last executing test programs: 10m27.355318865s ago: executing program 3 (id=308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 10m23.061366936s ago: executing program 3 (id=319): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 10m17.217960527s ago: executing program 3 (id=336): r0 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 10m15.537292562s ago: executing program 3 (id=340): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 10m12.338955946s ago: executing program 3 (id=346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 10m5.397483123s ago: executing program 3 (id=360): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setreuid(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="3003000000000000080000000000000006000000000000000300000000000000b2a60b6900000000810000000000000002000000ff03000004000000000000000000000000000000020000000000000008000000000000000a0000000000000010000000000000000400000007000000030a00000060000040", @ANYBLOB="0e0000007a000000000000000300000000000000000000000000008004000000c227000024262c350000000000000000000000000200000000000000020000000000000008000000000000000700000006000000020000000000000082040000000000"], 0x0, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000001dc, 0x8010) prlimit64(0x0, 0x9, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9m49.376230637s ago: executing program 32 (id=360): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setreuid(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="3003000000000000080000000000000006000000000000000300000000000000b2a60b6900000000810000000000000002000000ff03000004000000000000000000000000000000020000000000000008000000000000000a0000000000000010000000000000000400000007000000030a00000060000040", @ANYBLOB="0e0000007a000000000000000300000000000000000000000000008004000000c227000024262c350000000000000000000000000200000000000000020000000000000008000000000000000700000006000000020000000000000082040000000000"], 0x0, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000001dc, 0x8010) prlimit64(0x0, 0x9, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9m8.908065589s ago: executing program 5 (id=386): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) pwrite64(r1, 0x0, 0x0, 0xe7c) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) geteuid() write$uinput_user_dev(r0, &(0x7f00000017c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5]}, 0x45c) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) 9m7.159669447s ago: executing program 5 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0x3}) syz_mount_image$fuse(&(0x7f0000002d00), 0x0, 0x0, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f0000003540)=[{{&(0x7f0000002340)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000004c0)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000600)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f00000005c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa8a08958f0dc0f394799f8100"/58, 0x3a}, {&(0x7f0000000b40)="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", 0x337}], 0x5}}], 0x1, 0x40080a0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) 8m51.447483199s ago: executing program 33 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0x3}) syz_mount_image$fuse(&(0x7f0000002d00), 0x0, 0x0, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f0000003540)=[{{&(0x7f0000002340)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000004c0)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000600)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f00000005c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa8a08958f0dc0f394799f8100"/58, 0x3a}, {&(0x7f0000000b40)="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", 0x337}], 0x5}}], 0x1, 0x40080a0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) 7m18.193960937s ago: executing program 1 (id=700): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000e200c300a000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x22) 7m17.901473686s ago: executing program 1 (id=702): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m17.728524432s ago: executing program 1 (id=704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000001b40)={0xe, {0x1, 0x8, 0x8001, 0x8}}) 7m16.593252139s ago: executing program 1 (id=706): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x9) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x10, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30, 0x84}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x7, 0x3f0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0xffe0) 7m8.029299189s ago: executing program 1 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000001b40)={0xe, {0x1, 0x8, 0x8001, 0x8}}) sync_file_range(0xffffffffffffffff, 0xb8a, 0xd4, 0xd) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x7, 0x20, 0x400, 0x7ff, {{0x14, 0x4, 0x3, 0x2, 0x50, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @empty, {[@rr={0x7, 0x3, 0xdb}, @timestamp_addr={0x44, 0x4, 0x18, 0x1, 0xd}, @cipso={0x86, 0x34, 0x3, [{0x5, 0x2}, {0x1, 0xb, "6d85eadc92850842da"}, {0x2, 0x2}, {0x7, 0xe, "5d10a492b7003c0792a6d706"}, {0x7, 0x9, "d1fc4b374772c7"}, {0x5, 0x4, "cdaa"}, {0x2, 0x4, "b57e"}]}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@loopback, r3}, 0x14) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_ADV_ENABLE={{0x9}, 0x3d}}}, 0x7) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x8, '\x00', @a}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m6.038644104s ago: executing program 1 (id=728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0x3}) syz_mount_image$fuse(&(0x7f0000002d00), 0x0, 0x0, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f0000003540)=[{{&(0x7f0000002340)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000004c0)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000600)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f00000005c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa8a08958f0dc0f394799f8100"/58, 0x3a}, {&(0x7f0000000b40)="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", 0x337}], 0x5}}], 0x1, 0x40080a0) 6m50.659411857s ago: executing program 34 (id=728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0x3}) syz_mount_image$fuse(&(0x7f0000002d00), 0x0, 0x0, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f0000003540)=[{{&(0x7f0000002340)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000004c0)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000600)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f00000005c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa8a08958f0dc0f394799f8100"/58, 0x3a}, {&(0x7f0000000b40)="853d812375877866806fdff43051b4023fa2334c45b8d31dff2233f12c7ffec14b58976722a067ecd394dcf55ad8bc6adf88e0dd053d47e5ddc3b08ac01e128339844430d1033bc401927fd38018f2b0e9b713aa160d7b265e90ca90a88cbb0b1493ccdd35f17ed434451c742e3d9c7607fb338490fb578a48c1853a42bbd171367e33a75c9cde0160143ad61ffad513ae1059f9e31087c6448fae895aa68e70fa53628160525c97bf79f68247bf691e8e46c94c3c0fa018fd9d10c19d7bf717ef1da47e10b55a09cb5e411146c03b26abef74a1b955c2202b9a4838f5b2495c6728602328820e2df2acfb22138f1d86c29f73641d1a55e8deadd320d9e951b33370ccebbd05a4d4358c514b5c7b695a9ec90b36ac77e9dd4e03569065d281b1b727a1692e26b8f363d7540e8ca2e806164a6fc46f8e2d2a6c128daf63a398077a13fbc0d539bda7fb8b904638e612482b548f1a089ec8d80fe0e6baf6379a037ce7efdf6ede864f2c8736b1abb71991ba15f2fd1372314390de9a3fa1a4eefc12dfd5bbf5c6606a4a5d2e08742f02fbc8aaa140a652369a2200736851cf259dde2999c8b2539d7702d0b37aae943e160e14d24b3eaa0b025d55a16c924f16e9eecebbc52b2069ba5223df0e252c78372aa13958a89a2b3a2044aa2275817ac942b261d2f2c25c45984b8af9dfa7652f7530aa4e714ad4c66b65ebaf42e223e415f1326bfd00d98bdaa4396a23aaa3623d0324beb61843f685a4e577247ae9b833aee04e55ae6d336d73513fbdcc62af87d2ba946a9c25d175e66990c636df62f853377274c1a04fb1fb235ee080cad746e239cdc728474812e995ac0c670f9885ad7704a281044948efd5170cab39daa5b034349741fb857260796231aa7864e9517c159e7a5e05d86dd4f4185d0ece85f3bcdaf83dab3e2dfbe8ee2786b23b7f0dda7243e217382da2d3f481447f0f54f2d4b0d52e7afb07cc615c06699f53aadaf1073cbc7e40477acad0a92ec51ee421524bc082abb17cd85d21caf69dafb65e4896f5879c8c4e5a1ac91d4b9529da9cab44e27a88a1d446d5e59f6e186083d7b10ba0cee1933f62e8326fac01b12bdf3e6f7b9e18d729eb65d6e61bc29380e282347311220f54c7b52c3760a194a7a74f9aa418ce", 0x337}], 0x5}}], 0x1, 0x40080a0) 3m18.285049439s ago: executing program 7 (id=1322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800005}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(r2, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 3m17.114100347s ago: executing program 7 (id=1327): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) 3m16.770802109s ago: executing program 7 (id=1329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r3, 0x29, 0x40, 0x0, &(0x7f0000000200)=0x54) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f00008e1000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{0xfffc, 0x2, 