last executing test programs: 1m24.606265566s ago: executing program 2 (id=996): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@minixdf}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0xe3}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4ab, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b2fc991555cf4f1b83cafc8889c21fcf"}}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1m24.471864969s ago: executing program 2 (id=998): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe"], 0x0}, 0x94) r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70b", 0xad}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 1m24.338751963s ago: executing program 2 (id=1004): clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0xb, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x8, 0x8, 0x25}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0xb495446df9a4632b, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getrusage(0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) close(r3) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x6, 0x7, 0x10021da0, 0x10000, 0xff, "42f407000000195a14c84953dc7e8e5aec7776", 0xfffffffe}) socket$inet_tcp(0x2, 0x1, 0x0) 1m23.857607954s ago: executing program 2 (id=1009): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x10) 1m23.793840426s ago: executing program 2 (id=1010): set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) socket(0x1d, 0x2, 0x6) 1m23.789398466s ago: executing program 2 (id=1011): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3f, 0xb604}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x1d7}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63d844d5d10acf23eb04c3f2e1150ff6608401", 0xa4}], 0x3}, 0x0) 1m8.059026776s ago: executing program 32 (id=1011): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3f, 0xb604}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x1d7}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63d844d5d10acf23eb04c3f2e1150ff6608401", 0xa4}], 0x3}, 0x0) 58.334146797s ago: executing program 3 (id=1054): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000900)={[{@fat=@nfs}, {@fat=@dos1xfloppy}, {@fat=@flush}, {@uni_xlateno}, {@utf8}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@fat=@check_strict}]}, 0x1, 0x38c, &(0x7f0000000380)="$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") r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000c40)=""/4096) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000000000e0300000000000000030000000000000c000000000000000000000002020000000000006161"], 0x0, 0x46}, 0x20) 56.415541175s ago: executing program 1 (id=1076): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r1, 0x0) setns(r4, 0x20000000) 55.485395548s ago: executing program 1 (id=1087): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)={0x6b0, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x14}}}}, [@NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x6, 0x16, 0x6c, 0x1b, 0x0, 0x24, 0x6, 0x12, 0x5, 0x6, 0x48, 0x4, 0x2, 0x9, 0x2b, 0x30, 0x30, 0x12, 0x30, 0xb, 0x60, 0x18, 0x6c, 0x5]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xd2, 0x3, 0x9, 0x1, 0x7, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x33f, 0x7, 0x2, 0x5, 0x2, 0x2, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x30, 0x30, 0xc235fef5c93822cd, 0x1, 0x4, 0xb, 0x1b, 0x2]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x6}, {0x1, 0x9}, {0x5, 0xa}, {0x1, 0x8}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x6}, {0x5, 0x1}, {0x3}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x6, 0xa}, {0x7, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x7, 0xa}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x8}, {0x5, 0x7}, {0x3, 0x8}, {0x6, 0x9}, {0x6, 0x9}, {0x7, 0x1}, {0x5}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0xa}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x4, 0x7}, {0x1, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0x6}, {0x4, 0x2}, {0x0, 0xa}, {0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x3, 0x1}, {0x4, 0x8}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x1}, {0x1, 0x8}, {0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x3}, {0x5, 0x7}, {0x6}, {0x3, 0x1}, {0x4, 0x8}, {0x4, 0x6}, {0x2, 0x6}, {0x5, 0x4}, {0x3, 0x6}, {0x6}, {0x4, 0x5}, {0x6, 0xa}, {0x1, 0x9}, {}, {0x5, 0x9}, {0x5, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x4}, {0x0, 0x6}, {0x6}, {0x7, 0x4}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0x7}, {0x2, 0x9}, {0x4, 0x9}, {0x1}, {0x7, 0x8}, {0x0, 0x3}, {0x5, 0x8}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1600, 0x4c6, 0x3, 0x9, 0x1, 0x9, 0x8000]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x60, 0x12, 0x12, 0xb, 0x30, 0x18, 0x12, 0x12, 0x2, 0x18, 0x24, 0xb]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x9, 0x0, 0x6, 0x1ba6, 0x7fff, 0x400]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x79e165c6a30fc95a, 0x4, 0x30, 0xc, 0xb, 0xc, 0xc, 0x18, 0x6, 0x12, 0x30, 0x28, 0x12, 0x4, 0x36, 0x3, 0x6, 0xb, 0x9, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x3, 0x2, 0x2, 0x48, 0x48, 0x48, 0x5, 0x3]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x4, 0xa}, {0x6, 0x4}, {0x7, 0x9}, {0x7}, {0x2, 0x9}, {0x4, 0x3}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x7}, {0x2, 0x5}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x6}, {0x2, 0x6}, {0x3, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x4, 0x1}, {0x2, 0x4}, {0x4}, {0x4, 0x4}, {0x4, 0x4}, {0x3, 0x8}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0x5}, {0x5, 0xa}, {0x4, 0xa}, {0x4, 0x5}, {0x2, 0x3}, {0x5, 0x8}, {0x1, 0xa}, {0x6, 0xa}, {0x4, 0x3}, {0x3, 0x18}, {0x0, 0x3}, {0x4, 0x9}, {0x2, 0xa}, {0x1, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x8}, {0x6, 0x7}, {0x3, 0x1}, {0x1}, {0x6, 0x2}, {0x7, 0x5}, {0x1, 0x9}, {0x7, 0x2}, {0x4, 0x3}, {0x3, 0x7}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0x6}, {0x1, 0xa}, {0x5, 0x5}, {0x7, 0x1}, {0x7, 0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x3, 0x6}, {0x2, 0x4}, {0x7, 0x2}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0x5}, {0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x6}, {0x6, 0x9}, {0x2, 0x2}, {0x1, 0xa}, {0x5, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0x8}, {0x6, 0x3}, {0x4, 0x3}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0x7}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x5, 0x6}, {0x7}, {0x0, 0x7}, {0x3, 0x3}, {0x3, 0x8}, {0x2, 0x1}, {0x7, 0x2}, {0x2, 0xa}, {0x2, 0x6}, {0x1}, {0x3, 0x2}, {0x2, 0x3}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x2}, {0x2, 0x7}, {0x1, 0x3}, {0x3}, {0x4, 0x4}, {0x2, 0x8}, {0x7, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7ff, 0xe5d, 0x3, 0x7, 0x2, 0x4, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x8}, {0x1}, {0x4, 0x1}, {0x7, 0x9}, {0x3, 0x3}, {0x3, 0x9}, {}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0x6}, {0x0, 0x2}, {0x0, 0x5}, {0x2, 0x6}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0xa}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x7}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xfff, 0x4, 0x10, 0x3, 0x6, 0x9, 0x22e6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x542c, 0x2, 0x2, 0x40, 0x7, 0xfff7, 0x0, 0x273]}}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x71, 0x4, 0x4, 0xc6, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8001, 0x2, 0x2, 0xc4, 0x5, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x0, 0x4}, {0x7, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x5, 0x8}, {0x6}, {0x4, 0x8}, {0x0, 0x9}, {0x6}, {0x7, 0x3}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x1, 0x4}, {0x0, 0x8}, {0x2, 0x1}, {0x3, 0x5}, {0x3, 0x8}, {0x1, 0x6}, {0x5, 0x3}, {0x5, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x7, 0xa}, {0x7, 0x2}, {0x5, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x3, 0x6}, {0x6, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x3, 0x7}, {0x2, 0x5}, {0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x4}, {0x1}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x8}, {0x7, 0x6}, {0x5, 0x2}, {0x7, 0x5}, {0x7, 0x7}, {0x5, 0x3}, {0x3, 0x9}, {0x3, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x5}, {0x2}, {0x3, 0xa}, {0x7, 0x4}, {0x0, 0x5}, {0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x0, 0xd, 0x9, 0xc08, 0x3, 0x6c2, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x9, 0x81, 0x3, 0x2, 0xc, 0x40]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0xa}, {0x0, 0xa}, {0x2, 0x8}, {0x7, 0x4}, {0x1, 0x7}, {0x2, 0x4}, {0x4, 0x8}, {0x3, 0x5}, {0x6, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6b, 0x5, 0x1, 0x1, 0xfff, 0x0, 0x6]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0xb, 0x7, 0x3, 0xffff, 0xd, 0x8000]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x1ff, 0x4, 0x6, 0x4, 0x1, 0x1a, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x2, 0x4, 0x200, 0x5, 0x9, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x9}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x7}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0x8}, {0x7, 0x7}, {0x6, 0xa}, {0x6, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x8}, {0x3, 0x5}, {0x0, 0x4}, {0x3}, {0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x2}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x7}, {0x2, 0x1}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0x3}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x4}, {0x7, 0x7}, {0x7, 0x6}, {0x2, 0xa}, {0x7, 0x8}, {0x1, 0xa}, {0x2}, {0x7, 0x4}, {0x1, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x220, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x200, 0x7, 0x3, 0x8, 0xe162, 0x1, 0x6]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xffff, 0x0, 0x6, 0x7fff, 0x1a4d, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x8, 0x1, 0x6, 0x1, 0x6, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x575, 0x26b3, 0x101, 0x1d, 0xa06e, 0x9, 0x0, 0x3]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0x1}, {0x0, 0x8}, {0x5, 0x5}, {0x7, 0x7}, {0x2, 0x4}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x1}, {0x6, 0x4}, {0x0, 0x4}, {0x6}, {0x2, 0x8}, {0x3, 0x3}, {0x1}, {0x4, 0xa}, {0x5, 0x3}, {0x5, 0x8}, {0x7, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x5, 0x1}, {0x7, 0x8}, {0x1, 0x4}, {0x0, 0x4}, {0x3}, {0x5, 0x1}, {0x5, 0xa}, {0x0, 0x1}, {0x7, 0xa}, {0x5, 0x9}, {0x1, 0xa}, {0x1, 0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x4, 0x5}, {}, {0x6, 0x2}, {0x5, 0xa}, {0x5, 0x1}, {0x5, 0x4}, {0x7, 0x3}, {0x0, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x5}, {0x4, 0xa}, {0x2, 0x9}, {0x3, 0xa}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xa350, 0x1000, 0x4, 0xe000, 0x5, 0x0, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5721, 0x0, 0x3, 0xdb87, 0x6, 0x200, 0x40, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x920, 0x7, 0xdc, 0x696, 0x93, 0x9, 0x7, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x3}, {0x0, 0x1}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x5}, {0x6, 0x4}, {0x7, 0x3}, {0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x7}, {0x7, 0x1}, {0x4, 0x3}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x1}, {0x3, 0xa}, {0x4, 0x6}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x6}, {0x3, 0xa}, {0x3, 0x8}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {}, {0x2, 0x6}, {0x0, 0x9}, {0x2}, {0x7, 0x6}, {0x2, 0x8}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x7}, {0x2, 0x2}, {0x5, 0x9}, {0x2, 0x3}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x1}, {0x6}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0x3}, {0x6, 0x6}, {0x1, 0x1}, {0x3}, {0x6, 0x8}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x16, 0x2, 0xc, 0x36, 0x24, 0x60, 0x30, 0x60, 0x5, 0x6c, 0x60, 0x16, 0x5, 0x9, 0x5, 0x6c, 0x6, 0x8, 0x6c, 0x6, 0x1b, 0x1, 0x36, 0x30, 0xb, 0x5, 0x2, 0x12]}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x9, 0x709, 0x3, 0x7, 0x0, 0x401]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x9, 0x5, 0x60, 0x36]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0xd, 0x5, 0xc, 0x9, 0x36, 0x2, 0x60, 0x48, 0x36, 0x24, 0xc, 0xae955c7d25aa0611, 0x9, 0x30, 0x12, 0x6, 0x1b, 0x6c, 0x60, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xed52, 0xfff, 0xd5d, 0xd, 0x6, 0x6, 0xcb03]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x5, 0x36, 0x0, 0xc, 0x36, 0x24, 0x4, 0x18, 0x12, 0x6, 0x6c, 0xc, 0x1, 0x1b, 0x4, 0xb, 0x60, 0x60, 0x39, 0x6, 0x6, 0x36, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x4, 0x2, 0x7ff, 0x800, 0x1, 0x9, 0x5]}}]}]}]}, 0x6b0}}, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) 55.321970072s ago: executing program 3 (id=1093): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable', 0xfd97) socket(0xb, 0x80000, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 55.01447178s ago: executing program 1 (id=1095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r3, 0x80079a0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x10000000000) 54.737892746s ago: executing program 0 (id=1099): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x60}, 0xc) 54.699315127s ago: executing program 0 (id=1100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000540a00f3ffffff0095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) 54.666968498s ago: executing program 0 (id=1101): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x16f3ba3e, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000240)="024bbc2c17066a3640bdb0b9aeab2ec8416cb8ef4b74e2a650684665c1cc03497116c85805c37271395b23abd838d1a3bbaca41a13c9a462b47b5a01b05ffa3004b6bc7ab4eb2e9cd2903c6bd99229d85b976feca88ef8ff2e946b5f809cef4fdbee0343e4812f8a9a4f3d4d183b1324c3e15f59e5f25fcb864fefb8727c33bee9b0e17857f3f06b284ad9cc47073cf2dcf5", 0x92}], 0x1}}], 0x1, 0x4001c00) 54.637484739s ago: executing program 0 (id=1103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x18, 0xb05, 0x70bd30, 0x25dfdbfe, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) 54.381774266s ago: executing program 3 (id=1104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000070601030000000000000000010000050900020073797a31000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x20000080) 54.361235076s ago: executing program 3 (id=1105): syz_emit_ethernet(0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="0380c2bbbbbbbbbb0800450000ce"], 0x0) 54.329622496s ago: executing program 3 (id=1106): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x40400) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000180)) 54.301279608s ago: executing program 0 (id=1107): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x1e8, 0x0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x8, 0x5365}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x401}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 54.21781206s ago: executing program 0 (id=1108): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e640000"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x43405, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 54.21773283s ago: executing program 3 (id=1109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0002"], 0x24}, 0x1, 0x0, 0x0, 0x860}, 0x0) 54.104735842s ago: executing program 1 (id=1110): mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) recvfrom$inet6(r0, 0x0, 0x50, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x8, @mcast1, 0x8}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000640)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 53.983555755s ago: executing program 1 (id=1111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000000014085000000050000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfd02, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 53.909835227s ago: executing program 1 (id=1112): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000140)="8c91d7798c7f1b4ca02eb42f0c3d", 0xe, 0x400c000, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010102}, 0x10) 38.269172615s ago: executing program 33 (id=1108): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e640000"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x43405, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 38.198488416s ago: executing program 34 (id=1112): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000140)="8c91d7798c7f1b4ca02eb42f0c3d", 0xe, 0x400c000, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010102}, 0x10) 38.143785568s ago: executing program 35 (id=1109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0002"], 0x24}, 0x1, 0x0, 0x0, 0x860}, 0x0) 3.491030915s ago: executing program 5 (id=1291): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a001000000002800000", 0x2c}], 0x1}, 0x20040900) 3.459228916s ago: executing program 5 (id=1293): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 3.310597729s ago: executing program 5 (id=1297): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) 3.209643242s ago: executing program 5 (id=1300): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) syz_mount_image$msdos(&(0x7f0000001080), &(0x7f0000002000)='./file0\x00', 0x180c8, &(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0], 0x1, 0x27d, &(0x7f0000000000)="$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") syz_emit_ethernet(0xb8, &(0x7f0000001200)={@broadcast, @random="00e3e6885b14", @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@llc={0x4, {@llc={0xd4, 0x7e, 'k', "d8f5f0104422d597dd5883bd49c5ed16d56056b7c35090c75b74ca8b734b4f3c988ab96c40be053fb774a33324498ad34e910362fd2cd5af95c6643ddb9e8ab3cd73e65ddc0ed4ebddc2b888d9e860fd9697767ecd56b62ee3a31e19979e75a931e8cc3a69a9619fb18d17c7a53a9bb1cc4a2f2e09aa3b843885fe33d932e365adae8fa25e334086b0a746b732f4b6805a8e57a74a70bbcdf895cf2d42bdf9b344c0db"}}}}}, 0x0) statfs(0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103901) ioctl$PTP_CLOCK_GETCAPS(r0, 0x43403d0e, 0x0) 3.177237063s ago: executing program 5 (id=1302): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) syz_open_dev$loop(0x0, 0x6b, 0x901) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x20, 0x7, 0x8, 