=0x7ffc0000 [ 1924.145479][ T28] audit: type=1326 audit(1794567798.302:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.5.3492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25affa94d9 code=0x7ffc0000 [ 1924.183689][ T28] audit: type=1326 audit(1794567798.312:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.5.3492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25affa94d9 code=0x7ffc0000 [ 1924.214465][ T28] audit: type=1326 audit(1794567798.312:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.5.3492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25affa94d9 code=0x7ffc0000 [ 1924.283198][ T28] audit: type=1326 audit(1794567798.312:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.5.3492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25affa94d9 code=0x7ffc0000 [ 1924.335085][ T28] audit: type=1326 audit(1794567798.312:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.5.3492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25affa94d9 code=0x7ffc0000 [ 1924.394254][ T28] audit: type=1326 audit(1794567798.312:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.5.3492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25affa94d9 code=0x7ffc0000 [ 1924.615881][ T28] audit: type=1326 audit(1794567798.322:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.5.3492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25affa94d9 code=0x7ffc0000 [ 1925.561140][T20722] netlink: 'syz.5.3497': attribute type 1 has an invalid length. [ 1925.628292][T20722] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1926.022631][T20726] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5785] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20726] [ 1928.523610][T20752] netlink: 'syz.0.3505': attribute type 1 has an invalid length. [ 1928.727550][T20752] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1935.901130][T20837] netlink: 'syz.0.3520': attribute type 1 has an invalid length. [ 1936.145529][T20837] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1936.206656][T20845] ip_tables: iptables: counters copy to user failed while replacing table [ 1939.788215][T20863] ================================================================== [ 1939.796333][T20863] BUG: KASAN: slab-use-after-free in nf_nat_ipv6_in+0x141/0x2c0 [ 1939.804081][T20863] Read of size 8 at addr ffff88804965c490 by task syz.0.3528/20863 [ 1939.812053][T20863] [ 1939.814452][T20863] CPU: 1 PID: 20863 Comm: syz.0.3528 Not tainted syzkaller #0 [ 1939.821910][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1939.831964][T20863] Call Trace: [ 1939.835256][T20863] [ 1939.838192][T20863] dump_stack_lvl+0x18c/0x250 [ 1939.842883][T20863] ? __lock_acquire+0x7eb0/0x7eb0 [ 1939.847914][T20863] ? show_regs_print_info+0x20/0x20 [ 1939.853120][T20863] ? load_image+0x420/0x420 [ 1939.857629][T20863] ? __virt_addr_valid+0x10c/0x380 [ 1939.862746][T20863] ? __virt_addr_valid+0x10c/0x380 [ 1939.867859][T20863] ? __virt_addr_valid+0x10c/0x380 [ 1939.872977][T20863] print_report+0xa8/0x210 [ 1939.877399][T20863] ? nf_nat_ipv6_in+0x141/0x2c0 [ 1939.882252][T20863] kasan_report+0x117/0x150 [ 1939.886764][T20863] ? nf_nat_ipv6_in+0x141/0x2c0 [ 1939.891623][T20863] nf_nat_ipv6_in+0x141/0x2c0 [ 1939.896300][T20863] ? nf_xfrm_me_harder+0x600/0x600 [ 1939.901408][T20863] ? group_show+0x130/0x130 [ 1939.905960][T20863] ? ipv6_defrag+0x2d6/0x3a0 [ 1939.910631][T20863] ? nf_xfrm_me_harder+0x600/0x600 [ 1939.915740][T20863] nf_hook_slow+0xb9/0x210 [ 1939.920229][T20863] br_nf_pre_routing_ipv6+0x55b/0x6a0 [ 1939.925646][T20863] ? br_nf_pre_routing_ipv6+0x3ea/0x6a0 [ 