0x8}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) bind$inet(r4, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000680)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0xba, 0x7f, 0x8, 0x3, 0x2, 0x9, "dd88ce2fa5232875e46103e0b46130ee28962177eaf48b8002580c407e6925e45f545feeab3897673b0f1f5e42a767f2ff57b0fd314218900ee11fe0577d95f9776a0781d838676327490c48f26076a7dc3d64ec328514fa42b935d81ae4cb451e129d0a0cdcc71a9db67f216ac32da0f40c5135ca3c81aea57c702db8d622e235bee7320a5947ea292fa046ce076e278a6eb725fb6d316de6e59f6633b7668e78199d178254c13a675007fca5d53bbdf8f407e4ae90ce1e9cb7"}}, 0x1d2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x23, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x4000010) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x14084, &(0x7f0000000080)={[{@test_dummy_encryption}, {@nouser_xattr}, {@discard}]}, 0x3, 0x483, &(0x7f00000006c0)="$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") 3m14.547032891s ago: executing program 7 (id=1332): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newlink={0x3c, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb91f73b5bf387637}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) 3m14.495601152s ago: executing program 7 (id=1334): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x80000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) close(0x3) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x25, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xa9}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 3m14.121834145s ago: executing program 7 (id=1338): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x5, 0x7, 0xb5, 0x810, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x80000001) 2m59.038343458s ago: executing program 35 (id=1338): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x5, 0x7, 0xb5, 0x810, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x80000001) 7.569226313s ago: executing program 6 (id=2028): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.972035411s ago: executing program 6 (id=2030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6.417307998s ago: executing program 0 (id=2031): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000400)={[{@barrier}, {@noauto_da_alloc}, {@minixdf}, {}, {@nouid32}, {@noquota}, {@mblk_io_submit}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x15) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) 6.04109438s ago: executing program 6 (id=2035): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00"/56, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 5.900609065s ago: executing program 0 (id=2037): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x40f00}, 0x94) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.752880849s ago: executing program 2 (id=2039): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x840000000002, 0x3, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="015c52bd7000fcdb907446abdf250f0000001402018008000100535d1505755c0b492b17cc1158fd604e71c3ff069b0c9ed5b693330fa2cc9cc89c24197aef174a1a3c45", @ANYRES32=0x0, @ANYBLOB="0800030001000000"], 0x28}, 0x1, 0x0, 0x0, 0x400}, 0xc004) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 4.890889236s ago: executing program 4 (id=2040): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0xfffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8}, {0x0, 0x0, 0x10, 0xffffffffffffffff}, 0x3}, [@mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0xc4}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000fc00"/87], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 4.853917608s ago: executing program 8 (id=2041): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x8}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000001880)=""/4112, 0x1010}], 0x1, 0x20}}], 0x48, 0x80}, 0x0) 4.450209071s ago: executing program 0 (id=2042): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000000)) pwrite64(r1, 0x0, 0x0, 0xe7c) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) geteuid() write$uinput_user_dev(r0, &(0x7f00000017c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5]}, 0x45c) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) 4.449585091s ago: executing program 4 (id=2043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 4.354336263s ago: executing program 8 (id=2044): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd700006dcdf250100000008000100", @ANYRES32=r1, @ANYBLOB="400002803c00010024000100757365725f4c696e6b75705f656e61626c6564000000000000000000000000000500030006"], 0x5c}, 0x1, 0x400000000000000}, 0x0) 4.350555293s ago: executing program 6 (id=2045): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x29) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) finit_module(r1, 0x0, 0x1) 3.541150589s ago: executing program 0 (id=2046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000440)=[{0x1, 0x2, {0x2}, {0x0, 0xff, 0x1}, 0xfe, 0x2}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 3.533657459s ago: executing program 8 (id=2047): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) 3.446633032s ago: executing program 6 (id=2048): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x800, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x587}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000000200db00850000002f000000800000000e0000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001e00)={'macvtap0\x00', 0x0}) syz_emit_ethernet(0x121, &(0x7f00000007c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x3, 0x2, 0x10f, 0x67, 0x0, 0x4, 0x2, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x8, 0x1c, 0x0, 0x9, [0x3]}, @lsrr={0x83, 0xb, 0x85, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xeb, [@remote, @dev={0xac, 0x14, 0x14, 0x22}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {0x22, 0x3, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, "43382f52e9abb6d3e0f458ae7aacd54db02d2779bc1244b646f36a655b5e8339a824917c4db0eb36ff5940630e7dc3170e29464fb7ab82530642754f861d19ddd97fa0b1875e0544db1dbd25ad8656031dab7d538fa67a23cf862d0692c5db83f5ff0619f2887c0a96835c54109bf36cade2ef4433ae64a7064cec9736bf331d9b99713acc5e9924459dce81f7b121fd2ef7130de5cdb76c6ef56b6851ef5168478c50b030ca42eb9c2ccf0c14aba84e175f89d53b0a2f70ac9249f60171d6a700c17cfd18db49"}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x88, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x5, 0xfffffff7}, 0x21, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fdfffefe000000000300000085000000110000008500000011000000950000000000000082f1374954dbf4ff8932db8fe53205f6e5a8a19842d48fe8"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, 0x0, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xd8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xce}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x58696a8c}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.424652903s ago: executing program 2 (id=2049): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) 3.303882346s ago: executing program 4 (id=2050): setresgid(0xee00, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 3.17463318s ago: executing program 8 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="58000000100001002abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="802100000c400000140003006272696467655f736c6176655f30000008000400d4000003"], 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040) 3.000976425s ago: executing program 2 (id=2052): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x40f00}, 0x94) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.912959758s ago: executing program 6 (id=2053): sendmsg$unix(0xffffffffffffffff, 0x0, 0x26048040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000540)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@dioread_nolock}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x200e1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 2.088773865s ago: executing program 0 (id=2054): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0xfffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8}, {0x0, 0x0, 0x10, 0xffffffffffffffff}, 0x3}, [@mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0xc4}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000fc00"/87], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 2.088515085s ago: executing program 8 (id=2055): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 2.087552514s ago: executing program 4 (id=2056): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000a, 0x31, 0xffffffffffffffff, 0xf679000) 1.170575413s ago: executing program 2 (id=2057): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd700006dcdf250100000008000100", @ANYRES32=r1, @ANYBLOB="400002803c00010024000100757365725f4c696e6b75705f656e61626c6564000000000000000000000000000500030006"], 0x5c}, 0x1, 0x400000000000000}, 0x0) 521.505714ms ago: executing program 4 (id=2058): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000900)=""/174, 0xae}], 0x2}, 0x2000) 