0xe, {{0x5, 0x4, 0x3, 0x1b, 0x14, 0x65, 0x0, 0x8, 0x0, 0x0, @empty, @multicast2}}}}) keyctl$clear(0x3, 0xfffffffffffffffd) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast}}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1/file0\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd2894000000000000010902240001000000000904010001030000000921000000012207"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.689460139s ago: executing program 7 (id=1338): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1.569674612s ago: executing program 7 (id=1339): read$qrtrtun(0xffffffffffffffff, &(0x7f00000004c0)=""/57, 0x39) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400074100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r5], 0x3c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180400000300000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000020007010000f8ffffffb702000008000000b7030000fcffffff850000001b0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10f}, 0x94) 1.538624002s ago: executing program 7 (id=1340): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000084, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7bd, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0xfff, 0x9}) 1.293672998s ago: executing program 7 (id=1342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 968.568416ms ago: executing program 7 (id=1344): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 829.47905ms ago: executing program 7 (id=1346): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) kexec_load(0x20000000, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x8000}], 0x0) 803.22784ms ago: executing program 6 (id=1347): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) 800.26169ms ago: executing program 8 (id=1348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e80)=ANY=[@ANYBLOB="7c0000000008010100000000000000000000000a06000240000300000500030084000000040004800900010073797a310000000006000240884c00002c00048008000140ffffffff080603400000042408000840000000000800074000000004080008400000000a140004800800024000000007080001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000408}, 0x40000) 693.834333ms ago: executing program 8 (id=1349): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001a0001000b0000000000000002000000000000000000000008001a00", @ANYRES32=0x0, @ANYBLOB="080019"], 0x2c}}, 0x0) 693.483104ms ago: executing program 6 (id=1350): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08008848"], 0x92) 653.861524ms ago: executing program 8 (id=1351): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="8400000010000104000000000300000000000000", @ANYRES32=r1, @ANYBLOB="24200400858d0000640012800e00010069703665727370616e00000050000280050016000200000006001800010000001400070100000000000000000000000000000000040012001400060000"], 0x84}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 410.29457ms ago: executing program 8 (id=1354): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x0) socket$kcm(0x10, 0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x0) io_uring_setup(0x64a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xffff}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048020}, 0x24000008) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000, &(0x7f0000000380)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@resuid}]}, 0x9, 0xb69, &(0x7f0000000c40)="$eJzs3M9rHFUcAPDvm2y2aRtNiqLWi4EeGihufkmhxUOLeFMQrOCxwaRt7PYHTUTbiym9KhTUP6AHTx5S8JCDl549epEevEsxKJSeIzPZ3WyTbDZtNh1IPx+Y7Hvzsvu+M9+8ybxhZwJ4aY3kP7KIoxFxN0UMNdZnEVEtSgMRi2u/tzx1/1K+pFhd/fTfFCkilqbuX2p+Vmq8Hm5+wHDEH4sppu5s7nf+5q3L0/X67I1GfWzhyvWx+Zu33p27Mn1x9uLs1YlTp06OT06eOjnes209MXrsp6WvP/zn3vLYk58/OPFLijMx2Ghr345eGYmR1j7Z6LNed1aSvoiotOU+lyolBgQAwLaytnO4ozEUfbF+8jYUtblSgwMAAAB64tuIWAUAAAD2uWT+DwAAAPtc83sAS1P3LzWXcr+RwIu0cnbtPu2lxr3dy638V2KxeB2I/og49DhF+229ae1tuzYSEdfv3pnLl9ij+7DpbPF2RLy11fhPRf6HY6Cobcx/FhG9uDN/ZENd/l+s3eT/TA/6l38AAIAX48HZtYn85vlf1rr+E1vM//q2mLs9j+7zv+xRD7qhg5WzEe+3PdtxuS3/DcN9jdorxfWA/nRhrj47HhGvRsRo9B/I6xPb9DH38W9vdmprv/6XL3n/zWuBjTgeVQ48/Z6Z6YXp3Wwz61ZuR7xd2Sr/qTX+U4frv5/ssI/vv/xhpVNb9/yzl1bvRRzfcvyvP9Ezbf981rHieDDWPCps9vngX0ud+pf/cuXj/9D2+S+O/63n9c4/ex/nq9+91qnteY//1XSuCLDaWPfN9MLCjYmIavpo8/rJZ495v2ruj+b+yvM/emzr///bHf/zv4nzO+zzya+Pz3VqM/7Lled/psv4T0+N/2cv/Pfn72906n9n4/+9IpjRxhrnf93tNEFlxwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANArWUQMRspqrXKW1WoRhyPi9TiU1a/NL5y4cO2rqzN5W8Rw9GcX5uqz4xExtFZPeX2iKK/XJzfUpyLiSET8OHSwqNe+uFafKXvjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaDkcEYORslpEZEU5y2q1tba/h8qODgAAAOiZ4bIDAAAAAPac+T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu3TknQcPU0Qsnj5YLLlqo62/1MiAvZaVHQBQmr6yAwBKUyk7AKA05vhA6tI+0LHFGQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy+T40QcPU0Qsnj5YLLlqo62/1MiAvZaVHQBQmr6yAwBKUyk7AKA05vhA6tI+0LHFGQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy2T+5q3L0/X67A0FBQWFVqHsIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD72f8BAAD//y0T4dE=") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x400, 0x70bd27, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1c, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x86}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x41, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x0) 357.442421ms ago: executing program 6 (id=1356): setreuid(0x0, 0xee01) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 356.837061ms ago: executing program 4 (id=1357): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x1fe, 0x1fb, 0x0, 0x3, 0x4, 0x5, 0x10001, 0x9}, 0x20) 290.428083ms ago: executing program 4 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r1, 0x80079a0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0x10000000000) 253.031274ms ago: executing program 6 (id=1359): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, 0x0, 0x4002880) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) 252.541184ms ago: executing program 4 (id=1360): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xec6f, 0x0, 0x1}}, 0x40) 157.825846ms ago: executing program 4 (id=1361): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x1c, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e1c}, [@typed={0x8, 0x100, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x1c}}, 0x20048800) 157.313246ms ago: executing program 6 (id=1362): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x13, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) recvfrom(r0, 0x0, 0x1200, 0x12000, 0x0, 0x0) 132.908457ms ago: executing program 5 (id=1363): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r1, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) close(0x3) 132.611537ms ago: executing program 4 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001840), 0x3b, 0x0) 129.809057ms ago: executing program 8 (id=1365): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="8400000010000104000000000300000000000000", @ANYRES32=r1, @ANYBLOB="24200400858d0000640012800e00010069703665727370616e00000050000280050016000200000006001800010000001400070100000000000000000000000000000000040012001400060000"], 0x84}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 6.96261ms ago: executing program 6 (id=1366): syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@orlov}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 6.19563ms ago: executing program 8 (id=1367): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08008848"], 0x92) 0s ago: executing program 4 (id=1368): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): 205: attempt to access beyond end of device [ 48.836394][ T5103] loop4: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 48.839200][ T5103] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 49.121287][ T5111] set_capacity_and_notify: 26 callbacks suppressed [ 49.121296][ T5111] loop3: detected capacity change from 0 to 32768 [ 49.163743][ T5111] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.207 (5111) [ 49.191409][ T5111] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 49.193090][ T5111] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 49.212013][ T5111] BTRFS info (device loop3): using free space tree [ 49.335395][ T5131] loop2: detected capacity change from 0 to 64 [ 49.384670][ T5139] loop4: detected capacity change from 0 to 1024 [ 49.396126][ T5129] loop1: detected capacity change from 0 to 32768 [ 49.399524][ T5129] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.212 (5129) [ 49.465016][ T5111] BTRFS info (device loop3): enabling ssd optimizations [ 49.505790][ T5147] loop2: detected capacity change from 0 to 1764 [ 49.543302][ T5151] loop4: detected capacity change from 0 to 1024 [ 49.546710][ T4338] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 49.725109][ T5162] loop2: detected capacity change from 0 to 1024 [ 49.734041][ T5162] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 49.753361][ T4320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4320) [ 49.779124][ T5162] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 49.780966][ T5162] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (240!=20869) [ 49.881595][ T5162] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #3: comm syz.2.220: iget: bad extra_isize 65535 (inode size 1024) [ 49.887338][ T5162] EXT4-fs (loop2): no journal found [ 49.888180][ T5162] EXT4-fs (loop2): can't get journal size [ 49.894769][ T5162] EXT4-fs error (device loop2): __ext4_fill_super:5465: inode #2: comm syz.2.220: iget: bad extra_isize 65535 (inode size 1024) [ 49.911139][ T5162] EXT4-fs (loop2): get root inode failed [ 49.916696][ T5162] EXT4-fs (loop2): mount failed [ 51.267078][ T5195] loop4: detected capacity change from 0 to 2048 [ 51.283851][ T5195] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 51.297911][ T5195] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 51.299858][ T5195] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 51.301185][ T5195] UDF-fs: Scanning with blocksize 512 failed [ 51.339049][ T5195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.344141][ T5205] syz.3.239 uses obsolete (PF_INET,SOCK_PACKET) [ 51.372444][ T5205] xt_hashlimit: size too large, truncated to 1048576 [ 51.382222][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 52.652018][ T5228] tipc: Started in network mode [ 52.657834][ T5228] tipc: Node identity 7665c5012b93, cluster identity 4711 [ 52.659204][ T5228] tipc: Enabled bearer , priority 0 [ 52.703170][ T5228] device syzkaller0 entered promiscuous mode [ 52.710377][ T5228] tipc: Resetting bearer [ 52.712774][ T5232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.248'. [ 52.721687][ T5226] tipc: Resetting bearer [ 52.918308][ T5245] loop0: detected capacity change from 0 to 512 [ 52.927043][ T5245] EXT4-fs (loop0): can't mount with both data=journal and dax [ 64.147311][ T5226] tipc: Disabling bearer [ 64.173297][ T1518] tipc: Node number set to 1576453377 [ 64.213147][ T5261] mmap: syz.4.257 (5261) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.308314][ T5270] netlink: 64 bytes leftover after parsing attributes in process `syz.2.261'. [ 64.361298][ T27] audit: type=1326 audit(2621503.705:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.1.262" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb037a168 code=0x0 [ 64.366720][ T5279] xt_hashlimit: size too large, truncated to 1048576 [ 64.378087][ T5277] Illegal XDP return value 4294967274 on prog (id 6) dev syz_tun, expect packet loss! [ 64.466983][ T5284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 65.137145][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.138839][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.178995][ T5294] device syzkaller0 entered promiscuous mode [ 65.746086][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 65.753619][ T5307] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 65.761930][ T5307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.848357][ T5307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.272'. [ 65.849951][ T5307] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 65.851247][ T5307] bond1: option mode: unable to set because the bond device is up [ 65.939892][ T5313] loop3: detected capacity change from 0 to 1024 [ 65.964182][ T5313] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.308386][ T5324] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 66.316770][ T5313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 66.342814][ T5324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 66.344706][ T5324] bond2: (slave bond3): making interface the new active one [ 66.346567][ T5324] bond2: (slave bond3): Enslaving as an active interface with an up link [ 66.350064][ T5324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 66.352024][ T5324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.276'. [ 66.354785][ T5324] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.400607][ T5313] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.274: lblock 0 mapped to illegal pblock 0 (length 6) [ 66.445584][ T5313] EXT4-fs (loop3): Remounting filesystem read-only [ 66.465778][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 66.881907][ T5339] capability: warning: `syz.2.282' uses deprecated v2 capabilities in a way that may be insecure [ 70.302487][ T22] cfg80211: failed to load regulatory.db [ 77.981138][ T5353] netlink: 44 bytes leftover after parsing attributes in process `syz.1.287'. [ 78.208850][ T5385] xt_hashlimit: size too large, truncated to 1048576 [ 78.304719][ T5359] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 78.313880][ T5361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.290'. [ 79.022489][ T5418] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 79.039803][ T5418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.041791][ T5418] bond1: (slave bond2): making interface the new active one [ 79.043322][ T5418] bond1: (slave bond2): Enslaving as an active interface with an up link [ 79.047059][ T5418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.310'. [ 79.049258][ T5418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.332359][ T5434] netlink: 144 bytes leftover after parsing attributes in process `syz.4.316'. [ 79.500626][ T5448] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 79.536172][ T5448] 8021q: adding VLAN 0 to HW filter on device bond4 [ 79.537889][ T5448] bond3: (slave bond4): making interface the new active one [ 79.539246][ T5448] bond3: (slave bond4): Enslaving as an active interface with an up link [ 79.543473][ T5448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.322'. [ 79.551399][ T5448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 79.553632][ T5454] netem: incorrect ge model size [ 79.557915][ T5454] netem: change failed [ 79.763678][ T5465] netlink: 'syz.2.329': attribute type 2 has an invalid length. [ 79.766437][ T5465] netlink: 132700 bytes leftover after parsing attributes in process `syz.2.329'. [ 80.278324][ T5473] netlink: 144 bytes leftover after parsing attributes in process `syz.1.332'. [ 80.572470][ T5483] netlink: 44 bytes leftover after parsing attributes in process `syz.4.339'. [ 80.647604][ T5498] netlink: 'syz.1.344': attribute type 1 has an invalid length. [ 80.667748][ T5498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.670767][ T5498] bond1: (slave bond2): making interface the new active one [ 80.672527][ T5498] bond1: (slave bond2): Enslaving as an active interface with an up link [ 80.675946][ T5498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.344'. [ 80.677613][ T5502] loop4: detected capacity change from 0 to 128 [ 80.678143][ T5498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.689593][ T5502] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.692106][ T5502] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.767415][ T39] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.864212][ T5520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 80.889385][ T5524] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 81.182462][ T5524] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.224236][ T5533] netlink: 'syz.4.357': attribute type 1 has an invalid length. [ 81.426468][ T5531] team0: Port device team_slave_0 removed [ 81.435085][ T5533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.436822][ T5533] bond1: (slave bond2): making interface the new active one [ 81.438194][ T5533] bond1: (slave bond2): Enslaving as an active interface with an up link [ 81.440248][ T5535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.748667][ T5558] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 81.766122][ T5558] 8021q: adding VLAN 0 to HW filter on device bond5 [ 81.854168][ T5565] netlink: 'syz.1.369': attribute type 1 has an invalid length. [ 81.874305][ T5565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 81.876302][ T5565] bond4: (slave bond5): making interface the new active one [ 81.878926][ T5565] bond4: (slave bond5): Enslaving as an active interface with an up link [ 81.883018][ T5565] 8021q: adding VLAN 0 to HW filter on device bond4 [ 82.055428][ T5580] raw_sendmsg: syz.3.374 forgot to set AF_INET. Fix it! [ 82.620378][ T5591] netlink: 'syz.0.378': attribute type 1 has an invalid length. [ 82.633342][ T5591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.970895][ T5598] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 83.050016][ T5602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 83.054714][ T5602] bond2: (slave bond3): making interface the new active one [ 83.057661][ T5602] bond2: (slave bond3): Enslaving as an active interface with an up link [ 83.061743][ T5602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.204074][ T5620] __nla_validate_parse: 8 callbacks suppressed [ 83.204085][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 83.239216][ T5625] netlink: 44 bytes leftover after parsing attributes in process `syz.1.390'. [ 83.306515][ T5629] loop2: detected capacity change from 0 to 128 [ 83.325960][ T5629] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.345736][ T4341] EXT4-fs (loop2): unmounting filesystem. [ 83.366187][ T5634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 83.688895][ T5634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 83.740389][ T5634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 83.775073][ T5644] loop4: detected capacity change from 0 to 256 [ 83.788271][ T5644] FAT-fs (loop4): Directory bread(block 64) failed [ 83.789662][ T5644] FAT-fs (loop4): Directory bread(block 65) failed [ 83.792331][ T5644] FAT-fs (loop4): Directory bread(block 66) failed [ 83.793751][ T5644] FAT-fs (loop4): Directory bread(block 67) failed [ 83.795167][ T5644] FAT-fs (loop4): Directory bread(block 68) failed [ 83.796518][ T5644] FAT-fs (loop4): Directory bread(block 69) failed [ 83.797722][ T5644] FAT-fs (loop4): Directory bread(block 70) failed [ 83.799070][ T5644] FAT-fs (loop4): Directory bread(block 71) failed [ 83.800459][ T5644] FAT-fs (loop4): Directory bread(block 72) failed [ 83.801848][ T5644] FAT-fs (loop4): Directory bread(block 73) failed [ 84.034460][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 84.079232][ T5658] netlink: 144 bytes leftover after parsing attributes in process `syz.2.403'. [ 84.184981][ T5660] loop1: detected capacity change from 0 to 4096 [ 84.193513][ T5660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.235600][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 84.294584][ T5667] validate_nla: 1 callbacks suppressed [ 84.294596][ T5667] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 84.327673][ T5667] 8021q: adding VLAN 0 to HW filter on device bond7 [ 84.329409][ T5667] bond6: (slave bond7): making interface the new active one [ 84.330713][ T5667] bond6: (slave bond7): Enslaving as an active interface with an up link [ 84.340691][ T5667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.407'. [ 84.342522][ T5667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.407'. [ 84.345152][ T5667] 8021q: adding VLAN 0 to HW filter on device bond6 [ 85.345486][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 85.754440][ T5701] xt_hashlimit: size too large, truncated to 1048576 [ 85.795351][ T5703] netlink: 'syz.4.421': attribute type 1 has an invalid length. [ 85.812383][ T5705] loop3: detected capacity change from 0 to 512 [ 85.828888][ T5705] EXT4-fs (loop3): can't mount with both data=journal and dax [ 85.954814][ T5703] 8021q: adding VLAN 0 to HW filter on device bond4 [ 85.965178][ T5703] bond3: (slave bond4): making interface the new active one [ 85.967895][ T5703] bond3: (slave bond4): Enslaving as an active interface with an up link [ 85.972290][ T5703] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.306323][ T5730] loop4: detected capacity change from 0 to 256 [ 86.366283][ T5730] FAT-fs (loop4): Directory bread(block 64) failed [ 86.370587][ T5730] FAT-fs (loop4): Directory bread(block 65) failed [ 86.373075][ T5730] FAT-fs (loop4): Directory bread(block 66) failed [ 86.375373][ T5730] FAT-fs (loop4): Directory bread(block 67) failed [ 86.377814][ T5730] FAT-fs (loop4): Directory bread(block 68) failed [ 86.380703][ T5730] FAT-fs (loop4): Directory bread(block 69) failed [ 86.384122][ T5730] FAT-fs (loop4): Directory bread(block 70) failed [ 86.386595][ T5730] FAT-fs (loop4): Directory bread(block 71) failed [ 86.398959][ T5730] FAT-fs (loop4): Directory bread(block 72) failed [ 86.400754][ T5734] loop2: detected capacity change from 0 to 512 [ 86.402726][ T5730] FAT-fs (loop4): Directory bread(block 73) failed [ 86.406102][ T5734] EXT4-fs (loop2): can't mount with both data=journal and dax [ 86.510724][ T5738] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 86.550368][ T5738] 8021q: adding VLAN 0 to HW filter on device bond5 [ 86.552056][ T5738] bond4: (slave bond5): making interface the new active one [ 86.553392][ T5738] bond4: (slave bond5): Enslaving as an active interface with an up link [ 86.557443][ T5738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 86.681164][ T5746] device bond6 entered promiscuous mode [ 86.684167][ T5746] 8021q: adding VLAN 0 to HW filter on device bond6 [ 86.703756][ T5746] 8021q: adding VLAN 0 to HW filter on device bond6 [ 86.705053][ T5746] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 86.714346][ T5746] bond6: (slave ip6gre1): Error -95 calling set_mac_address [ 87.229708][ T27] audit: type=1326 audit(6815830.285:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.3.445" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaab7a168 code=0x0 [ 87.983799][ T5775] loop2: detected capacity change from 0 to 512 [ 88.001717][ T5775] EXT4-fs (loop2): can't mount with both data=journal and dax [ 88.164653][ T5778] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 88.212590][ T5778] 8021q: adding VLAN 0 to HW filter on device bond5 [ 88.220716][ T5778] bond4: (slave bond5): making interface the new active one [ 88.222376][ T5778] bond4: (slave bond5): Enslaving as an active interface with an up link [ 88.243022][ T5778] 8021q: adding VLAN 0 to HW filter on device bond4 [ 88.524127][ T5791] loop2: detected capacity change from 0 to 512 [ 88.675467][ T5791] EXT4-fs error (device loop2): __ext4_iget:5102: inode #11: block 16777240: comm syz.2.450: invalid block [ 88.677877][ T5791] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.450: couldn't read orphan inode 11 (err -117) [ 88.680116][ T5791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.718432][ T5797] loop3: detected capacity change from 0 to 128 [ 88.730960][ T5797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 88.818588][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 89.130678][ T5810] loop4: detected capacity change from 0 to 4096 [ 89.136409][ T5810] EXT4-fs: inline encryption not supported [ 89.139756][ T5810] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 89.169877][ T4341] EXT4-fs (loop2): unmounting filesystem. [ 89.563446][ T5819] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 89.569843][ T5819] 8021q: adding VLAN 0 to HW filter on device bond6 [ 89.581118][ T5819] __nla_validate_parse: 12 callbacks suppressed [ 89.581128][ T5819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.460'. [ 89.583807][ T5819] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 89.591344][ T5819] 8021q: adding VLAN 0 to HW filter on device bond7 [ 89.646791][ T5823] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 89.828566][ T5823] 8021q: adding VLAN 0 to HW filter on device bond9 [ 89.844011][ T5823] bond8: (slave bond9): making interface the new active one [ 89.852479][ T5823] bond8: (slave bond9): Enslaving as an active interface with an up link [ 89.860062][ T5828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.461'. [ 89.878357][ T5823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.461'. [ 89.880203][ T5823] 8021q: adding VLAN 0 to HW filter on device bond8 [ 90.050655][ T5839] loop1: detected capacity change from 0 to 256 [ 90.065342][ T5841] loop3: detected capacity change from 0 to 128 [ 90.070346][ T5839] FAT-fs (loop1): Directory bread(block 64) failed [ 90.077841][ T5839] FAT-fs (loop1): Directory bread(block 65) failed [ 90.078966][ T5839] FAT-fs (loop1): Directory bread(block 66) failed [ 90.080026][ T5839] FAT-fs (loop1): Directory bread(block 67) failed [ 90.081142][ T5839] FAT-fs (loop1): Directory bread(block 68) failed [ 90.083701][ T5841] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.102429][ T5839] FAT-fs (loop1): Directory bread(block 69) failed [ 90.103699][ T5839] FAT-fs (loop1): Directory bread(block 70) failed [ 90.104757][ T5839] FAT-fs (loop1): Directory bread(block 71) failed [ 90.108740][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 90.115725][ T5839] FAT-fs (loop1): Directory bread(block 72) failed [ 90.117180][ T5839] FAT-fs (loop1): Directory bread(block 73) failed [ 90.261149][ T5853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'. [ 90.311056][ T5861] netlink: 'syz.2.476': attribute type 1 has an invalid length. [ 90.325905][ T5861] 8021q: adding VLAN 0 to HW filter on device bond11 [ 90.327682][ T5861] bond10: (slave bond11): making interface the new active one [ 90.329999][ T5861] bond10: (slave bond11): Enslaving as an active interface with an up link [ 90.333335][ T5861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.476'. [ 90.335080][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.476'. [ 90.337426][ T5861] 8021q: adding VLAN 0 to HW filter on device bond10 [ 90.387120][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 90.390148][ T5870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.480'. [ 90.406064][ T5872] loop2: detected capacity change from 0 to 4096 [ 90.412372][ T5872] EXT4-fs: inline encryption not supported [ 90.415887][ T5872] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 90.586876][ T5882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'. [ 90.637310][ T5882] netlink: 92 bytes leftover after parsing attributes in process `syz.4.483'. [ 90.639212][ T5882] HTB: quantum of class 8001000C is small. Consider r2q change. [ 90.652474][ T5885] pim6reg: tun_chr_ioctl cmd 1074025677 [ 90.653662][ T5885] pim6reg: linktype set to 778 [ 90.804922][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 90.808689][ T5891] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 90.863376][ T5891] 8021q: adding VLAN 0 to HW filter on device bond8 [ 90.877956][ T5891] bond7: (slave bond8): making interface the new active one [ 90.886226][ T5891] bond7: (slave bond8): Enslaving as an active interface with an up link [ 90.900459][ T5891] 8021q: adding VLAN 0 to HW filter on device bond7 [ 91.727754][ T5925] set_capacity_and_notify: 1 callbacks suppressed [ 91.727764][ T5925] loop2: detected capacity change from 0 to 512 [ 91.745744][ T5925] EXT4-fs (loop2): can't mount with both data=journal and dax [ 92.010260][ T5932] loop3: detected capacity change from 0 to 512 [ 92.056769][ T5932] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.100864][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 92.314835][ T5943] loop3: detected capacity change from 0 to 512 [ 92.339513][ T5943] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.352319][ T5943] EXT4-fs (loop3): 1 truncate cleaned up [ 92.353569][ T5943] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.401589][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 92.436645][ T5949] xt_hashlimit: size too large, truncated to 1048576 [ 92.881108][ T5975] Config c/1 of g1 needs at least one function. [ 92.882959][ T5975] udc usbip-vudc.0: failed to start g1: -22 [ 92.884215][ T5975] configfs-gadget.g1: probe of gadget.1 failed with error -22 [ 92.887366][ T5975] UDC core: g1: couldn't find an available UDC or it's busy [ 94.376662][ T5989] loop0: detected capacity change from 0 to 512 [ 94.382756][ T5989] EXT4-fs (loop0): can't mount with both data=journal and dax [ 94.883892][ T5992] loop3: detected capacity change from 0 to 256 [ 94.906150][ T5992] FAT-fs (loop3): Directory bread(block 64) failed [ 94.907475][ T5992] FAT-fs (loop3): Directory bread(block 65) failed [ 94.908687][ T5992] FAT-fs (loop3): Directory bread(block 66) failed [ 94.910923][ T5992] FAT-fs (loop3): Directory bread(block 67) failed [ 94.913173][ T5992] FAT-fs (loop3): Directory bread(block 68) failed [ 94.916396][ T5992] FAT-fs (loop3): Directory bread(block 69) failed [ 94.918720][ T5992] FAT-fs (loop3): Directory bread(block 70) failed [ 94.920985][ T5992] FAT-fs (loop3): Directory bread(block 71) failed [ 94.923320][ T5992] FAT-fs (loop3): Directory bread(block 72) failed [ 94.925581][ T5992] FAT-fs (loop3): Directory bread(block 73) failed [ 95.678728][ T5957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.922093][ T6000] netlink: 'syz.2.527': attribute type 1 has an invalid length. [ 95.987175][ T6000] 8021q: adding VLAN 0 to HW filter on device bond13 [ 95.994601][ T6000] bond12: (slave bond13): making interface the new active one [ 95.998231][ T6000] bond12: (slave bond13): Enslaving as an active interface with an up link [ 96.064675][ T6000] bond12: (slave gretap1): Enslaving as a backup interface with an up link [ 96.101598][ T6012] netlink: 'syz.4.531': attribute type 1 has an invalid length. [ 96.144830][ T6012] 8021q: adding VLAN 0 to HW filter on device bond5 [ 96.163994][ T6012] __nla_validate_parse: 4 callbacks suppressed [ 96.164006][ T6012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 96.166500][ T6012] netlink: 'syz.4.531': attribute type 1 has an invalid length. [ 96.224356][ T6012] 8021q: adding VLAN 0 to HW filter on device bond6 [ 96.334266][ T6028] futex_wake_op: syz.0.536 tries to shift op by 144; fix this program [ 96.534460][ T6028] loop0: detected capacity change from 0 to 512 [ 96.912326][ T4379] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.993110][ T6045] loop1: detected capacity change from 0 to 256 [ 97.022540][ T6045] FAT-fs (loop1): Directory bread(block 64) failed [ 97.023748][ T6045] FAT-fs (loop1): Directory bread(block 65) failed [ 97.034567][ T6045] FAT-fs (loop1): Directory bread(block 66) failed [ 97.035634][ T6045] FAT-fs (loop1): Directory bread(block 67) failed [ 97.036710][ T6045] FAT-fs (loop1): Directory bread(block 68) failed [ 97.037735][ T6045] FAT-fs (loop1): Directory bread(block 69) failed [ 97.038772][ T6045] FAT-fs (loop1): Directory bread(block 70) failed [ 97.039810][ T6045] FAT-fs (loop1): Directory bread(block 71) failed [ 97.040851][ T6045] FAT-fs (loop1): Directory bread(block 72) failed [ 97.041868][ T6045] FAT-fs (loop1): Directory bread(block 73) failed [ 97.140137][ T4379] usb 1-1: Using ep0 maxpacket: 32 [ 97.144775][ T4379] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.146171][ T4379] usb 1-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 97.148137][ T4379] usb 1-1: config 0 has no interface number 0 [ 97.149192][ T4379] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.151233][ T4379] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 97.152680][ T4379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.175440][ T4379] usb 1-1: config 0 descriptor?? [ 97.178091][ T4379] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 98.273421][ T6028] team0: Device wg0 is of different type [ 98.369072][ T6028] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 98.371875][ T6049] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 98.428140][ T6050] 8021q: adding VLAN 0 to HW filter on device bond7 [ 98.438709][ T6050] bond6: (slave bond7): making interface the new active one [ 98.440173][ T6050] bond6: (slave bond7): Enslaving as an active interface with an up link [ 98.448902][ T6051] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 99.359988][ T6077] loop3: detected capacity change from 0 to 256 [ 99.371158][ T6077] FAT-fs (loop3): Directory bread(block 64) failed [ 99.372324][ T6077] FAT-fs (loop3): Directory bread(block 65) failed [ 99.373842][ T6077] FAT-fs (loop3): Directory bread(block 66) failed [ 99.374980][ T6077] FAT-fs (loop3): Directory bread(block 67) failed [ 99.376365][ T6077] FAT-fs (loop3): Directory bread(block 68) failed [ 99.377670][ T6077] FAT-fs (loop3): Directory bread(block 69) failed [ 99.378909][ T6077] FAT-fs (loop3): Directory bread(block 70) failed [ 99.380141][ T6077] FAT-fs (loop3): Directory bread(block 71) failed [ 99.381300][ T6077] FAT-fs (loop3): Directory bread(block 72) failed [ 99.382451][ T6077] FAT-fs (loop3): Directory bread(block 73) failed [ 99.418350][ T3903] usb 1-1: USB disconnect, device number 4 [ 99.439042][ T6079] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 99.481922][ T6079] 8021q: adding VLAN 0 to HW filter on device bond10 [ 99.492460][ T6079] bond9: (slave bond10): making interface the new active one [ 99.494930][ T6079] bond9: (slave bond10): Enslaving as an active interface with an up link [ 100.288724][ T6079] bond9: (slave gretap2): Enslaving as a backup interface with an up link [ 100.485204][ T6098] loop0: detected capacity change from 0 to 512 [ 100.493408][ T6098] EXT4-fs (loop0): can't mount with both data=journal and dax [ 100.546548][ T5368] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.024161][ T6114] netlink: 144 bytes leftover after parsing attributes in process `syz.3.567'. [ 101.184553][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.568'. [ 101.502106][ T6130] Bluetooth: MGMT ver 1.22 [ 102.612707][ T6144] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 102.655252][ T6144] 8021q: adding VLAN 0 to HW filter on device bond12 [ 102.664996][ T6144] bond11: (slave bond12): making interface the new active one [ 102.668520][ T6144] bond11: (slave bond12): Enslaving as an active interface with an up link [ 102.677573][ T6147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.580'. [ 102.722877][ T6152] loop1: detected capacity change from 0 to 512 [ 102.749158][ T6152] EXT4-fs (loop1): can't mount with both data=journal and dax [ 104.348258][ T6178] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 104.363333][ T6178] 8021q: adding VLAN 0 to HW filter on device bond14 [ 104.366056][ T6178] bond13: (slave bond14): making interface the new active one [ 104.367772][ T6178] bond13: (slave bond14): Enslaving as an active interface with an up link [ 104.487364][ T6187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.595'. [ 104.693025][ T6205] loop0: detected capacity change from 0 to 512 [ 104.739896][ T6205] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 104.742186][ T6205] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.606: corrupted in-inode xattr [ 104.745066][ T6209] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 104.748652][ T6205] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.606: couldn't read orphan inode 15 (err -117) [ 104.760888][ T6205] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.775012][ T6212] netlink: 104 bytes leftover after parsing attributes in process `syz.1.607'. [ 104.776555][ T6212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.607'. [ 