1939.931197][T20863] ? br_validate_ipv6+0x8d0/0x8d0 [ 1939.936228][T20863] ? br_nf_pre_routing_ipv6+0x6a0/0x6a0 [ 1939.941789][T20863] ? br_nf_pre_routing+0x6d5/0x1420 [ 1939.947000][T20863] ? br_nf_hook_thresh+0x4b0/0x4b0 [ 1939.952118][T20863] br_handle_frame+0x12fa/0x15b0 [ 1939.957079][T20863] ? verify_lock_unused+0x140/0x140 [ 1939.962288][T20863] ? br_handle_frame_dummy+0x10/0x10 [ 1939.967589][T20863] ? brport_get_ownership+0x80/0x80 [ 1939.972797][T20863] ? packet_rcv+0x172/0x1360 [ 1939.977468][T20863] ? br_handle_frame_dummy+0x10/0x10 [ 1939.982762][T20863] ? packet_sock_destruct+0x190/0x190 [ 1939.988139][T20863] __netif_receive_skb_core+0xf94/0x3ac0 [ 1939.993834][T20863] ? br_handle_frame_dummy+0x10/0x10 [ 1939.999127][T20863] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1940.005122][T20863] ? __lock_acquire+0x7eb0/0x7eb0 [ 1940.010149][T20863] ? __lock_acquire+0x135d/0x7eb0 [ 1940.015177][T20863] ? __kasan_slab_alloc+0x6c/0x80 [ 1940.020209][T20863] ? qdisc_run+0x230/0x230 [ 1940.024632][T20863] ? ktime_get_real_ts64+0x440/0x440 [ 1940.029925][T20863] ? read_lock_is_recursive+0x20/0x20 [ 1940.035305][T20863] __netif_receive_skb+0x74/0x290 [ 1940.040340][T20863] ? netif_receive_skb+0x106/0x720 [ 1940.045485][T20863] netif_receive_skb+0x1bc/0x720 [ 1940.050435][T20863] ? __bpf_trace_tasklet+0x160/0x160 [ 1940.055741][T20863] ? enqueue_to_backlog+0xe90/0xe90 [ 1940.060971][T20863] ? tun_rx_batched+0x186/0x790 [ 1940.065864][T20863] tun_rx_batched+0x1df/0x790 [ 1940.070557][T20863] ? pskb_may_pull+0xf0/0xf0 [ 1940.075151][T20863] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1940.080525][T20863] ? lockdep_hardirqs_on+0x98/0x150 [ 1940.085802][T20863] ? read_lock_is_recursive+0x20/0x20 [ 1940.091181][T20863] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1940.096556][T20863] ? _local_bh_enable+0xa0/0xa0 [ 1940.101412][T20863] tun_get_user+0x286c/0x3d30 [ 1940.106106][T20863] ? tun_get_user+0x667/0x3d30 [ 1940.110880][T20863] ? tun_get_user+0x2488/0x3d30 [ 1940.115738][T20863] ? rcu_read_unlock+0xa0/0xa0 [ 1940.120516][T20863] ? lockdep_hardirqs_on+0x98/0x150 [ 1940.125746][T20863] ? tun_get+0x1c/0x2e0 [ 1940.129902][T20863] ? __lock_acquire+0x7eb0/0x7eb0 [ 1940.134932][T20863] ? tun_get+0x1c/0x2e0 [ 1940.139082][T20863] tun_chr_write_iter+0x119/0x200 [ 1940.144102][T20863] vfs_write+0x474/0x9a0 [ 1940.148345][T20863] ? file_end_write+0x250/0x250 [ 1940.153194][T20863] ? __fget_files+0x3fc/0x460 [ 1940.157866][T20863] ? __fdget_pos+0x1d8/0x330 [ 1940.162453][T20863] ? ksys_write+0x74/0x260 [ 1940.166867][T20863] ksys_write+0x151/0x260 [ 1940.171192][T20863] ? __ia32_sys_read+0x90/0x90 [ 1940.175954][T20863] ? lockdep_hardirqs_on+0x98/0x150 [ 1940.181145][T20863] do_syscall_64+0x55/0xb0 [ 1940.185581][T20863] ? clear_bhb_loop+0x40/0x90 [ 1940.190267][T20863] ? clear_bhb_loop+0x40/0x90 [ 1940.194956][T20863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1940.200846][T20863] RIP: 0033:0x7f7d29169d0e [ 1940.205256][T20863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1940.224858][T20863] RSP: 002b:00007f7d29fddfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1940.233259][T20863] RAX: ffffffffffffffda RBX: 00007f7d29fde6c0 RCX: 00007f7d29169d0e [ 1940.241224][T20863] RDX: 000000000000008e RSI: 00002000000004c0 RDI: 00000000000000c8 [ 1940.249184][T20863] RBP: 00007f7d2923804e R08: 0000000000000000 R09: 0000000000000000 [ 1940.257140][T20863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1940.265100][T20863] R13: 00007f7d29426218 R14: 00007f7d29426180 R15: 00007fff843a1278 [ 1940.273069][T20863] [ 