521.198743ms ago: executing program 0 (id=2059): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x840000000002, 0x3, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="015c52bd7000fcdb907446abdf250f0000001402018008000100535d1505755c0b492b17cc1158fd604e71c3ff069b0c9ed5b693330fa2cc9cc89c24197aef174a1a3c45", @ANYRES32=0x0, @ANYBLOB="0800030001000000"], 0x28}, 0x1, 0x0, 0x0, 0x400}, 0xc004) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 521.030154ms ago: executing program 4 (id=2060): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$unix(0x1, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100003040007057007c78d9292cb0000", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x2, 0x6, {{0x12, 0x4, 0x1, 0x3, 0x48, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0x17, 0x94, [@dev={0xac, 0x14, 0x14, 0xa}, @remote, @rand_addr=0x64010101, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x13, 0x20, [@multicast2, @local, @empty, @broadcast]}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100003040007057007c78d9292cb0000", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r8, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20002040) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_route(0x10, 0x3, 0x0) 520.921923ms ago: executing program 2 (id=2061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 500.132034ms ago: executing program 8 (id=2062): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) 0s ago: executing program 2 (id=2063): syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = getpid() syz_pidfd_open(r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) migrate_pages(0x0, 0x8, 0x0, 0x0) kernel console output (not intermixed with test programs): loop0: detected capacity change from 0 to 512 [ 325.789125][ T6414] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.494: mark_inode_dirty error [ 325.812383][ T6414] EXT4-fs (loop1): 1 orphan inode deleted [ 325.818813][ T6414] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 326.013647][ T6423] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 326.022174][ T6423] System zones: 1-12 [ 326.031367][ T6423] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.495: Directory hole found for htree index block 0 [ 326.052758][ T6423] EXT4-fs (loop0): Remounting filesystem read-only [ 326.059599][ T6423] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 326.068142][ T6423] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.495: Directory hole found for htree index block 0 [ 326.085776][ T6423] EXT4-fs (loop0): Remounting filesystem read-only [ 326.092583][ T6423] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 326.100913][ T6423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 326.129522][ T6423] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #2: comm syz.0.495: Directory hole found for htree leaf block 0 [ 326.145206][ T6423] EXT4-fs (loop0): Remounting filesystem read-only [ 326.510125][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 326.844028][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 330.367619][ T6459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 330.400130][ T6459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.676057][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.707006][ T4276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.728976][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.736879][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.744570][ T4276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 331.751900][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.789105][ T6466] chnl_net:caif_netlink_parms(): no params data found [ 333.070832][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.146776][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.155861][ T6466] device bridge_slave_0 entered promiscuous mode [ 333.217248][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.224438][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.307251][ T6466] device bridge_slave_1 entered promiscuous mode [ 333.518867][ T6466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.605730][ T6466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.775709][ T6501] loop4: detected capacity change from 0 to 512 [ 333.832386][ T6501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 333.841012][ T6501] System zones: 1-12 [ 333.847865][ T4276] Bluetooth: hci2: command 0x0409 tx timeout [ 333.997475][ T6501] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.508: Directory hole found for htree index block 0 [ 334.011362][ T6501] EXT4-fs (loop4): Remounting filesystem read-only [ 334.018250][ T6501] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 334.027068][ T6501] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.508: Directory hole found for htree index block 0 [ 334.043974][ T6501] EXT4-fs (loop4): Remounting filesystem read-only [ 334.050727][ T6501] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 334.059078][ T6501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 334.087249][ T6501] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #2: comm syz.4.508: Directory hole found for htree leaf block 0 [ 334.109210][ T6501] EXT4-fs (loop4): Remounting filesystem read-only [ 334.140608][ T6503] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 334.427874][ T6503] EXT4-fs (loop4): Remounting filesystem read-only [ 334.556660][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 334.719504][ T6466] team0: Port device team_slave_0 added [ 334.905461][ T6466] team0: Port device team_slave_1 added [ 334.976273][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.083808][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.095958][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.170416][ T6466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.210312][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.243532][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.378161][ T6466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.528500][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.740199][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.781997][ T6466] device hsr_slave_0 entered promiscuous mode [ 335.802477][ T6466] device hsr_slave_1 entered promiscuous mode [ 335.865847][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 335.921513][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.056065][ T6528] device syzkaller0 entered promiscuous mode [ 337.973641][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 340.028720][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 340.580666][ T6551] netlink: 'syz.1.515': attribute type 10 has an invalid length. [ 340.633765][ T6551] team0: Port device dummy0 added [ 340.640775][ T6554] netlink: 'syz.1.515': attribute type 10 has an invalid length. [ 340.681927][ T6554] team0: Port device dummy0 removed [ 340.690951][ T6554] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 342.120163][ T6466] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 343.086824][ T6466] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 343.120966][ T6466] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 343.211153][ T6466] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 343.624977][ T6605] loop4: detected capacity change from 0 to 512 [ 343.797900][ T6605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 343.807430][ T6605] System zones: 1-12 [ 343.890375][ T6605] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.525: Directory hole found for htree index block 0 [ 343.905671][ T6605] EXT4-fs (loop4): Remounting filesystem read-only [ 343.913062][ T6605] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 343.922413][ T6605] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.525: Directory hole found for htree index block 0 [ 343.951750][ T6605] EXT4-fs (loop4): Remounting filesystem read-only [ 343.959045][ T6605] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 343.967424][ T6605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 344.044493][ T6605] EXT4-fs (loop4): shut down requested (2) [ 344.584977][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 345.000983][ T6466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.071490][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.098186][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.205257][ T6466] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.273855][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.291267][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.317081][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.324335][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.408291][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 345.426303][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 345.465545][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 