104.798089][ T6209] 8021q: adding VLAN 0 to HW filter on device bond8 [ 104.802387][ T6209] bond7: (slave bond8): making interface the new active one [ 104.808264][ T6209] bond7: (slave bond8): Enslaving as an active interface with an up link [ 104.815442][ T6209] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 104.829629][ T6219] netlink: 44 bytes leftover after parsing attributes in process `syz.1.610'. [ 104.847795][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 105.043777][ T6252] netlink: 'syz.3.625': attribute type 1 has an invalid length. [ 105.088050][ T6252] 8021q: adding VLAN 0 to HW filter on device bond9 [ 105.089707][ T6252] bond8: (slave bond9): making interface the new active one [ 105.097049][ T6252] bond8: (slave bond9): Enslaving as an active interface with an up link [ 105.099649][ T6255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.626'. [ 105.104894][ T6252] bond8: (slave gretap3): Enslaving as a backup interface with an up link [ 105.328257][ T6282] netlink: 144 bytes leftover after parsing attributes in process `syz.2.637'. [ 105.365288][ T6284] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 105.404479][ T6284] 8021q: adding VLAN 0 to HW filter on device bond11 [ 105.409492][ T6284] bond10: (slave bond11): making interface the new active one [ 105.412016][ T6284] bond10: (slave bond11): Enslaving as an active interface with an up link [ 105.426628][ T6290] netlink: 44 bytes leftover after parsing attributes in process `syz.0.641'. [ 105.477468][ T6293] loop2: detected capacity change from 0 to 512 [ 105.490604][ T6293] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.510669][ T6293] EXT4-fs (loop2): 1 orphan inode deleted [ 105.511816][ T6293] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.558614][ T6293] EXT4-fs error (device loop2): __ext4_remount:6650: comm syz.2.642: Abort forced by user [ 105.563978][ T6293] EXT4-fs (loop2): Remounting filesystem read-only [ 105.565227][ T6293] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 105.590876][ T4341] EXT4-fs (loop2): unmounting filesystem. [ 105.624454][ T6302] loop0: detected capacity change from 0 to 4096 [ 105.626398][ T6302] EXT4-fs: inline encryption not supported [ 105.638972][ T6302] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 105.716293][ T6310] netlink: 'syz.2.650': attribute type 10 has an invalid length. [ 105.746236][ T6310] team0: Port device dummy0 added [ 105.754997][ T6310] netlink: 'syz.2.650': attribute type 10 has an invalid length. [ 105.768640][ T6310] team0: Port device dummy0 removed [ 105.775872][ T6310] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.816564][ T6314] loop3: detected capacity change from 0 to 1024 [ 105.826991][ T6316] netlink: 144 bytes leftover after parsing attributes in process `syz.2.653'. [ 105.846273][ T6314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.865567][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 105.885310][ T6321] netlink: 'syz.3.654': attribute type 1 has an invalid length. [ 105.901050][ T6321] 8021q: adding VLAN 0 to HW filter on device bond13 [ 105.903904][ T6321] bond12: (slave bond13): making interface the new active one [ 105.905443][ T6321] bond12: (slave bond13): Enslaving as an active interface with an up link [ 105.908946][ T6321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.654'. [ 105.945371][ T6327] loop2: detected capacity change from 0 to 512 [ 105.947250][ T6327] EXT4-fs (loop2): can't mount with both data=journal and dax [ 105.996081][ T6033] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.946722][ T6350] netlink: 'syz.3.665': attribute type 1 has an invalid length. [ 106.988482][ T6350] 8021q: adding VLAN 0 to HW filter on device bond15 [ 106.990348][ T6350] bond14: (slave bond15): making interface the new active one [ 106.991788][ T6350] bond14: (slave bond15): Enslaving as an active interface with an up link [ 107.130570][ T6368] loop1: detected capacity change from 0 to 512 [ 107.134751][ T6368] EXT4-fs: inline encryption not supported [ 107.141991][ T6368] EXT4-fs: Ignoring removed i_version option [ 107.149821][ T6368] EXT4-fs (loop1): 1 orphan inode deleted [ 107.151034][ T6368] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.174632][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 107.306233][ T6389] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 107.347649][ T6395] loop0: detected capacity change from 0 to 4096 [ 107.350148][ T6395] EXT4-fs: inline encryption not supported [ 107.351715][ T6395] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 107.360634][ T6389] 8021q: adding VLAN 0 to HW filter on device bond17 [ 107.368798][ T6389] bond16: (slave bond17): making interface the new active one [ 107.370498][ T6389] bond16: (slave bond17): Enslaving as an active interface with an up link [ 107.783405][ T6403] device syzkaller0 entered promiscuous mode [ 107.889078][ T6413] __nla_validate_parse: 5 callbacks suppressed [ 107.889088][ T6413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.688'. [ 108.025108][ T6428] netlink: 'syz.2.695': attribute type 1 has an invalid length. [ 108.068385][ T6428] 8021q: adding VLAN 0 to HW filter on device bond15 [ 108.075280][ T6428] bond14: (slave bond15): making interface the new active one [ 108.079167][ T6428] bond14: (slave bond15): Enslaving as an active interface with an up link [ 108.095876][ T6434] netlink: 144 bytes leftover after parsing attributes in process `syz.1.697'. [ 108.157901][ T6443] netlink: 36 bytes leftover after parsing attributes in process `syz.4.701'. [ 108.332983][ T6464] netlink: 44 bytes leftover after parsing attributes in process `syz.1.711'. [ 108.335124][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.710'. [ 108.361223][ T6468] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.712'. [ 108.399349][ T6471] netlink: 36 bytes leftover after parsing attributes in process `syz.3.714'. [ 108.407002][ T6472] netlink: 'syz.0.713': attribute type 1 has an invalid length. [ 108.454487][ T6472] 8021q: adding VLAN 0 to HW filter on device bond16 [ 108.459241][ T6472] bond15: (slave bond16): making interface the new active one [ 108.459911][ T6480] loop3: detected capacity change from 0 to 256 [ 108.460948][ T6472] bond15: (slave bond16): Enslaving as an active interface with an up link [ 108.468946][ T6476] loop1: detected capacity change from 0 to 4096 [ 108.474369][ T6476] EXT4-fs: inline encryption not supported [ 108.512345][ T6476] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 109.328834][ T6506] loop0: detected capacity change from 0 to 512 [ 109.523815][ T6506] EXT4-fs error (device loop0): __ext4_iget:5102: inode #11: block 16777240: comm syz.0.724: invalid block [ 109.525981][ T6506] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.724: couldn't read orphan inode 11 (err -117) [ 109.528515][ T6506] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 109.571273][ T6510] netlink: 36 bytes leftover after parsing attributes in process `syz.1.728'. [ 109.573248][ T6512] netlink: 'syz.3.727': attribute type 1 has an invalid length. [ 109.631423][ T6512] 8021q: adding VLAN 0 to HW filter on device bond19 [ 109.633630][ T6512] bond18: (slave bond19): making interface the new active one [ 109.635329][ T6512] bond18: (slave bond19): Enslaving as an active interface with an up link [ 110.007962][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 110.040462][ T6538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.739'. [ 110.082734][ T6542] netlink: 'syz.0.742': attribute type 1 has an invalid length. [ 110.100653][ T6545] netlink: 144 bytes leftover after parsing attributes in process `syz.3.741'. [ 110.118583][ T6542] 8021q: adding VLAN 0 to HW filter on device bond18 [ 110.120504][ T6542] bond17: (slave bond18): making interface the new active one [ 110.121911][ T6542] bond17: (slave bond18): Enslaving as an active interface with an up link [ 110.663796][ T6567] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 110.737557][ T6569] IPVS: set_ctl: invalid protocol: 115 172.20.20.13:20002 [ 110.884025][ T6574] netlink: 'syz.1.754': attribute type 1 has an invalid length. [ 110.933865][ T6574] 8021q: adding VLAN 0 to HW filter on device bond9 [ 110.935699][ T6574] bond8: (slave bond9): making interface the new active one [ 110.937026][ T6574] bond8: (slave bond9): Enslaving as an active interface with an up link [ 111.299923][ T6599] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 111.807654][ T6612] netlink: 'syz.0.767': attribute type 1 has an invalid length. [ 111.944352][ T6612] 8021q: adding VLAN 0 to HW filter on device bond20 [ 111.953704][ T6612] bond19: (slave bond20): making interface the new active one [ 111.955742][ T6612] bond19: (slave bond20): Enslaving as an active interface with an up link [ 112.308761][ T6610] Set syz1 is full, maxelem 65536 reached [ 112.713178][ T6648] netlink: 'syz.0.781': attribute type 1 has an invalid length. [ 112.755312][ T6648] 8021q: adding VLAN 0 to HW filter on device bond22 [ 112.757116][ T6648] bond21: (slave bond22): making interface the new active one [ 112.758558][ T6648] bond21: (slave bond22): Enslaving as an active interface with an up link [ 112.896422][ T6652] loop2: detected capacity change from 0 to 4096 [ 112.916979][ T6652] EXT4-fs: inline encryption not supported [ 112.933831][ T6652] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 113.539124][ T6665] __nla_validate_parse: 7 callbacks suppressed [ 113.539136][ T6665] netlink: 144 bytes leftover after parsing attributes in process `syz.1.787'. [ 113.627309][ T6669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.789'. [ 113.633317][ T6670] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 113.731123][ T6679] netlink: 'syz.2.793': attribute type 1 has an invalid length. [ 113.759209][ T6679] 8021q: adding VLAN 0 to HW filter on device bond17 [ 113.761187][ T6679] bond16: (slave bond17): making interface the new active one [ 113.762650][ T6679] bond16: (slave bond17): Enslaving as an active interface with an up link [ 113.766532][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.793'. [ 113.849707][ T6691] netlink: 44 bytes leftover after parsing attributes in process `syz.0.798'. [ 113.929271][ T6700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 113.936690][ T6699] netlink: 144 bytes leftover after parsing attributes in process `syz.0.802'. [ 113.956799][ T6703] xt_hashlimit: size too large, truncated to 1048576 [ 114.209423][ T6713] netlink: 68 bytes leftover after parsing attributes in process `syz.3.807'. [ 114.424827][ T6722] netlink: 44 bytes leftover after parsing attributes in process `syz.3.811'. [ 114.663508][ T6730] netlink: 144 bytes leftover after parsing attributes in process `syz.3.815'. [ 114.903514][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.819'. [ 114.908519][ T6740] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 115.715626][ T6762] loop2: detected capacity change from 0 to 512 [ 115.751576][ T6762] EXT4-fs (loop2): can't mount with both data=journal and dax [ 116.682768][ T6776] device syzkaller0 entered promiscuous mode [ 118.139834][ T6806] loop3: detected capacity change from 0 to 256 [ 118.147593][ T6806] FAT-fs (loop3): Directory bread(block 64) failed [ 118.148636][ T6806] FAT-fs (loop3): Directory bread(block 65) failed [ 118.149830][ T6806] FAT-fs (loop3): Directory bread(block 66) failed [ 118.150871][ T6806] FAT-fs (loop3): Directory bread(block 67) failed [ 118.164494][ T6806] FAT-fs (loop3): Directory bread(block 68) failed [ 118.165589][ T6806] FAT-fs (loop3): Directory bread(block 69) failed [ 118.166706][ T6806] FAT-fs (loop3): Directory bread(block 70) failed [ 118.172195][ T6806] FAT-fs (loop3): Directory bread(block 71) failed [ 118.173424][ T6806] FAT-fs (loop3): Directory bread(block 72) failed [ 118.189784][ T6806] FAT-fs (loop3): Directory bread(block 73) failed [ 118.333015][ T6814] loop4: detected capacity change from 0 to 512 [ 118.336078][ T6814] EXT4-fs (loop4): can't mount with both data=journal and dax [ 118.384893][ T5368] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.829313][ T6825] __nla_validate_parse: 4 callbacks suppressed [ 118.829324][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 119.031826][ T6829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.849'. [ 119.036111][ T6829] netlink: 44 bytes leftover after parsing attributes in process `syz.0.849'. [ 119.177312][ T6836] loop1: detected capacity change from 0 to 1024 [ 119.201090][ T6836] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.583747][ T6836] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.904323][ T6836] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.851: lblock 0 mapped to illegal pblock 0 (length 6) [ 119.920134][ T6836] EXT4-fs (loop1): Remounting filesystem read-only [ 119.981513][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 120.105307][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 120.520246][ T6849] Set syz1 is full, maxelem 65536 reached [ 120.590312][ T6873] loop2: detected capacity change from 0 to 512 [ 120.597575][ T6873] EXT4-fs (loop2): can't mount with both data=journal and dax [ 121.179489][ T6885] loop0: detected capacity change from 0 to 1024 [ 121.188212][ T6885] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.216094][ T6885] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.321303][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 121.633904][ T6895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.873'. [ 121.785473][ T6905] tipc: Started in network mode [ 121.787602][ T6905] tipc: Node identity e6146355b644, cluster identity 4711 [ 121.796817][ T6905] tipc: Enabled bearer , priority 0 [ 121.815193][ T6905] device syzkaller0 entered promiscuous mode [ 121.819249][ T6905] tipc: Resetting bearer [ 121.848779][ T6904] tipc: Resetting bearer [ 122.182043][ T6918] loop3: detected capacity change from 0 to 1024 [ 122.191545][ T6918] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.201555][ T6918] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.214408][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 123.180225][ T6938] loop3: detected capacity change from 0 to 512 [ 123.190945][ T6938] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 123.198814][ T6938] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz.3.888: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 123.202656][ T6938] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz.3.888: directory missing '.' [ 123.213173][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 123.360417][ T6948] loop3: detected capacity change from 0 to 256 [ 123.384707][ T6948] FAT-fs (loop3): Directory bread(block 64) failed [ 123.385945][ T6948] FAT-fs (loop3): Directory bread(block 65) failed [ 123.387133][ T6948] FAT-fs (loop3): Directory bread(block 66) failed [ 123.388499][ T6948] FAT-fs (loop3): Directory bread(block 67) failed [ 123.389848][ T6948] FAT-fs (loop3): Directory bread(block 68) failed [ 123.390961][ T6948] FAT-fs (loop3): Directory bread(block 69) failed [ 123.392436][ T6948] FAT-fs (loop3): Directory bread(block 70) failed [ 123.393726][ T6948] FAT-fs (loop3): Directory bread(block 71) failed [ 123.394964][ T6948] FAT-fs (loop3): Directory bread(block 72) failed [ 123.396006][ T6948] FAT-fs (loop3): Directory bread(block 73) failed [ 123.575371][ T6954] loop0: detected capacity change from 0 to 1024 [ 123.590218][ T6954] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.609697][ T6954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.627409][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 124.551189][ T6963] loop0: detected capacity change from 0 to 512 [ 124.557060][ T6963] EXT4-fs (loop0): can't mount with both data=journal and dax [ 125.067645][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 125.073957][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 125.100769][ T6971] loop3: detected capacity change from 0 to 128 [ 125.113569][ T6971] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.145292][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 127.608465][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.609665][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.726757][ T6904] tipc: Disabling bearer [ 133.734865][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.883'. [ 133.736449][ T6927] netlink: 44 bytes leftover after parsing attributes in process `syz.4.883'. [ 133.744075][ T4759] tipc: Node number set to 1347445589 [ 133.748748][ T6991] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 133.758226][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.906'. [ 133.891824][ T7005] loop2: detected capacity change from 0 to 256 [ 134.219898][ T7005] FAT-fs (loop2): Directory bread(block 64) failed [ 134.230770][ T7005] FAT-fs (loop2): Directory bread(block 65) failed [ 134.240734][ T7005] FAT-fs (loop2): Directory bread(block 66) failed [ 134.243680][ T7013] netlink: 144 bytes leftover after parsing attributes in process `syz.1.914'. [ 134.245696][ T7005] FAT-fs (loop2): Directory bread(block 67) failed [ 134.257487][ T7005] FAT-fs (loop2): Directory bread(block 68) failed [ 134.261900][ T7005] FAT-fs (loop2): Directory bread(block 69) failed [ 134.264345][ T7005] FAT-fs (loop2): Directory bread(block 70) failed [ 134.265756][ T7005] FAT-fs (loop2): Directory bread(block 71) failed [ 134.268089][ T7005] FAT-fs (loop2): Directory bread(block 72) failed [ 134.269548][ T7005] FAT-fs (loop2): Directory bread(block 73) failed [ 134.331718][ T7019] loop0: detected capacity change from 0 to 512 [ 134.350562][ T7019] EXT4-fs (loop0): can't mount with both data=journal and dax [ 134.804077][ T7028] device syzkaller0 entered promiscuous mode [ 134.870058][ T7033] netlink: 'syz.4.918': attribute type 1 has an invalid length. [ 134.909693][ T7033] 8021q: adding VLAN 0 to HW filter on device bond10 [ 134.914019][ T7033] bond9: (slave bond10): making interface the new active one [ 