1940.276080][T20863] [ 1940.278384][T20863] Allocated by task 20863: [ 1940.282873][T20863] kasan_set_track+0x4e/0x70 [ 1940.287461][T20863] __kasan_slab_alloc+0x6c/0x80 [ 1940.292300][T20863] slab_post_alloc_hook+0x6a/0x4d0 [ 1940.297400][T20863] kmem_cache_alloc+0x17e/0x2d0 [ 1940.302240][T20863] build_skb+0x29/0x250 [ 1940.306408][T20863] __tun_build_skb+0x36/0x320 [ 1940.311087][T20863] tun_get_user+0x1cb8/0x3d30 [ 1940.315773][T20863] tun_chr_write_iter+0x119/0x200 [ 1940.320793][T20863] vfs_write+0x474/0x9a0 [ 1940.325039][T20863] ksys_write+0x151/0x260 [ 1940.329363][T20863] do_syscall_64+0x55/0xb0 [ 1940.333777][T20863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1940.339661][T20863] [ 1940.341988][T20863] Freed by task 20863: [ 1940.346129][T20863] kasan_set_track+0x4e/0x70 [ 1940.350713][T20863] kasan_save_free_info+0x28/0x40 [ 1940.355734][T20863] ____kasan_slab_free+0x126/0x1f0 [ 1940.360840][T20863] slab_free_freelist_hook+0x154/0x240 [ 1940.366285][T20863] kmem_cache_free+0xf8/0x290 [ 1940.370947][T20863] nft_do_chain+0x14d9/0x16d0 [ 1940.375608][T20863] nft_nat_do_chain+0x29b/0x380 [ 1940.380538][T20863] nf_nat_inet_fn+0x5dd/0xb20 [ 1940.385238][T20863] nf_nat_ipv6_fn+0x227/0x2e0 [ 1940.389901][T20863] nf_nat_ipv6_in+0xf1/0x2c0 [ 1940.394472][T20863] nf_hook_slow+0xb9/0x210 [ 1940.398877][T20863] br_nf_pre_routing_ipv6+0x55b/0x6a0 [ 1940.404235][T20863] br_handle_frame+0x12fa/0x15b0 [ 1940.409154][T20863] __netif_receive_skb_core+0xf94/0x3ac0 [ 1940.414771][T20863] __netif_receive_skb+0x74/0x290 [ 1940.419785][T20863] netif_receive_skb+0x1bc/0x720 [ 1940.424713][T20863] tun_rx_batched+0x1df/0x790 [ 1940.429378][T20863] tun_get_user+0x286c/0x3d30 [ 1940.434050][T20863] tun_chr_write_iter+0x119/0x200 [ 1940.439065][T20863] vfs_write+0x474/0x9a0 [ 1940.443297][T20863] ksys_write+0x151/0x260 [ 1940.447613][T20863] do_syscall_64+0x55/0xb0 [ 1940.452016][T20863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1940.457898][T20863] [ 1940.460206][T20863] The buggy address belongs to the object at ffff88804965c3c0 [ 1940.460206][T20863] which belongs to the cache skbuff_head_cache of size 240 [ 1940.474769][T20863] The buggy address is located 208 bytes inside of [ 1940.474769][T20863] freed 240-byte region [ffff88804965c3c0, ffff88804965c4b0) [ 1940.488553][T20863] [ 1940.490864][T20863] The buggy address belongs to the physical page: [ 1940.497325][T20863] page:ffffea0001259700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4965c [ 1940.507471][T20863] memcg:ffff8880245fad01 [ 1940.511690][T20863] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1940.519655][T20863] page_type: 0xffffffff() [ 1940.523976][T20863] raw: 00fff00000000800 ffff888141a5a000 ffffea0001c80480 dead000000000005 [ 1940.532553][T20863] raw: 0000000000000000 00000000800c000c 00000001ffffffff ffff8880245fad01 [ 1940.541116][T20863] page dumped because: kasan: bad access detected [ 1940.547521][T20863] page_owner tracks the page as allocated [ 1940.553219][T20863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x132820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_MEMALLOC|__GFP_HARDWALL), pid 18296, tgid 18289 (syz.3.2974), ts 1678899067652, free_ts 1678533506757 [ 1940.574563][T20863] post_alloc_hook+0x1c1/0x200 [ 1940.579314][T20863] get_page_from_freelist+0x2181/0x22a0 [ 1940.584844][T20863] __alloc_pages+0x1f0/0x460 [ 1940.589424][T20863] alloc_slab_page+0x5d/0x180 [ 1940.594093][T20863] new_slab+0x87/0x2d0 [ 1940.598148][T20863] ___slab_alloc+0xc5c/0x12f0 [ 1940.602814][T20863] kmem_cache_alloc_node+0x12e/0x320 [ 1940.608081][T20863] __alloc_skb+0x103/0x2c0 [ 1940.612490][T20863] __netdev_alloc_skb+0x10c/0x500 [ 1940.617499][T20863] __ieee80211_beacon_get+0xd5d/0x1520 [ 1940.622949][T20863] ieee80211_beacon_get_tim+0xbf/0x580 [ 1940.628389][T20863] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 1940.633919][T20863] __iterate_interfaces+0x225/0x4c0 [ 1940.639105][T20863] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1940.646113][T20863] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1940.651294][T20863] __hrtimer_run_queues+0x525/0xc10 [ 1940.656480][T20863] page last free stack trace: [ 1940.661138][T20863] free_unref_page_prepare+0x7d7/0x8f0 [ 1940.666584][T20863] free_unref_page+0x32/0x2e0 [ 1940.671247][T20863] tlb_finish_mmu+0x13e/0x220 [ 1940.675913][T20863] exit_mmap+0x428/0xb90 [ 1940.680143][T20863] __mmput+0x118/0x3a0 [ 1940.684194][T20863] exit_mm+0x23f/0x340 [ 1940.688251][T20863] do_exit+0x909/0x2530 [ 1940.692394][T20863] do_group_exit+0x22d/0x2f0 [ 1940.696967][T20863] get_signal+0x12a6/0x1390 [ 1940.701457][T20863] arch_do_signal_or_restart+0xc2/0x7b0 [ 1940.706993][T20863] exit_to_user_mode_loop+0x70/0x110 [ 1940.712271][T20863] exit_to_user_mode_prepare+0xee/0x180 [ 1940.717807][T20863] syscall_exit_to_user_mode+0x1a/0x50 [ 1940.723252][T20863] do_syscall_64+0x61/0xb0 [ 1940.727665][T20863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1940.733551][T20863] [ 1940.735855][T20863] Memory state around the buggy address: [ 1940.741465][T20863] ffff88804965c380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1940.749508][T20863] ffff88804965c400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1940.757552][T20863] >ffff88804965c480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 1940.765592][T20863] ^ [ 1940.770161][T20863] ffff88804965c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1940.778202][T20863] ffff88804965c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 1940.786252][T20863] ================================================================== [ 1940.794442][T20863] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1940.801641][T20863] CPU: 1 PID: 20863 Comm: syz.0.3528 Not tainted syzkaller #0 [ 1940.809109][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1940.819167][T20863] Call Trace: [ 1940.822442][T20863] [ 1940.825374][T20863] dump_stack_lvl+0x18c/0x250 [ 1940.830072][T20863] ? show_regs_print_info+0x20/0x20 [ 1940.835272][T20863] ? load_image+0x420/0x420 [ 1940.839772][T20863] panic+0x2ca/0x720 [ 1940.843650][T20863] ? bpf_jit_dump+0xd0/0xd0 [ 1940.848148][T20863] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1940.854021][T20863] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1940.859915][T20863] ? _raw_spin_unlock+0x40/0x40 [ 1940.864747][T20863] ? print_memory_metadata+0x314/0x400 [ 1940.870206][T20863] ? nf_nat_ipv6_in+0x141/0x2c0 [ 1940.875049][T20863] check_panic_on_warn+0x84/0xa0 [ 1940.879986][T20863] ? nf_nat_ipv6_in+0x141/0x2c0 [ 1940.884831][T20863] end_report+0x6f/0x130 [ 1940.889090][T20863] kasan_report+0x128/0x150 [ 1940.893590][T20863] ? nf_nat_ipv6_in+0x141/0x2c0 [ 1940.898440][T20863] nf_nat_ipv6_in+0x141/0x2c0 [ 1940.903130][T20863] ? nf_xfrm_me_harder+0x600/0x600 [ 1940.908273][T20863] ? group_show+0x130/0x130 [ 1940.912777][T20863] ? ipv6_defrag+0x2d6/0x3a0 [ 1940.917356][T20863] ? nf_xfrm_me_harder+0x600/0x600 [ 1940.922475][T20863] nf_hook_slow+0xb9/0x210 [ 1940.926881][T20863] br_nf_pre_routing_ipv6+0x55b/0x6a0 [ 1940.932242][T20863] ? br_nf_pre_routing_ipv6+0x3ea/0x6a0 [ 1940.937780][T20863] ? br_validate_ipv6+0x8d0/0x8d0 [ 1940.942819][T20863] ? br_nf_pre_routing_ipv6+0x6a0/0x6a0 [ 1940.948381][T20863] ? br_nf_pre_routing+0x6d5/0x1420 [ 1940.953585][T20863] ? br_nf_hook_thresh+0x4b0/0x4b0 [ 1940.958687][T20863] br_handle_frame+0x12fa/0x15b0 [ 1940.963631][T20863] ? verify_lock_unused+0x140/0x140 [ 1940.968824][T20863] ? br_handle_frame_dummy+0x10/0x10 [ 1940.974095][T20863] ? brport_get_ownership+0x80/0x80 [ 1940.979281][T20863] ? packet_rcv+0x172/0x1360 [ 1940.983853][T20863] ? br_handle_frame_dummy+0x10/0x10 [ 1940.989127][T20863] ? packet_sock_destruct+0x190/0x190 [ 1940.994493][T20863] __netif_receive_skb_core+0xf94/0x3ac0 [ 1941.000117][T20863] ? br_handle_frame_dummy+0x10/0x10 [ 1941.005397][T20863] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1941.011368][T20863] ? __lock_acquire+0x7eb0/0x7eb0 [ 1941.016386][T20863] ? __lock_acquire+0x135d/0x7eb0 [ 1941.021396][T20863] ? __kasan_slab_alloc+0x6c/0x80 [ 1941.026424][T20863] ? qdisc_run+0x230/0x230 [ 1941.030841][T20863] ? ktime_get_real_ts64+0x440/0x440 [ 1941.036164][T20863] ? read_lock_is_recursive+0x20/0x20 [ 1941.041549][T20863] __netif_receive_skb+0x74/0x290 [ 1941.046578][T20863] ? netif_receive_skb+0x106/0x720 [ 1941.051691][T20863] netif_receive_skb+0x1bc/0x720 [ 1941.056639][T20863] ? __bpf_trace_tasklet+0x160/0x160 [ 1941.061919][T20863] ? enqueue_to_backlog+0xe90/0xe90 [ 1941.067128][T20863] ? tun_rx_batched+0x186/0x790 [ 1941.071981][T20863] tun_rx_batched+0x1df/0x790 [ 1941.076668][T20863] ? pskb_may_pull+0xf0/0xf0 [ 1941.081287][T20863] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1941.086665][T20863] ? lockdep_hardirqs_on+0x98/0x150 [ 1941.091855][T20863] ? read_lock_is_recursive+0x20/0x20 [ 1941.097209][T20863] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1941.102567][T20863] ? _local_bh_enable+0xa0/0xa0 [ 1941.107437][T20863] tun_get_user+0x286c/0x3d30 [ 1941.112113][T20863] ? tun_get_user+0x667/0x3d30 [ 1941.116859][T20863] ? tun_get_user+0x2488/0x3d30 [ 1941.121703][T20863] ? rcu_read_unlock+0xa0/0xa0 [ 1941.126457][T20863] ? lockdep_hardirqs_on+0x98/0x150 [ 1941.131657][T20863] ? tun_get+0x1c/0x2e0 [ 1941.135796][T20863] ? __lock_acquire+0x7eb0/0x7eb0 [ 1941.140812][T20863] ? tun_get+0x1c/0x2e0 [ 1941.144962][T20863] tun_chr_write_iter+0x119/0x200 [ 1941.149978][T20863] vfs_write+0x474/0x9a0 [ 1941.154219][T20863] ? file_end_write+0x250/0x250 [ 1941.159060][T20863] ? __fget_files+0x3fc/0x460 [ 1941.163732][T20863] ? __fdget_pos+0x1d8/0x330 [ 1941.168324][T20863] ? ksys_write+0x74/0x260 [ 1941.172726][T20863] ksys_write+0x151/0x260 [ 1941.177043][T20863] ? __ia32_sys_read+0x90/0x90 [ 1941.181815][T20863] ? lockdep_hardirqs_on+0x98/0x150 [ 1941.186995][T20863] do_syscall_64+0x55/0xb0 [ 1941.191404][T20863] ? clear_bhb_loop+0x40/0x90 [ 1941.196081][T20863] ? clear_bhb_loop+0x40/0x90 [ 1941.200760][T20863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1941.206640][T20863] RIP: 0033:0x7f7d29169d0e [ 1941.211050][T20863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1941.230647][T20863] RSP: 002b:00007f7d29fddfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1941.239062][T20863] RAX: ffffffffffffffda RBX: 00007f7d29fde6c0 RCX: 00007f7d29169d0e [ 1941.247020][T20863] RDX: 000000000000008e RSI: 00002000000004c0 RDI: 00000000000000c8 [ 1941.254979][T20863] RBP: 00007f7d2923804e R08: 0000000000000000 R09: 0000000000000000 [ 1941.262933][T20863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1941.270895][T20863] R13: 00007f7d29426218 R14: 00007f7d29426180 R15: 00007fff843a1278 [ 1941.278858][T20863] [ 1941.282101][T20863] Kernel Offset: disabled [ 1941.286413][T20863] Rebooting in 86400 seconds..