345.499952][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.507137][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.612401][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 345.917086][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 345.955457][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 346.026646][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 346.316481][ T6466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 346.524176][ T6466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.605779][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 346.619552][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 346.686310][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 346.743653][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 346.781640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.859903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.872616][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.335919][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.008040][ T6647] device syzkaller0 entered promiscuous mode [ 350.356489][ T6689] loop2: detected capacity change from 0 to 512 [ 350.439519][ T6689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 350.448872][ T6689] System zones: 1-12 [ 350.455392][ T6689] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.536: Directory hole found for htree index block 0 [ 350.480265][ T6689] EXT4-fs (loop2): Remounting filesystem read-only [ 350.487034][ T6689] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 350.495502][ T6689] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.536: Directory hole found for htree index block 0 [ 351.928647][ T6689] EXT4-fs (loop2): Remounting filesystem read-only [ 351.935283][ T6689] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 352.016443][ T6689] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 352.080253][ T6686] EXT4-fs (loop2): shut down requested (2) [ 352.603257][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 354.547197][ T4915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 354.554978][ T4915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 354.606887][ T31] device hsr_slave_0 left promiscuous mode [ 354.621854][ T31] device hsr_slave_1 left promiscuous mode [ 354.630683][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.644033][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.652455][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.666786][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.674690][ T31] device bridge_slave_1 left promiscuous mode [ 354.686032][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.694829][ T31] device bridge_slave_0 left promiscuous mode [ 354.723605][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.875088][ T31] device veth1_macvtap left promiscuous mode [ 354.881195][ T31] device veth0_macvtap left promiscuous mode [ 355.585293][ T6713] loop4: detected capacity change from 0 to 512 [ 356.061493][ T31] device veth1_vlan left promiscuous mode [ 356.269735][ T31] device veth0_vlan left promiscuous mode [ 357.574187][ T6713] fscrypt: Error allocating hmac(sha512): -2 [ 359.949396][ T31] team0 (unregistering): Port device team_slave_1 removed [ 360.129038][ T31] team0 (unregistering): Port device team_slave_0 removed [ 360.274258][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.369665][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.616705][ T31] bond0 (unregistering): Released all slaves [ 361.707500][ T6466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.803193][ T6728] device syzkaller0 entered promiscuous mode [ 365.872936][ T6825] loop1: detected capacity change from 0 to 512 [ 365.917344][ T6819] block nbd2: NBD_DISCONNECT [ 365.923263][ T6819] block nbd2: Disconnected due to user request. [ 365.929930][ T6819] block nbd2: shutting down sockets [ 366.115908][ T6825] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.555: corrupted in-inode xattr [ 366.130525][ T6825] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.555: couldn't read orphan inode 15 (err -117) [ 366.151031][ T6825] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 366.957525][ T6832] loop0: detected capacity change from 0 to 512 [ 367.645381][ T6832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 367.653615][ T6832] System zones: 1-12 [ 367.658809][ T6832] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.556: Directory hole found for htree index block 0 [ 367.676283][ T6832] EXT4-fs (loop0): Remounting filesystem read-only [ 367.682990][ T6832] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 367.691319][ T6832] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.556: Directory hole found for htree index block 0 [ 367.760577][ T6832] EXT4-fs (loop0): Remounting filesystem read-only [ 367.767345][ T6832] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 367.775645][ T6832] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 367.794932][ T6830] EXT4-fs (loop0): shut down requested (2) [ 368.115088][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 368.568508][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 370.910052][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.929516][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.736233][ T6466] device veth0_vlan entered promiscuous mode [ 371.775673][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.800724][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.841194][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.866214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.892618][ T6466] device veth1_vlan entered promiscuous mode [ 371.941166][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 372.088975][ T6871] device syzkaller0 entered promiscuous mode [ 372.143359][ T6466] device veth0_macvtap entered promiscuous mode [ 372.211078][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 372.230544][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.512499][ T6884] device bond0 entered promiscuous mode [ 372.518434][ T6884] device bond_slave_0 entered promiscuous mode [ 372.631816][ T6884] device bond_slave_1 entered promiscuous mode [ 372.823925][ T6882] device bond0 left promiscuous mode [ 372.883678][ T6882] device bond_slave_0 left promiscuous mode [ 372.911685][ T6882] device bond_slave_1 left promiscuous mode [ 372.982893][ T6466] device veth1_macvtap entered promiscuous mode [ 373.035221][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 373.057458][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 377.978940][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.985431][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.600048][ T6910] device syzkaller0 entered promiscuous mode [ 384.849126][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.869158][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.890728][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.910878][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.965729][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.001889][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.027894][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.068220][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.099139][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.119445][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 385.139320][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.177479][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.207741][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.235136][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.292677][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.318998][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.345217][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.392023][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.424642][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.471925][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.493284][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 385.505852][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 385.536629][ T6466] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.557711][ T6466] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.592694][ T6466] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.613233][ T6466] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.155778][ T6504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.170198][ T6504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.893257][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 386.973102][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.987266][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.031562][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 387.449088][ T7032] device syzkaller0 entered promiscuous mode [ 389.867689][ T4272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.889935][ T4272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.905202][ T4272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 389.931045][ T4272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 389.952595][ T4272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 389.966323][ T4272] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 392.052978][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 392.299223][ T7100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.129740][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 394.383437][ T7073] chnl_net:caif_netlink_parms(): no params data found [ 394.688142][ T4335] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.444102][ T4335] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.773566][ T4335] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.978909][ T4335] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.217648][ T4276] Bluetooth: hci5: command 0x040f tx timeout [ 396.264382][ T7073] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.273870][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.288738][ T7073] device bridge_slave_0 entered promiscuous mode [ 396.370337][ T7152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.467489][ T7073] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.575460][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.758706][ T7073] device bridge_slave_1 entered promiscuous mode [ 397.112572][ T7073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.172717][ T7073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.445500][ T7164] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.198735][ T7073] team0: Port device team_slave_0 added [ 398.241385][ T7073] team0: Port device team_slave_1 added [ 398.289527][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 398.434526][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.522107][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.236607][ T7073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.450015][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.457315][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.659340][ T7073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.218132][ T7073] device hsr_slave_0 entered promiscuous mode [ 400.231551][ T7073] device hsr_slave_1 entered promiscuous mode [ 401.735233][ T7073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.743759][ T7073] Cannot create hsr debugfs directory [ 401.879673][ T7219] fuse: Bad value for 'fd' [ 404.198503][ T7244] fuse: Bad value for 'fd' [ 405.114156][ T7250] loop4: detected capacity change from 0 to 512 [ 405.290872][ T7250] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.649: corrupted in-inode xattr [ 405.303933][ T7250] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.649: couldn't read orphan inode 15 (err -117) [ 405.318032][ T7250] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 407.083065][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 407.228179][ T7073] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 407.277955][ T7073] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 407.328410][ T4335] device hsr_slave_0 left promiscuous mode [ 407.353486][ T4335] device hsr_slave_1 left promiscuous mode [ 407.400733][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.423087][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.481433][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.521303][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.582844][ T4335] device bridge_slave_1 left promiscuous mode [ 407.594288][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.683587][ T4335] device bridge_slave_0 left promiscuous mode [ 407.693579][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.844097][ T4335] device veth1_macvtap left promiscuous mode [ 407.853978][ T4335] device veth0_macvtap left promiscuous mode [ 407.869197][ T4335] device veth1_vlan left promiscuous mode [ 407.883741][ T4335] device veth0_vlan left promiscuous mode [ 409.696005][ T7312] loop4: detected capacity change from 0 to 512 [ 411.235983][ T7318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.877260][ T7312] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.667: corrupted in-inode xattr [ 411.891089][ T7312] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.667: couldn't read orphan inode 15 (err -117) [ 411.904809][ T7312] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 412.668303][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 412.810853][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 412.841069][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 412.922149][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.105881][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.245992][ T7340] loop2: detected capacity change from 0 to 512 [ 415.438481][ T7340] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 415.446920][ T7340] System zones: 1-12 [ 415.483257][ T7340] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.674: Directory hole found for htree index block 0 [ 415.503178][ T7340] EXT4-fs (loop2): Remounting filesystem read-only [ 415.510154][ T7340] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 415.523055][ T7340] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.674: Directory hole found for htree index block 0 [ 415.538367][ T7340] EXT4-fs (loop2): Remounting filesystem read-only [ 415.545192][ T7340] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 415.553518][ T7340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 415.586616][ T7340] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #2: comm syz.2.674: Directory hole found for htree leaf block 0 [ 415.602608][ T7340] EXT4-fs (loop2): Remounting filesystem read-only [ 415.950190][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 416.072607][ T4335] bond0 (unregistering): Released all slaves [ 416.313521][ T7073] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 416.414335][ T7073] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 416.840091][ T7358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 417.799826][ T7073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.856558][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 417.870213][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.901131][ T7073] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.947318][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 418.011560][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 418.049489][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.056767][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.085051][ T7373] fuse: Bad value for 'fd' [ 419.006377][ T7381] loop4: detected capacity change from 0 to 512 [ 419.228008][ T7381] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 419.236404][ T7381] System zones: 1-12 [ 419.302331][ T7381] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.686: Directory hole found for htree index block 0 [ 419.318115][ T7381] EXT4-fs (loop4): Remounting filesystem read-only [ 419.325132][ T7381] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 419.333788][ T7381] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.686: Directory hole found for htree index block 0 [ 419.349927][ T7381] EXT4-fs (loop4): Remounting filesystem read-only [ 419.356970][ T7381] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 419.365397][ T7381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 419.423509][ T7381] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #2: comm syz.4.686: Directory hole found for htree leaf block 0 [ 419.439375][ T7381] EXT4-fs (loop4): Remounting filesystem read-only [ 419.733822][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 419.756931][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 419.779800][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 419.799945][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 419.831711][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.838937][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.902192][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 419.969432][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 419.993881][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 420.011404][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 420.066010][ T7073] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.127549][ T7073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.228167][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 420.249913][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 420.337465][ T7400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.407195][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 420.599550][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 420.849487][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 420.922839][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 