134.918609][ T7033] bond9: (slave bond10): Enslaving as an active interface with an up link [ 134.928843][ T7033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.918'. [ 134.985151][ T7037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.919'. [ 134.987226][ T7037] netlink: 44 bytes leftover after parsing attributes in process `syz.4.919'. [ 135.346960][ T7057] netlink: 144 bytes leftover after parsing attributes in process `syz.0.927'. [ 135.664507][ T7062] netlink: 'syz.4.930': attribute type 1 has an invalid length. [ 135.686749][ T7065] 8021q: adding VLAN 0 to HW filter on device bond12 [ 135.690194][ T7065] bond11: (slave bond12): making interface the new active one [ 135.692353][ T7065] bond11: (slave bond12): Enslaving as an active interface with an up link [ 135.694129][ T7068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.931'. [ 135.696766][ T7064] netlink: 44 bytes leftover after parsing attributes in process `syz.1.931'. [ 135.769235][ T7074] device syzkaller0 entered promiscuous mode [ 135.899916][ T7080] loop4: detected capacity change from 0 to 512 [ 135.920801][ T7080] EXT4-fs (loop4): can't mount with both data=journal and dax [ 136.008291][ T7025] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.563748][ T7097] netlink: 'syz.0.942': attribute type 1 has an invalid length. [ 136.599082][ T7097] 8021q: adding VLAN 0 to HW filter on device bond24 [ 136.608253][ T7097] bond23: (slave bond24): making interface the new active one [ 136.609600][ T7097] bond23: (slave bond24): Enslaving as an active interface with an up link [ 137.523545][ T7139] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 137.536451][ T7139] 8021q: adding VLAN 0 to HW filter on device bond21 [ 137.542422][ T7139] bond20: (slave bond21): making interface the new active one [ 137.543833][ T7139] bond20: (slave bond21): Enslaving as an active interface with an up link [ 137.574991][ T7144] loop3: detected capacity change from 0 to 512 [ 137.588224][ T7144] EXT4-fs (loop3): can't mount with both data=journal and dax [ 138.094784][ T7153] tipc: Enabled bearer , priority 0 [ 138.105620][ T7152] tipc: Disabling bearer [ 138.236495][ T7167] loop4: detected capacity change from 0 to 256 [ 138.267655][ T7167] FAT-fs (loop4): Directory bread(block 64) failed [ 138.269093][ T7167] FAT-fs (loop4): Directory bread(block 65) failed [ 138.270294][ T7167] FAT-fs (loop4): Directory bread(block 66) failed [ 138.275021][ T7167] FAT-fs (loop4): Directory bread(block 67) failed [ 138.284270][ T7167] FAT-fs (loop4): Directory bread(block 68) failed [ 138.285505][ T7167] FAT-fs (loop4): Directory bread(block 69) failed [ 138.286676][ T7167] FAT-fs (loop4): Directory bread(block 70) failed [ 138.287860][ T7167] FAT-fs (loop4): Directory bread(block 71) failed [ 138.300441][ T7167] FAT-fs (loop4): Directory bread(block 72) failed [ 138.301669][ T7167] FAT-fs (loop4): Directory bread(block 73) failed [ 138.873089][ T7195] __nla_validate_parse: 16 callbacks suppressed [ 138.873163][ T7195] netlink: 144 bytes leftover after parsing attributes in process `syz.3.976'. [ 139.261300][ T7192] tipc: Started in network mode [ 139.263356][ T7192] tipc: Node identity 3a557263f396, cluster identity 4711 [ 139.287903][ T7192] tipc: Enabled bearer , priority 0 [ 139.309112][ T7191] tipc: Disabling bearer [ 139.496351][ T7215] loop0: detected capacity change from 0 to 512 [ 139.501647][ T7215] EXT4-fs (loop0): can't mount with both data=journal and dax [ 139.945464][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 139.952401][ T7223] 8021q: adding VLAN 0 to HW filter on device bond18 [ 139.956656][ T7223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.987'. [ 139.958091][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 140.000674][ T7228] netlink: 144 bytes leftover after parsing attributes in process `syz.3.990'. [ 140.077963][ T7230] tipc: Enabled bearer , priority 0 [ 140.086203][ T7229] tipc: Disabling bearer [ 140.278319][ T7238] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1003'. [ 140.758584][ T7246] device syzkaller0 entered promiscuous mode [ 140.794693][ T7248] loop2: detected capacity change from 0 to 512 [ 140.807901][ T7248] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.996: Unrecognised inode hash code 255 [ 140.809878][ T7248] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.996: Corrupt directory, running e2fsck is recommended [ 140.820538][ T7248] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 140.824994][ T7248] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.996: corrupted in-inode xattr [ 140.829648][ T7248] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.996: couldn't read orphan inode 15 (err -117) [ 140.852241][ T7248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.860711][ T7248] EXT4-fs (loop2): shut down requested (2) [ 140.872081][ T7248] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 140.912752][ T4341] EXT4-fs (loop2): unmounting filesystem. [ 141.023804][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1002'. [ 141.055218][ T7266] loop1: detected capacity change from 0 to 512 [ 141.061840][ T7262] 8021q: adding VLAN 0 to HW filter on device bond25 [ 141.074188][ T7262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1002'. [ 141.075666][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1002'. [ 141.083469][ T7266] EXT4-fs (loop1): can't mount with both data=journal and dax [ 141.526765][ T7273] device syzkaller0 entered promiscuous mode [ 141.548163][ T7280] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1008'. [ 141.794463][ T7293] loop4: detected capacity change from 0 to 4096 [ 141.802572][ T7293] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 141.817923][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 153.176285][ T7294] device syzkaller0 entered promiscuous mode [ 153.178164][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1016'. [ 153.188585][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 153.193960][ T7312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1017'. [ 153.195474][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 153.354636][ T7331] loop3: detected capacity change from 0 to 256 [ 153.385671][ T7331] FAT-fs (loop3): Directory bread(block 64) failed [ 153.386909][ T7331] FAT-fs (loop3): Directory bread(block 65) failed [ 153.387949][ T7331] FAT-fs (loop3): Directory bread(block 66) failed [ 153.388972][ T7331] FAT-fs (loop3): Directory bread(block 67) failed [ 153.390002][ T7331] FAT-fs (loop3): Directory bread(block 68) failed [ 153.391092][ T7331] FAT-fs (loop3): Directory bread(block 69) failed [ 153.392791][ T7331] FAT-fs (loop3): Directory bread(block 70) failed [ 153.394118][ T7331] FAT-fs (loop3): Directory bread(block 71) failed [ 153.395247][ T7331] FAT-fs (loop3): Directory bread(block 72) failed [ 153.399389][ T7331] FAT-fs (loop3): Directory bread(block 73) failed [ 154.334388][ T7350] loop0: detected capacity change from 0 to 512 [ 154.348421][ T7350] EXT4-fs (loop0): can't mount with both data=journal and dax [ 155.273854][ T7354] loop3: detected capacity change from 0 to 4096 [ 155.308815][ T7354] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 155.677984][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 155.826962][ T4332] Bluetooth: hci1: command 0x0406 tx timeout [ 155.828198][ T4343] Bluetooth: hci2: command 0x0406 tx timeout [ 155.828217][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 155.829273][ T4336] Bluetooth: hci4: command 0x0406 tx timeout [ 155.830254][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 157.348714][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.351631][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.353309][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.354924][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.357409][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.358940][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.432652][ T4340] Bluetooth: hci5: command 0x0409 tx timeout [ 161.560955][ T4340] Bluetooth: hci5: command 0x041b tx timeout [ 163.681220][ T4340] Bluetooth: hci5: command 0x040f tx timeout [ 165.051436][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1032'. [ 165.201155][ T7388] loop0: detected capacity change from 0 to 256 [ 165.233908][ T7391] loop3: detected capacity change from 0 to 512 [ 165.237168][ T7391] EXT4-fs (loop3): can't mount with both data=journal and dax [ 165.243818][ T7388] FAT-fs (loop0): Directory bread(block 64) failed [ 165.244936][ T7388] FAT-fs (loop0): Directory bread(block 65) failed [ 165.246196][ T7388] FAT-fs (loop0): Directory bread(block 66) failed [ 165.247326][ T7388] FAT-fs (loop0): Directory bread(block 67) failed [ 165.248402][ T7388] FAT-fs (loop0): Directory bread(block 68) failed [ 165.261736][ T7388] FAT-fs (loop0): Directory bread(block 69) failed [ 165.262885][ T7388] FAT-fs (loop0): Directory bread(block 70) failed [ 165.263947][ T7388] FAT-fs (loop0): Directory bread(block 71) failed [ 165.264969][ T7388] FAT-fs (loop0): Directory bread(block 72) failed [ 165.265965][ T7388] FAT-fs (loop0): Directory bread(block 73) failed [ 165.797563][ T4340] Bluetooth: hci5: command 0x0419 tx timeout [ 165.837578][ T7371] chnl_net:caif_netlink_parms(): no params data found [ 165.946607][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.956837][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.967165][ T7371] device bridge_slave_0 entered promiscuous mode [ 166.775079][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.781632][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.783246][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.785076][ T7371] device bridge_slave_1 entered promiscuous mode [ 166.805642][ T7423] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1046'. [ 166.871794][ T7371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.874558][ T7371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.885591][ T7371] team0: Port device team_slave_0 added [ 166.887918][ T7371] team0: Port device team_slave_1 added [ 166.893685][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.894887][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.900306][ T7421] loop0: detected capacity change from 0 to 4096 [ 166.907231][ T7371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.952075][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.961699][ T7421] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 166.990161][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.991450][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.996393][ T7371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.024228][ T7439] WARNING! power/level is deprecated; use power/control instead [ 167.051185][ T7371] device hsr_slave_0 entered promiscuous mode [ 167.092608][ T7445] loop3: detected capacity change from 0 to 256 [ 167.128761][ T7371] device hsr_slave_1 entered promiscuous mode [ 167.129334][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 167.141820][ T7445] FAT-fs (loop3): Directory bread(block 64) failed [ 167.142877][ T7445] FAT-fs (loop3): Directory bread(block 65) failed [ 167.144046][ T7445] FAT-fs (loop3): Directory bread(block 66) failed [ 167.145107][ T7445] FAT-fs (loop3): Directory bread(block 67) failed [ 167.146185][ T7445] FAT-fs (loop3): Directory bread(block 68) failed [ 167.147145][ T7445] FAT-fs (loop3): Directory bread(block 69) failed [ 167.151765][ T7445] FAT-fs (loop3): Directory bread(block 70) failed [ 167.152923][ T7445] FAT-fs (loop3): Directory bread(block 71) failed [ 167.154098][ T7445] FAT-fs (loop3): Directory bread(block 72) failed [ 167.155224][ T7445] FAT-fs (loop3): Directory bread(block 73) failed [ 167.160060][ T7371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.161422][ T7371] Cannot create hsr debugfs directory [ 167.480332][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.603365][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.695798][ T7371] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.716870][ T7371] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.754337][ T7371] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.783813][ T7371] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.933494][ T7464] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1060'. [ 168.038298][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.061907][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.063988][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.067977][ T7371] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.091411][ T9] tipc: Left network mode [ 168.099354][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.101076][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.103727][ T1878] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.104827][ T1878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.108974][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.116237][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.139209][ T1878] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.140512][ T1878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.199054][ T7481] loop4: detected capacity change from 0 to 512 [ 168.367707][ T7491] loop4: detected capacity change from 0 to 1024 [ 168.369264][ T7491] EXT4-fs: Ignoring removed bh option [ 168.387846][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.401389][ T7491] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce028, mo2=0000] [ 168.404231][ T7491] System zones: 0-1, 3-12 [ 168.414289][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.417593][ T7491] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #3: block 1: comm syz.4.1066: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.478124][ T7491] EXT4-fs (loop4): Remounting filesystem read-only [ 168.479360][ T7491] Quota error (device loop4): write_blk: dquota write failed [ 168.480690][ T7491] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 168.489863][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.491778][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.527772][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.530137][ T7491] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1066: Failed to acquire dquot type 0 [ 168.533648][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.549932][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.551496][ T7491] EXT4-fs (loop4): Remounting filesystem read-only [ 168.552902][ T7491] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.1066: Freeing blocks not in datazone - block = 0, count = 4096 [ 168.561686][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.576666][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.578446][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.579770][ T7491] EXT4-fs (loop4): Remounting filesystem read-only [ 168.589392][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.592003][ T7491] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1066: Invalid inode bitmap blk 0 in block_group 0 [ 168.599473][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.606519][ T7491] EXT4-fs (loop4): Remounting filesystem read-only [ 168.615228][ T7491] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 168.621137][ T5594] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.624738][ T7491] EXT4-fs (loop4): Remounting filesystem read-only [ 168.626082][ T5594] EXT4-fs (loop4): Remounting filesystem read-only [ 168.627244][ T5594] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 168.629621][ T7491] EXT4-fs (loop4): 1 orphan inode deleted [ 168.630620][ T7491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 168.639305][ T5594] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:13: Failed to release dquot type 0 [ 168.649603][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.661751][ T5594] EXT4-fs (loop4): Remounting filesystem read-only [ 168.690295][ T7491] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm syz.4.1066: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.719600][ T7491] EXT4-fs (loop4): Remounting filesystem read-only [ 168.731218][ T7491] Quota error (device loop4): find_next_id: Can't read quota tree block 1 [ 168.766707][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 168.837786][ T7513] loop4: detected capacity change from 0 to 512 [ 168.865973][ T7513] EXT4-fs (loop4): can't mount with both data=journal and dax [ 168.970514][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.971977][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.978714][ T7371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.547387][ T9] bond12: (slave gretap1): Releasing backup interface [ 169.626443][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 169.643483][ T7553] 8021q: adding VLAN 0 to HW filter on device bond26 [ 169.714631][ T7553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1084'. [ 169.716193][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 169.764939][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.766667][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.821532][ T7371] device veth0_vlan entered promiscuous mode [ 169.823765][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.829565][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.831463][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.833036][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.850875][ T7371] device veth1_vlan entered promiscuous mode [ 169.864871][ T7371] device veth0_macvtap entered promiscuous mode [ 169.883827][ T7578] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff [ 169.912959][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.914700][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 169.916282][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.920146][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.925375][ T7371] device veth1_macvtap entered promiscuous mode [ 170.237373][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.239096][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.242544][ T7577] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1087'. [ 170.283591][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.290039][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.292729][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.295937][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.299849][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.307135][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.311240][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.313962][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.317248][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.319125][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.322601][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.406527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.408417][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.410937][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.413864][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.415717][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.417674][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.419525][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.421410][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.423514][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.425634][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.427397][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.429267][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.431777][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.718579][ T7626] loop4: detected capacity change from 0 to 256 [ 170.734014][ T7626] FAT-fs (loop4): Directory bread(block 64) failed [ 170.736356][ T7626] FAT-fs (loop4): Directory bread(block 65) failed [ 170.739366][ T7626] FAT-fs (loop4): Directory bread(block 66) failed [ 170.742825][ T7626] FAT-fs (loop4): Directory bread(block 67) failed [ 170.745183][ T7626] FAT-fs (loop4): Directory bread(block 68) failed [ 170.747473][ T7626] FAT-fs (loop4): Directory bread(block 69) failed [ 170.749865][ T7626] FAT-fs (loop4): Directory bread(block 70) failed [ 170.757010][ T7626] FAT-fs (loop4): Directory bread(block 71) failed [ 170.759401][ T7626] FAT-fs (loop4): Directory bread(block 72) failed [ 170.763009][ T7626] FAT-fs (loop4): Directory bread(block 73) failed [ 170.946074][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.948059][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.040380][ T7371] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.042008][ T7371] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.043478][ T7371] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.045012][ T7371] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.072527][ T9] device hsr_slave_0 left promiscuous mode [ 171.102948][ T9] device hsr_slave_1 left promiscuous mode [ 171.194872][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.196377][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.199143][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.201390][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.203983][ T9] device bridge_slave_1 left promiscuous mode [ 171.210656][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.254215][ T9] device bridge_slave_0 left promiscuous mode [ 171.256800][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.401726][ T9] device veth1_macvtap left promiscuous mode [ 171.402959][ T9] device veth0_macvtap left promiscuous mode [ 171.404057][ T9] device veth1_vlan left promiscuous mode [ 171.406326][ T9] device veth0_vlan left promiscuous mode [ 172.274835][ T9] bond18 (unregistering): Released all slaves [ 172.301482][ T7660] loop4: detected capacity change from 0 to 512 [ 172.302951][ T7660] EXT4-fs: inline encryption not supported [ 172.303982][ T7660] EXT4-fs: Ignoring removed i_version option [ 172.318646][ T7660] EXT4-fs (loop4): 1 orphan inode deleted [ 172.319836][ T7660] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.334488][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 172.933749][ T9] bond16 (unregistering): (slave bond17): Releasing backup interface [ 172.972577][ T9] bond17 (unregistering): Released all slaves [ 172.976096][ T9] bond16 (unregistering): Released all slaves [ 173.650586][ T9] bond14 (unregistering): (slave bond15): Releasing backup interface [ 173.690182][ T9] bond15 (unregistering): Released all slaves [ 173.693716][ T9] bond14 (unregistering): Released all slaves [ 174.365156][ T9] bond12 (unregistering): (slave bond13): Releasing backup interface [ 174.407002][ T9] bond13 (unregistering): Released all slaves [ 174.410627][ T9] bond12 (unregistering): Released all slaves [ 175.113638][ T9] bond10 (unregistering): (slave bond11): Releasing backup interface [ 175.156322][ T9] bond11 (unregistering): Released all slaves [ 175.879513][ T9] bond10 (unregistering): Released all slaves [ 176.605826][ T9] bond8 (unregistering): (slave bond9): Releasing backup interface [ 176.644360][ T9] bond9 (unregistering): Released all slaves [ 177.349685][ T9] bond8 (unregistering): Released all slaves [ 178.034131][ T9] bond7 (unregistering): Released all slaves [ 178.786677][ T9] bond6 (unregistering): Released all slaves [ 179.476989][ T9] bond4 (unregistering): (slave bond5): Releasing backup interface [ 179.526617][ T9] bond5 (unregistering): Released all slaves [ 180.209957][ T9] bond4 (unregistering): Released all slaves [ 180.930393][ T9] bond2 (unregistering): (slave bond3): Releasing backup interface [ 180.970704][ T9] bond3 (unregistering): Released all slaves [ 181.652090][ T9] bond2 (unregistering): Released all slaves [ 182.367823][ T9] bond1 (unregistering): Released all slaves [ 184.521598][ T9] team0 (unregistering): Port device team_slave_1 removed [ 184.740303][ T9] team0 (unregistering): Port device team_slave_0 removed [ 184.912527][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.134402][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.460289][ T9] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 186.712782][ T9] bond0 (unregistering): Released all slaves [ 187.135694][ T1878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.137375][ T1878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.139162][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.285097][ T5292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.286562][ T5292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.291114][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.350611][ T4340] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.353619][ T4340] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.355425][ T4340] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.356940][ T4340] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.359792][ T4340] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 187.361105][ T4340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.449465][ T4340] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.451947][ T4340] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.458946][ T4340] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.462652][ T4340] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.464670][ T4340] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 187.466042][ T4340] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.468337][ T7695] loop5: detected capacity change from 0 to 256 [ 187.531009][ T7695] FAT-fs (loop5): Directory bread(block 64) failed [ 187.532186][ T7695] FAT-fs (loop5): Directory bread(block 65) failed [ 187.533241][ T7695] FAT-fs (loop5): Directory bread(block 66) failed [ 187.534290][ T7695] FAT-fs (loop5): Directory bread(block 67) failed [ 187.535324][ T7695] FAT-fs (loop5): Directory bread(block 68) failed [ 187.536270][ T7695] FAT-fs (loop5): Directory bread(block 69) failed [ 187.537328][ T7695] FAT-fs (loop5): Directory bread(block 70) failed [ 187.562255][ T7695] FAT-fs (loop5): Directory bread(block 71) failed [ 187.563506][ T7695] FAT-fs (loop5): Directory bread(block 72) failed [ 187.564749][ T7695] FAT-fs (loop5): Directory bread(block 73) failed [ 187.574287][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.577146][ T4336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.578915][ T4336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.581440][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.584242][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 187.585681][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.867127][ T7679] chnl_net:caif_netlink_parms(): no params data found [ 188.100891][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.102277][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.104846][ T7679] device bridge_slave_0 entered promiscuous mode [ 188.121216][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.123705][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.126290][ T7679] device bridge_slave_1 entered promiscuous mode [ 188.151863][ T7679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.216112][ T7679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.303927][ T7699] chnl_net:caif_netlink_parms(): no params data found [ 188.447122][ T7679] team0: Port device team_slave_0 added [ 188.471119][ T7692] chnl_net:caif_netlink_parms(): no params data found [ 188.487295][ T7679] team0: Port device team_slave_1 added [ 188.815426][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.839446][ T7749] tipc: Started in network mode [ 188.840454][ T7749] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 188.841925][ T7749] tipc: Enabling of bearer rejected, failed to enable media [ 188.848563][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.849873][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.861803][ T7679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.891392][ T7699] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.892687][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.900394][ T7699] device bridge_slave_0 entered promiscuous mode [ 188.965584][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.969924][ T7699] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.971040][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.973651][ T7699] device bridge_slave_1 entered promiscuous mode [ 188.979660][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.980917][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.986080][ T7679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.002968][ T7692] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.004196][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.006913][ T7692] device bridge_slave_0 entered promiscuous mode [ 189.016219][ T7699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.022567][ T7692] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.034501][ T7692] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.043404][ T7692] device bridge_slave_1 entered promiscuous mode [ 189.076955][ T7679] device hsr_slave_0 entered promiscuous mode [ 189.126155][ T7679] device hsr_slave_1 entered promiscuous mode [ 189.167770][ T7699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.191894][ T7773] loop5: detected capacity change from 0 to 1024 [ 189.194113][ T7773] EXT4-fs: Ignoring removed orlov option [ 189.210949][ T7773] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 189.233133][ T7371] EXT4-fs (loop5): unmounting filesystem. [ 189.235741][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.349054][ T7778] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 189.399378][ T4340] Bluetooth: hci4: command 0x0409 tx timeout [ 189.430079][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.477440][ T7692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.483057][ T7699] team0: Port device team_slave_0 added [ 189.486935][ T7699] team0: Port device team_slave_1 added [ 189.493824][ T7782] gretap0 speed is unknown, defaulting to 1000 [ 189.518781][ T7782] gretap0 speed is unknown, defaulting to 1000 [ 189.522911][ T7782] gretap0 speed is unknown, defaulting to 1000 [ 189.526475][ T7782] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 189.530175][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.531348][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.535939][ T7699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.546410][ T7782] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 189.568816][ T7692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.574236][ T7782] gretap0 speed is unknown, defaulting to 1000 [ 189.581116][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.582416][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.586694][ T7699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.595023][ T7785] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1130'. [ 189.640569][ T4340] Bluetooth: hci6: command 0x0409 tx timeout [ 189.646731][ T4340] Bluetooth: hci1: command 0x0409 tx timeout [ 189.691244][ T7782] gretap0 speed is unknown, defaulting to 1000 [ 189.694046][ T7782] gretap0 speed is unknown, defaulting to 1000 [ 189.695396][ T7782] gretap0 speed is unknown, defaulting to 1000 [ 189.707703][ T7692] team0: Port device team_slave_0 added [ 189.712766][ T7692] team0: Port device team_slave_1 added [ 189.718319][ T7692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.719519][ T7692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.728337][ T7692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.730759][ T7782] gretap0 speed is unknown, defaulting to 1000 [ 189.731877][ T7692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.731886][ T7692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.731901][ T7692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.783090][ T7692] device hsr_slave_0 entered promiscuous mode [ 189.802200][ T7692] device hsr_slave_1 entered promiscuous mode [ 189.842300][ T7692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.843777][ T7692] Cannot create hsr debugfs directory [ 189.860850][ T7782] gretap0 speed is unknown, defaulting to 1000 [ 189.861969][ T7801] netlink: 'syz.5.1131': attribute type 1 has an invalid length. [ 189.881208][ T7782] gretap0 speed is unknown, defaulting to 1000 [ 189.897625][ T7782] gretap0 speed is unknown, defaulting to 1000 [ 190.045457][ T7699] device hsr_slave_0 entered promiscuous mode [ 190.064500][ T7699] device hsr_slave_1 entered promiscuous mode [ 190.407949][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.409064][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.411016][ T7699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.412277][ T7699] Cannot create hsr debugfs directory [ 190.440346][ T9] tipc: Left network mode [ 190.449623][ T7812] tipc: Started in network mode [ 190.450461][ T7812] tipc: Node identity 1eaa643e8874, cluster identity 4711 [ 190.451784][ T7812] tipc: Enabled bearer , priority 0 [ 190.472339][ T7808] device syzkaller0 entered promiscuous mode [ 190.672245][ T7679] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 190.740557][ T7810] tipc: Resetting bearer [ 190.782448][ T7679] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 190.821871][ T7679] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 190.863195][ T7679] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 190.884278][ T7807] tipc: Resetting bearer [ 191.254740][ T7807] tipc: Disabling bearer [ 191.356341][ T7679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.363891][ T7679] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.370038][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.371888][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.496128][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 191.748186][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 191.750003][ T4340] Bluetooth: hci6: command 0x041b tx timeout [ 191.805180][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.807144][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.815255][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.816457][ T5594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.821571][ T7692] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 191.860615][ T7692] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 191.893051][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.946790][ T7854] futex_wake_op: syz.4.1137 tries to shift op by 144; fix this program [ 192.112134][ T7858] loop4: detected capacity change from 0 to 512 [ 192.162293][ T7692] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 192.330175][ T7853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.331795][ T7853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.469646][ T7853] team0: Device wg0 is of different type [ 192.567477][ T7853] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 192.582081][ T7692] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 192.629281][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.631099][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.632684][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.633827][ T6029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.635700][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.746255][ T9] bond6: (slave gretap1): Releasing backup interface [ 192.804792][ T7869] tipc: Enabled bearer , priority 10 [ 192.813143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.816679][ T7699] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 192.849875][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.852159][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.900572][ T7699] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 192.922365][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.924190][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.926076][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.989964][ T7699] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 193.012270][ T9] IPVS: stopping backup sync thread 6567 ... [ 193.015082][ T7679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.016948][ T7679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.027722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.029544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.031134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.038233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.040251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.041737][ T7699] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 193.511000][ T7692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.597070][ T4340] Bluetooth: hci4: command 0x040f tx timeout [ 193.777992][ T7679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.779661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.781197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.791984][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.794147][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.799292][ T7699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.802490][ T7692] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.834369][ T4340] Bluetooth: hci1: command 0x040f tx timeout [ 193.836462][ T4340] Bluetooth: hci6: command 0x040f tx timeout [ 193.843179][ T9] device hsr_slave_0 left promiscuous mode [ 193.884406][ T9] device hsr_slave_1 left promiscuous mode [ 193.964499][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.966087][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.967715][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.969037][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.970561][ T9] device bridge_slave_1 left promiscuous mode [ 193.971734][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.005723][ T9] device bridge_slave_0 left promiscuous mode [ 194.006887][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.145800][ T9] device veth1_macvtap left promiscuous mode [ 194.147042][ T9] device veth0_macvtap left promiscuous mode [ 194.148124][ T9] device veth1_vlan left promiscuous mode [ 194.149141][ T9] device veth0_vlan left promiscuous mode [ 194.885730][ T9] bond8 (unregistering): (slave bond9): Releasing backup interface [ 194.972859][ T9] bond9 (unregistering): Released all slaves [ 194.976503][ T9] bond8 (unregistering): Released all slaves [ 195.685767][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 195.783532][ T7930] loop4: detected capacity change from 0 to 256 [ 195.839022][ T9] bond6 (unregistering): (slave bond7): Releasing backup interface [ 195.858336][ T9] bond7 (unregistering): Released all slaves [ 195.861914][ T9] bond6 (unregistering): Released all slaves [ 195.927413][ T4340] Bluetooth: hci6: command 0x0419 tx timeout [ 195.928333][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 196.046334][ T7938] loop4: detected capacity change from 0 to 512 [ 196.058351][ T7938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 196.070324][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 196.224713][ T7946] futex_wake_op: syz.4.1154 tries to shift op by 144; fix this program [ 196.360685][ T7949] loop4: detected capacity change from 0 to 512 [ 196.453554][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.455652][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.653228][ T9] bond4 (unregistering): (slave bond5): Releasing backup interface [ 196.693106][ T9] bond5 (unregistering): Released all slaves [ 197.346742][ T9] bond4 (unregistering): Released all slaves [ 198.003977][ T9] bond3 (unregistering): Released all slaves [ 198.676984][ T9] bond1 (unregistering): (slave bond2): Releasing backup interface [ 198.717784][ T9] bond2 (unregistering): Released all slaves [ 199.428656][ T9] bond1 (unregistering): Released all slaves [ 201.620332][ T9] team0 (unregistering): Port device team_slave_1 removed [ 201.808612][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.030158][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.526621][ T9] bond0 (unregistering): Released all slaves [ 203.816973][ T4648] tipc: Node number set to 2531157054 [ 203.819163][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.820978][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.822542][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.823645][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.825058][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.827185][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.828686][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.830388][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.831979][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.833168][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.834499][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.845775][ T7699] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.880954][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.882686][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.913172][ T7959] loop4: detected capacity change from 0 to 512 [ 203.926838][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.928685][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.930465][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.931707][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.934046][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.935952][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.944530][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.946137][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.966356][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.968356][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.969962][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.971126][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.972474][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.974231][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.986232][ T7959] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.1155: Unrecognised inode hash code 255 [ 203.988670][ T7959] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1155: Corrupt directory, running e2fsck is recommended [ 203.990927][ T7959] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 203.992329][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.993961][ T7959] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1155: corrupted in-inode xattr [ 204.002699][ T7959] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1155: couldn't read orphan inode 15 (err -117) [ 204.004977][ T7959] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.010679][ T7959] EXT4-fs error (device loop4): __ext4_remount:6650: comm syz.4.1155: Abort forced by user [ 204.012920][ T7959] EXT4-fs (loop4): Remounting filesystem read-only [ 204.014059][ T7959] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 204.022029][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.034651][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.036232][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.047972][ T7692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.070602][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.089269][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.092419][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.103498][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 204.105158][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.119107][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.120797][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.133940][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.145878][ T7699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.150584][ T7699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.169130][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.170826][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.172730][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.174356][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.175976][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.196770][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.199578][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.201795][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.220899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.222616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.224114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.225587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.227371][ T7679] device veth0_vlan entered promiscuous mode [ 204.250387][ T7679] device veth1_vlan entered promiscuous mode [ 204.256812][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.259613][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.261018][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.262522][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.280135][ T7679] device veth0_macvtap entered promiscuous mode [ 204.283160][ T7679] device veth1_macvtap entered promiscuous mode [ 204.309816][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.311701][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.313183][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.314840][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.316350][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.317945][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.330321][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.332087][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.335711][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.339800][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 204.349179][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.356440][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.357956][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.366838][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.372959][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.376937][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.379997][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.381717][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.393341][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.395991][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.397711][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.403921][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.405797][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.407454][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.418232][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.424726][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1164'. [ 204.435043][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.436394][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.450670][ T7679] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.452222][ T7679] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.453904][ T7679] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.455379][ T7679] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.491681][ T7699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.494645][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.495941][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.504967][ T7692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.580338][ T7857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.581763][ T7857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.583576][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.615563][ T4877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.617169][ T4877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.619535][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.815352][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.817022][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.871203][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.897816][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.247331][ T7692] device veth0_vlan entered promiscuous mode [ 205.250630][ T7692] device veth1_vlan entered promiscuous mode [ 205.299708][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.301480][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.307370][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.308773][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.310404][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.317862][ T7699] device veth0_vlan entered promiscuous mode [ 205.323713][ T7699] device veth1_vlan entered promiscuous mode [ 205.335329][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.337283][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.343487][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.346681][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.348470][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.350147][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.391146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.393838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.395792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.400521][ T7692] device veth0_macvtap entered promiscuous mode [ 205.410962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.413037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.417727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.428455][ T7699] device veth0_macvtap entered promiscuous mode [ 205.438201][ T7692] device veth1_macvtap entered promiscuous mode [ 205.449289][ T7699] device veth1_macvtap entered promiscuous mode [ 205.459258][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.461129][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.471297][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.475402][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.479201][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.482005][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.489335][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.492020][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.494262][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.496237][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.499850][ T7692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.504444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.508169][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.511347][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.513443][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.515755][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.599517][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.601445][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.604422][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.606426][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.608110][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.609897][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.611623][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.613442][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.615200][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.617053][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.618728][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.620484][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.624411][ T7699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.631215][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.634802][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.636503][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.638596][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.640437][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.656926][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.658664][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.660299][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.661749][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.670746][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.673554][ T7692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.681002][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.682880][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.688760][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.690422][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.701688][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1173'. [ 205.704697][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.706482][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.708020][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.723041][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.728859][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.737997][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.739692][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.741836][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.743804][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.745553][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.747217][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.749083][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.751661][ T7699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.755670][ T7692] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.756942][ T7692] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.758325][ T7692] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.759690][ T7692] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.774777][ T8092] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 205.826021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.827950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.830728][ T7699] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.832186][ T7699] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.836073][ T7699] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.837772][ T7699] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.928129][ T8097] device syzkaller0 entered promiscuous mode [ 217.089890][ T7857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.091362][ T7857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.124612][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.126517][ T5594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.127809][ T5594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.130531][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.130640][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.131894][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.156269][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.166580][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1183'. [ 217.191606][ T5594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.193089][ T5594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.198933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.728591][ T8159] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 217.848237][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1196'. [ 218.071226][ T8213] capability: warning: `syz.4.1209' uses 32-bit capabilities (legacy support in use) [ 218.124374][ T8217] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1210'. [ 218.319029][ T8242] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1223'. [ 218.360365][ T8242] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.361989][ T8242] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.363505][ T8242] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.364946][ T8242] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.758294][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1228'. [ 218.784048][ T8263] loop7: detected capacity change from 0 to 2048 [ 218.824510][ T8263] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 218.847373][ T7699] EXT4-fs (loop7): unmounting filesystem. [ 218.960332][ T8276] futex_wake_op: syz.5.1232 tries to shift op by 144; fix this program [ 219.076146][ T8276] loop5: detected capacity change from 0 to 512 [ 219.123769][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.125776][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.485445][ T8315] loop7: detected capacity change from 0 to 512 [ 219.495732][ T8315] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.1246: inode has both inline data and extents flags [ 219.500457][ T8315] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1246: couldn't read orphan inode 15 (err -117) [ 219.503809][ T8315] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 219.838696][ T7699] EXT4-fs (loop7): unmounting filesystem. [ 220.184367][ T8355] netlink: 'syz.8.1258': attribute type 1 has an invalid length. [ 220.333450][ T8369] loop4: detected capacity change from 0 to 7 [ 220.353006][ T8369] Dev loop4: unable to read RDB block 7 [ 220.357313][ T8369] loop4: AHDI p1 p2 p3 [ 220.358070][ T8369] loop4: partition table partially beyond EOD, truncated [ 220.364526][ T8369] loop4: p1 start 1601398130 is beyond EOD, truncated [ 220.366135][ T8369] loop4: p2 start 1702059890 is beyond EOD, truncated [ 220.444422][ T8384] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1268'. [ 220.817360][ T8420] loop8: detected capacity change from 0 to 128 [ 221.018182][ T8429] usb usb1: usbfs: process 8429 (syz.8.1282) did not claim interface 0 before use [ 221.349933][ T8443] futex_wake_op: syz.8.1287 tries to shift op by 144; fix this program [ 221.443302][ T8444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.445002][ T8444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.731028][ T8444] team0: Device wg0 is of different type [ 221.813789][ T8444] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 221.933891][ T8457] loop5: detected capacity change from 0 to 512 [ 221.945379][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1292'. [ 221.951446][ T8457] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 221.968128][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1292'. [ 221.999837][ T8457] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 222.317313][ T8482] futex_wake_op: syz.5.1302 tries to shift op by 144; fix this program [ 222.405224][ T8482] loop5: detected capacity change from 0 to 512 [ 222.596122][ T8133] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 222.598516][ T8481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.600104][ T8481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.781008][ T8504] loop6: detected capacity change from 0 to 128 [ 222.856776][ T8511] netlink: 'syz.6.1311': attribute type 1 has an invalid length. [ 222.868570][ T8511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.890736][ T8511] bond1: (slave geneve2): making interface the new active one [ 222.894862][ T8511] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 222.896754][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 223.075464][ T8533] loop4: detected capacity change from 0 to 256 [ 223.092239][ T8533] FAT-fs (loop4): Directory bread(block 64) failed [ 223.098928][ T8533] FAT-fs (loop4): Directory bread(block 65) failed [ 223.100255][ T8533] FAT-fs (loop4): Directory bread(block 66) failed [ 223.104692][ T8533] FAT-fs (loop4): Directory bread(block 67) failed [ 223.108047][ T8533] FAT-fs (loop4): Directory bread(block 68) failed [ 223.109273][ T8533] FAT-fs (loop4): Directory bread(block 69) failed [ 223.110440][ T8533] FAT-fs (loop4): Directory bread(block 70) failed [ 223.117813][ T8533] FAT-fs (loop4): Directory bread(block 71) failed [ 223.120161][ T8533] FAT-fs (loop4): Directory bread(block 72) failed [ 223.121450][ T8533] FAT-fs (loop4): Directory bread(block 73) failed [ 223.193018][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1322'. [ 223.262195][ T8553] netlink: 'syz.6.1324': attribute type 1 has an invalid length. [ 223.286368][ T8553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.766608][ T8586] netlink: 'syz.7.1339': attribute type 1 has an invalid length. [ 223.779490][ T8586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.798724][ T8586] bond1: (slave geneve2): making interface the new active one [ 223.801793][ T8586] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 223.803645][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 223.872083][ T8590] loop7: detected capacity change from 0 to 2048 [ 223.899513][ T8590] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 223.971365][ T8590] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 223.990989][ T8590] EXT4-fs (loop7): Remounting filesystem read-only [ 224.032539][ T7699] EXT4-fs (loop7): unmounting filesystem. [ 224.284816][ T8600] gretap0 speed is unknown, defaulting to 1000 [ 224.424407][ T8604] loop7: detected capacity change from 0 to 4096 [ 224.440657][ T8604] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 224.505779][ T7699] EXT4-fs (loop7): unmounting filesystem. [ 224.596715][ T8615] loop6: detected capacity change from 0 to 512 [ 224.630619][ T8615] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 224.670659][ T7679] EXT4-fs (loop6): unmounting filesystem. [ 224.829944][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1351'. [ 224.833851][ T8624] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1351'. [ 225.030194][ T8633] loop8: detected capacity change from 0 to 4096 [ 225.052245][ T8133] I/O error, dev loop8, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.060485][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1354'. [ 225.062003][ T8633] netlink: 'syz.8.1354': attribute type 7 has an invalid length. [ 225.063204][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1354'. [ 225.109448][ T8633] device team0 entered promiscuous mode [ 225.110611][ T8633] device team_slave_0 entered promiscuous mode [ 225.121336][ T8633] device team_slave_1 entered promiscuous mode [ 225.147333][ T8633] device bond0 entered promiscuous mode [ 225.148550][ T8633] device bond_slave_0 entered promiscuous mode [ 225.152084][ T8633] device bond_slave_1 entered promiscuous mode [ 225.189127][ T8633] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 225.197756][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 225.272524][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1365'. [ 225.274666][ T8653] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1365'. [ 225.372077][ T8657] loop6: detected capacity change from 0 to 512 [ 225.378938][ T8657] EXT4-fs: Ignoring removed orlov option [ 225.445725][ T8657] [ 225.446210][ T8657] ====================================================== [ 225.447638][ T8657] WARNING: possible circular locking dependency detected [ 225.448764][ T8657] syzkaller #0 Not tainted [ 225.449487][ T8657] ------------------------------------------------------ [ 225.450713][ T8657] syz.6.1366/8657 is trying to acquire lock: [ 225.451711][ T8657] ffff0000f540ec18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1b0/0x28fc [ 225.453468][ T8657] [ 225.453468][ T8657] but task is already holding lock: [ 225.454654][ T8657] ffff0000fad61ee0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x36c/0x7b4 [ 225.456257][ T8657] [ 225.456257][ T8657] which lock already depends on the new lock. [ 225.456257][ T8657] [ 225.458022][ T8657] [ 225.458022][ T8657] the existing dependency chain (in reverse order) is: [ 225.459459][ T8657] [ 225.459459][ T8657] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 225.460718][ T8657] down_write+0x5c/0x88 [ 225.461523][ T8657] ext4_destroy_inline_data+0x30/0x114 [ 225.462532][ T8657] ext4_writepages+0x42c/0x28fc [ 225.463429][ T8657] do_writepages+0x2c4/0x50c [ 225.464289][ T8657] filemap_fdatawrite_wbc+0x124/0x174 [ 225.465288][ T8657] file_write_and_wait_range+0x11c/0x1f4 [ 225.466316][ T8657] ext4_sync_file+0x20c/0xc84 [ 225.467206][ T8657] vfs_fsync_range+0x168/0x188 [ 225.468083][ T8657] ext4_buffered_write_iter+0x474/0x520 [ 225.469137][ T8657] ext4_file_write_iter+0x188/0x1500 [ 225.470142][ T8657] do_iter_write+0x520/0x93c [ 225.471029][ T8657] do_pwritev+0x1e8/0x338 [ 225.471839][ T8657] __arm64_sys_pwritev2+0xdc/0x110 [ 225.472762][ T8657] invoke_syscall+0x98/0x290 [ 225.473590][ T8657] el0_svc_common+0x13c/0x258 [ 225.474426][ T8657] do_el0_svc+0x5c/0x134 [ 225.475207][ T8657] el0_svc+0x58/0x128 [ 225.476000][ T8657] el0t_64_sync_handler+0x84/0xf0 [ 225.476891][ T8657] el0t_64_sync+0x18c/0x190 [ 225.477715][ T8657] [ 225.477715][ T8657] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 225.479105][ T8657] __lock_acquire+0x2808/0x6634 [ 225.479956][ T8657] lock_acquire+0x20c/0x638 [ 225.480833][ T8657] percpu_down_read+0x70/0x2a8 [ 225.481695][ T8657] ext4_writepages+0x1b0/0x28fc [ 225.482577][ T8657] do_writepages+0x2c4/0x50c [ 225.483426][ T8657] __writeback_single_inode+0x164/0x157c [ 225.484510][ T8657] writeback_single_inode+0x1cc/0x73c [ 225.485476][ T8657] write_inode_now+0x150/0x1cc [ 225.486377][ T8657] iput+0x5b8/0x7e8 [ 225.487087][ T8657] ext4_xattr_block_set+0x1474/0x28b4 [ 225.488139][ T8657] ext4_expand_extra_isize_ea+0xea4/0x1818 [ 225.489183][ T8657] __ext4_expand_extra_isize+0x2a0/0x364 [ 225.490217][ T8657] __ext4_mark_inode_dirty+0x3d4/0x7b4 [ 225.491209][ T8657] ext4_evict_inode+0xb50/0x1264 [ 225.492154][ T8657] evict+0x3d8/0x824 [ 225.492897][ T8657] iput+0x728/0x7e8 [ 225.493586][ T8657] ext4_process_orphan+0x24c/0x2c0 [ 225.494518][ T8657] ext4_orphan_cleanup+0x964/0x1090 [ 225.495496][ T8657] ext4_fill_super+0x5af8/0x63bc [ 225.496417][ T8657] get_tree_bdev+0x35c/0x54c [ 225.497267][ T8657] ext4_get_tree+0x28/0x38 [ 225.498094][ T8657] vfs_get_tree+0x90/0x278 [ 225.498915][ T8657] do_new_mount+0x228/0x804 [ 225.499745][ T8657] path_mount+0x5ac/0xe6c [ 225.500564][ T8657] __arm64_sys_mount+0x4a0/0x5a0 [ 225.501475][ T8657] invoke_syscall+0x98/0x290 [ 225.502301][ T8657] el0_svc_common+0x13c/0x258 [ 225.503204][ T8657] do_el0_svc+0x5c/0x134 [ 225.504044][ T8657] el0_svc+0x58/0x128 [ 225.504805][ T8657] el0t_64_sync_handler+0x84/0xf0 [ 225.505730][ T8657] el0t_64_sync+0x18c/0x190 [ 225.506534][ T8657] [ 225.506534][ T8657] other info that might help us debug this: [ 225.506534][ T8657] [ 225.508208][ T8657] Possible unsafe locking scenario: [ 225.508208][ T8657] [ 225.509372][ T8657] CPU0 CPU1 [ 225.510203][ T8657] ---- ---- [ 225.511093][ T8657] lock(&ei->xattr_sem); [ 225.511792][ T8657] lock(&sbi->s_writepages_rwsem); [ 225.513054][ T8657] lock(&ei->xattr_sem); [ 225.514210][ T8657] lock(&sbi->s_writepages_rwsem); [ 225.515103][ T8657] [ 225.515103][ T8657] *** DEADLOCK *** [ 225.515103][ T8657] [ 225.516409][ T8657] 3 locks held by syz.6.1366/8657: [ 225.517265][ T8657] #0: ffff0000f6dc00e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a0/0x840 [ 225.519026][ T8657] #1: ffff0000f6dc0650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3e0/0x1264 [ 225.520658][ T8657] #2: ffff0000fad61ee0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x36c/0x7b4 [ 225.522513][ T8657] [ 225.522513][ T8657] stack backtrace: [ 225.523546][ T8657] CPU: 1 PID: 8657 Comm: syz.6.1366 Not tainted syzkaller #0 [ 225.524882][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 225.526545][ T8657] Call trace: [ 225.527112][ T8657] dump_backtrace+0x1c4/0x1f0 [ 225.527897][ T8657] show_stack+0x2c/0x3c [ 225.528585][ T8657] __dump_stack+0x30/0x40 [ 225.529297][ T8657] dump_stack_lvl+0xf4/0x15c [ 225.530072][ T8657] dump_stack+0x1c/0x5c [ 225.530746][ T8657] print_circular_bug+0x148/0x1b0 [ 225.531595][ T8657] check_noncircular+0x264/0x2f8 [ 225.532406][ T8657] __lock_acquire+0x2808/0x6634 [ 225.533190][ T8657] lock_acquire+0x20c/0x638 [ 225.533937][ T8657] percpu_down_read+0x70/0x2a8 [ 225.534733][ T8657] ext4_writepages+0x1b0/0x28fc [ 225.535560][ T8657] do_writepages+0x2c4/0x50c [ 225.536318][ T8657] __writeback_single_inode+0x164/0x157c [ 225.537244][ T8657] writeback_single_inode+0x1cc/0x73c [ 225.538078][ T8657] write_inode_now+0x150/0x1cc [ 225.538856][ T8657] iput+0x5b8/0x7e8 [ 225.539482][ T8657] ext4_xattr_block_set+0x1474/0x28b4 [ 225.540380][ T8657] ext4_expand_extra_isize_ea+0xea4/0x1818 [ 225.541374][ T8657] __ext4_expand_extra_isize+0x2a0/0x364 [ 225.542322][ T8657] __ext4_mark_inode_dirty+0x3d4/0x7b4 [ 225.543199][ T8657] ext4_evict_inode+0xb50/0x1264 [ 225.544016][ T8657] evict+0x3d8/0x824 [ 225.544696][ T8657] iput+0x728/0x7e8 [ 225.545330][ T8657] ext4_process_orphan+0x24c/0x2c0 [ 225.546208][ T8657] ext4_orphan_cleanup+0x964/0x1090 [ 225.547067][ T8657] ext4_fill_super+0x5af8/0x63bc [ 225.547917][ T8657] get_tree_bdev+0x35c/0x54c [ 225.548724][ T8657] ext4_get_tree+0x28/0x38 [ 225.549483][ T8657] vfs_get_tree+0x90/0x278 [ 225.550252][ T8657] do_new_mount+0x228/0x804 [ 225.551017][ T8657] path_mount+0x5ac/0xe6c [ 225.551744][ T8657] __arm64_sys_mount+0x4a0/0x5a0 [ 225.552532][ T8657] invoke_syscall+0x98/0x290 [ 225.553299][ T8657] el0_svc_common+0x13c/0x258 [ 225.554121][ T8657] do_el0_svc+0x5c/0x134 [ 225.554835][ T8657] el0_svc+0x58/0x128 [ 225.555529][ T8657] el0t_64_sync_handler+0x84/0xf0 [ 225.556393][ T8657] el0t_64_sync+0x18c/0x190 [ 225.592883][ T8657] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.1366: iget: bad extra_isize 90 (inode size 256) [ 225.600956][ T8657] EXT4-fs (loop6): Remounting filesystem read-only [ 225.603378][ T8657] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1366: error while reading EA inode 11 err=-117 [ 225.606461][ T8657] EXT4-fs (loop6): Remounting filesystem read-only [ 225.612170][ T8657] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.1366: iget: bad extra_isize 90 (inode size 256) [ 225.621517][ T8657] EXT4-fs (loop6): Remounting filesystem read-only [ 225.622905][ T8657] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1366: error while reading EA inode 11 err=-117 [ 225.625213][ T8657] EXT4-fs (loop6): Remounting filesystem read-only [ 225.626450][ T8657] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #18: comm syz.6.1366: iget: bad extra_isize 90 (inode size 256) [ 225.629233][ T8657] EXT4-fs (loop6): Remounting filesystem read-only [ 225.630703][ T8657] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1366: error while reading EA inode 18 err=-117 [ 225.633053][ T8657] EXT4-fs (loop6): Remounting filesystem read-only [ 225.634289][ T8657] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #18: comm syz.6.1366: iget: bad extra_isize 90 (inode size 256) [ 225.636644][ T8657] EXT4-fs (loop6): Remounting filesystem read-only [ 225.639977][ T8657] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1366: error while reading EA inode 18 err=-117 [ 225.642467][ T8657] EXT4-fs (loop6): Remounting filesystem read-only [ 225.643919][ T8657] EXT4-fs (loop6): 1 orphan inode deleted [ 225.644805][ T8657] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 225.655944][ T7679] EXT4-fs (loop6): unmounting filesystem. [ 231.514579][ T8484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.615041][ T8484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.695503][ T8484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.775480][ T8484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.957438][ T8484] tipc: Left network mode [ 232.907786][ T8484] bond9: (slave gretap2): Releasing backup interface [ 233.156420][ T8484] IPVS: stopping backup sync thread 6670 ... [ 234.034291][ T8484] device hsr_slave_0 left promiscuous mode [ 234.076733][ T8484] device hsr_slave_1 left promiscuous mode [ 234.156611][ T8484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.158056][ T8484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.160139][ T8484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.161407][ T8484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.162828][ T8484] device bridge_slave_1 left promiscuous mode [ 234.163910][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.207480][ T8484] device bridge_slave_0 left promiscuous mode [ 234.208656][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.336825][ T8484] device veth1_macvtap left promiscuous mode [ 234.337963][ T8484] device veth0_macvtap left promiscuous mode [ 234.338996][ T8484] device veth1_vlan left promiscuous mode [ 234.339952][ T8484] device veth0_vlan left promiscuous mode [ 235.008283][ T8484] bond26 (unregistering): Released all slaves