420.972138][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.024934][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 422.666154][ T7073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.709263][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.716846][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.296481][ T7451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.336688][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.705'. [ 426.087285][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 426.154969][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.308311][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 426.329400][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.338125][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 426.359857][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 426.395546][ T7073] device veth0_vlan entered promiscuous mode [ 426.440189][ T7073] device veth1_vlan entered promiscuous mode [ 426.515098][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 426.533874][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 426.553957][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 426.584635][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.607096][ T7073] device veth0_macvtap entered promiscuous mode [ 426.641321][ T7073] device veth1_macvtap entered promiscuous mode [ 426.681379][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.713485][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.733819][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.808457][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.818337][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.864243][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.888496][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.929616][ T7481] tmpfs: Bad value for 'huge' [ 426.935037][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.969282][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.977607][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 426.999333][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 427.019781][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 427.049317][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 427.081169][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.128505][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.166289][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.188447][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.366289][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.438524][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.448666][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.602216][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.673208][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.746951][ T7073] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.791940][ T7073] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.881104][ T7073] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.919195][ T7073] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.959677][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 427.979523][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 428.169859][ T4491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.188841][ T4491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.209429][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 428.355111][ T6504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.408351][ T6504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.464278][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 428.653023][ T7497] loop2: detected capacity change from 0 to 512 [ 428.922903][ T7497] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.710: corrupted in-inode xattr [ 428.941014][ T7497] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.710: couldn't read orphan inode 15 (err -117) [ 428.954872][ T7497] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 430.398095][ T7514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 431.022627][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 439.468996][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.475556][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.442545][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.742'. [ 442.920071][ T7636] loop6: detected capacity change from 0 to 512 [ 443.320766][ T7636] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 443.329058][ T7636] System zones: 1-12 [ 443.364818][ T7636] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.746: Directory hole found for htree index block 0 [ 443.377758][ T7636] EXT4-fs (loop6): Remounting filesystem read-only [ 443.384596][ T7636] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 443.393887][ T7636] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.746: Directory hole found for htree index block 0 [ 443.412074][ T7636] EXT4-fs (loop6): Remounting filesystem read-only [ 443.418806][ T7636] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 443.427294][ T7636] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 443.446716][ T7634] EXT4-fs (loop6): shut down requested (2) [ 443.567986][ T7073] EXT4-fs (loop6): unmounting filesystem. [ 446.765061][ T7657] fuse: Bad value for 'fd' [ 448.848063][ T7682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.756'. [ 453.408625][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 453.421306][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 453.429507][ T4272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 453.437382][ T4272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 453.445380][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 453.508327][ T7731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.768'. [ 454.448347][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 454.773871][ T7743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 455.821214][ T7760] fuse: Bad value for 'fd' [ 457.008469][ T4276] Bluetooth: hci2: command 0x0409 tx timeout [ 457.194403][ T7776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.778'. [ 459.098441][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 459.562075][ T7800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 459.779489][ T7726] chnl_net:caif_netlink_parms(): no params data found [ 461.291569][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 461.589169][ T7823] fuse: Bad value for 'fd' [ 461.989964][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.997151][ T7726] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.006924][ T7726] device bridge_slave_0 entered promiscuous mode [ 462.015990][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.027536][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.091986][ T7840] netlink: 16 bytes leftover after parsing attributes in process `syz.6.788'. [ 462.158542][ T7726] device bridge_slave_1 entered promiscuous mode [ 462.900259][ T7828] device syzkaller0 entered promiscuous mode [ 463.184414][ T7857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 463.419382][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 464.186154][ T7859] overlayfs: failed to clone upperpath [ 467.596734][ T7892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.803'. [ 468.862018][ T7899] loop6: detected capacity change from 0 to 512 [ 470.284642][ T7908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.814719][ T7899] ext4: Unknown parameter 'nouser_xattr' [ 471.318981][ T7910] overlayfs: failed to clone upperpath [ 473.016459][ T7726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.317638][ T7726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.529449][ T7726] team0: Port device team_slave_0 added [ 473.579908][ T7726] team0: Port device team_slave_1 added [ 474.424555][ T7726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.431652][ T7726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.487335][ T7726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.748053][ T6504] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.931339][ T7945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 474.946468][ T4272] Bluetooth: hci5: command 0x0406 tx timeout [ 475.655061][ T7726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.670037][ T7726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.871180][ T7726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.901682][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.818'. [ 475.999445][ T7960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 476.258803][ T6504] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.700249][ T7726] device hsr_slave_0 entered promiscuous mode [ 476.820071][ T7955] overlayfs: failed to clone upperpath [ 476.915462][ T7726] device hsr_slave_1 entered promiscuous mode [ 477.432694][ T6504] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.052878][ T7978] device syzkaller0 entered promiscuous mode [ 478.152291][ T7987] netlink: 192 bytes leftover after parsing attributes in process `syz.6.826'. [ 478.198275][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.826'. [ 478.772129][ T6504] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.060617][ T8011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.440230][ T8021] overlayfs: failed to clone upperpath [ 483.720240][ T8033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.839'. [ 485.483735][ T6504] tipc: Left network mode [ 486.020645][ T7726] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 486.110496][ T7726] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 486.132399][ T7726] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 486.153324][ T7726] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 487.435862][ T7726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.655853][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.664190][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.914109][ T7726] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.371664][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 488.479728][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 488.597516][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.604727][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.712564][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 488.756930][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 488.765632][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 488.834958][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.842142][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.894805][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 488.915358][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 488.965839][ T8098] overlayfs: failed to clone upperpath [ 489.107494][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 489.126444][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 489.182822][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 489.224237][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 489.484175][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 489.493104][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 489.536364][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 489.557735][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 489.602275][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 489.639269][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 489.660745][ T8118] netlink: 14 bytes leftover after parsing attributes in process `syz.6.859'. [ 490.322483][ T6504] device hsr_slave_0 left promiscuous mode [ 490.381400][ T6504] device hsr_slave_1 left promiscuous mode [ 490.582217][ T6504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.589731][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.598339][ T6504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.606111][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.620637][ T6504] device bridge_slave_1 left promiscuous mode [ 490.628725][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.661212][ T6504] device bridge_slave_0 left promiscuous mode [ 490.690784][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.768481][ T8133] loop6: detected capacity change from 0 to 512 [ 490.780669][ T6504] device veth1_macvtap left promiscuous mode [ 490.798461][ T6504] device veth0_macvtap left promiscuous mode [ 490.832130][ T6504] device veth1_vlan left promiscuous mode [ 490.841686][ T8133] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 490.853219][ T6504] device veth0_vlan left promiscuous mode [ 490.910484][ T8133] System zones: 1-12 [ 490.951369][ T8133] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.861: Directory hole found for htree index block 0 [ 491.033860][ T8133] EXT4-fs (loop6): Remounting filesystem read-only [ 491.060805][ T8133] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 491.100570][ T8133] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.861: Directory hole found for htree index block 0 [ 491.142286][ T8139] netlink: 'syz.0.863': attribute type 1 has an invalid length. [ 491.155003][ T8133] EXT4-fs (loop6): Remounting filesystem read-only [ 491.168936][ T8139] netlink: 'syz.0.863': attribute type 2 has an invalid length. [ 491.177042][ T8133] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 491.196976][ T8133] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 491.293001][ T8133] EXT4-fs (loop6): shut down requested (2) [ 492.409969][ T8150] overlayfs: failed to resolve './file0': -2 [ 492.548031][ T8153] fuse: Bad value for 'fd' [ 494.007801][ T7073] EXT4-fs (loop6): unmounting filesystem. [ 494.232551][ T6504] team0 (unregistering): Port device team_slave_1 removed [ 494.420163][ T6504] team0 (unregistering): Port device team_slave_0 removed [ 494.579202][ T6504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.616049][ T8178] xt_CT: You must specify a L4 protocol and not use inversions on it [ 494.827783][ T6504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.545048][ T8190] overlayfs: failed to resolve './file0': -2 [ 495.892765][ T6504] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 495.994237][ T6504] bond0 (unregistering): Released all slaves [ 496.529492][ T8201] netlink: 48 bytes leftover after parsing attributes in process `syz.4.883'. [ 497.165520][ T8218] loop2: detected capacity change from 0 to 512 [ 497.179719][ T8218] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 497.587986][ T8218] System zones: 1-12 [ 497.604004][ T8218] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.884: Directory hole found for htree index block 0 [ 497.697393][ T8218] EXT4-fs (loop2): Remounting filesystem read-only [ 497.705281][ T8218] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 497.723114][ T8218] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.884: Directory hole found for htree index block 0 [ 497.768834][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.776460][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.849535][ T8218] EXT4-fs (loop2): Remounting filesystem read-only [ 497.856310][ T8218] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 497.905835][ T7726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.941504][ T8218] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 498.008437][ T8214] EXT4-fs (loop2): shut down requested (2) [ 498.096400][ T8229] overlayfs: failed to resolve './file0': -2 [ 500.015252][ T8226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 500.054458][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 500.092967][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.100629][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.109783][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.893'. [ 500.368400][ T8257] loop6: detected capacity change from 0 to 512 [ 500.499723][ T8257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 500.508108][ T8257] System zones: 1-12 [ 500.536934][ T8257] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.895: Directory hole found for htree index block 0 [ 500.549977][ T8257] EXT4-fs (loop6): Remounting filesystem read-only [ 500.556613][ T8257] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 500.564892][ T8257] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.895: Directory hole found for htree index block 0 [ 500.582818][ T8257] EXT4-fs (loop6): Remounting filesystem read-only [ 500.589536][ T8257] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 500.597926][ T8257] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 500.610204][ T8257] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #2: comm syz.6.895: Directory hole found for htree leaf block 0 [ 500.625801][ T8257] EXT4-fs (loop6): Remounting filesystem read-only [ 500.860858][ T7073] EXT4-fs (loop6): unmounting filesystem. [ 501.400749][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.422107][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.557630][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.603753][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.816687][ T7726] device veth0_vlan entered promiscuous mode [ 501.945401][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 502.050797][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 502.615034][ T7726] device veth1_vlan entered promiscuous mode [ 502.662347][ T7726] device veth0_macvtap entered promiscuous mode [ 502.707901][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.731889][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.747601][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 502.776711][ T7726] device veth1_macvtap entered promiscuous mode [ 502.833320][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.864432][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.894939][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.985931][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.034080][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.044711][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.054716][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.065328][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.077077][ T7726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.089094][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.100010][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.126227][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.156833][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.186918][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.228384][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.264386][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.286996][ T8301] loop2: detected capacity change from 0 to 512 [ 503.306838][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.342544][ T7726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.361132][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.427632][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 503.488193][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 503.524827][ T8301] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 503.943236][ T8301] System zones: 1-12 [ 504.080993][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 504.175156][ T8301] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.903: Directory hole found for htree index block 0 [ 504.248887][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 504.313905][ T8301] EXT4-fs (loop2): Remounting filesystem read-only [ 504.320620][ T8301] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 504.333959][ T8301] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.903: Directory hole found for htree index block 0 [ 504.352331][ T8301] EXT4-fs (loop2): Remounting filesystem read-only [ 504.359076][ T8301] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 504.367619][ T8301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 504.379482][ T7726] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.422251][ T7726] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.442291][ T8301] EXT4-fs (loop2): shut down requested (2) [ 504.500606][ T7726] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.509379][ T7726] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.833834][ T4915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.875847][ T4915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.920295][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 504.950041][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.976775][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.014502][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 505.906101][ T8345] xt_CT: You must specify a L4 protocol and not use inversions on it [ 506.487800][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 507.712479][ T8368] netlink: 16 bytes leftover after parsing attributes in process `syz.7.913'. [ 507.999728][ T8369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.914'. [ 508.352722][ T8369] netlink: 'syz.4.914': attribute type 1 has an invalid length. [ 508.423370][ T8369] netlink: 'syz.4.914': attribute type 1 has an invalid length. [ 510.682253][ T8414] loop2: detected capacity change from 0 to 512 [ 510.902219][ T8414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 510.930311][ T8414] System zones: 1-12 [ 510.995174][ T8414] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.922: Directory hole found for htree index block 0 [ 511.126468][ T8414] EXT4-fs (loop2): Remounting filesystem read-only [ 511.311934][ T8414] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 511.701870][ T8414] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.922: Directory hole found for htree index block 0 [ 511.724118][ T8422] device bridge1 entered promiscuous mode [ 511.796703][ T8436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.926'. [ 511.823584][ T8422] team0: Port device bridge1 added [ 511.937786][ T8414] EXT4-fs (loop2): Remounting filesystem read-only [ 511.973402][ T8414] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 512.131867][ T8414] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 512.269584][ T8413] EXT4-fs (loop2): shut down requested (2) [ 512.294585][ T8422] device bridge2 entered promiscuous mode [ 512.386273][ T8422] team0: Port device bridge2 added [ 512.411371][ T8439] bridge0: port 3(team0) entered blocking state [ 512.518323][ T8439] bridge0: port 3(team0) entered disabled state [ 512.594804][ T8439] device team0 entered promiscuous mode [ 512.670691][ T8439] device team_slave_0 entered promiscuous mode [ 512.679924][ T8439] device team_slave_1 entered promiscuous mode [ 512.688360][ T8439] bridge0: port 3(team0) entered blocking state [ 512.695028][ T8439] bridge0: port 3(team0) entered forwarding state [ 513.839971][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 516.687064][ T8507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.941'. [ 517.544585][ T8520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 518.247275][ T8473] bridge0: port 3(team0) entered disabled state [ 518.254314][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.263683][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.807878][ T8529] loop6: detected capacity change from 0 to 512 [ 518.852790][ T8529] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 518.860874][ T8529] System zones: 1-12 [ 518.891447][ T8529] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.947: Directory hole found for htree index block 0 [ 518.906335][ T8529] EXT4-fs (loop6): Remounting filesystem read-only [ 518.913488][ T8529] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 518.921876][ T8529] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.947: Directory hole found for htree index block 0 [ 518.944095][ T8529] EXT4-fs (loop6): Remounting filesystem read-only [ 518.950868][ T8529] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 518.959220][ T8529] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 518.971885][ T8529] EXT4-fs (loop6): shut down requested (2) [ 519.281019][ T7073] EXT4-fs (loop6): unmounting filesystem. [ 520.260645][ T8473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.350130][ T8473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.435184][ T8473] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.464992][ T8473] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.529707][ T8473] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.585312][ T8473] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.392950][ T8569] device syzkaller0 entered promiscuous mode [ 524.968230][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.6.954'. [ 527.236012][ T8642] device syzkaller0 entered promiscuous mode [ 527.548946][ T8653] netlink: 'syz.7.969': attribute type 1 has an invalid length. [ 527.579067][ T8653] netlink: 'syz.7.969': attribute type 1 has an invalid length. [ 530.448467][ T8728] device syzkaller0 entered promiscuous mode [ 533.349069][ T8784] loop2: detected capacity change from 0 to 512 [ 533.430482][ T8784] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 533.524661][ T8784] System zones: 1-12 [ 533.582142][ T8784] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.991: Directory hole found for htree index block 0 [ 533.728755][ T8784] EXT4-fs (loop2): Remounting filesystem read-only [ 533.859178][ T8784] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 533.945272][ T8784] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.991: Directory hole found for htree index block 0 [ 533.983027][ T8784] EXT4-fs (loop2): Remounting filesystem read-only [ 533.997350][ T8799] device syzkaller0 entered promiscuous mode [ 534.000759][ T8784] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 534.041074][ T8784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 534.135480][ T8784] EXT4-fs (loop2): shut down requested (2) [ 534.436319][ T8812] device bridge1 entered promiscuous mode [ 534.538440][ T8812] team0: Port device bridge1 added [ 534.749953][ T8812] device bridge2 entered promiscuous mode [ 534.841523][ T8812] team0: Port device bridge2 added [ 534.859722][ T8822] bridge0: port 3(team0) entered blocking state [ 534.866113][ T8822] bridge0: port 3(team0) entered disabled state [ 534.968106][ T8822] device team0 entered promiscuous mode [ 534.996110][ T8822] device team_slave_0 entered promiscuous mode [ 535.002568][ T8822] device team_slave_1 entered promiscuous mode [ 535.028304][ T8822] bridge0: port 3(team0) entered blocking state [ 535.034682][ T8822] bridge0: port 3(team0) entered forwarding state [ 536.559451][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 538.015831][ T8859] device syzkaller0 entered promiscuous mode [ 538.624712][ T8869] device syzkaller0 entered promiscuous mode [ 539.902580][ T8875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.008207][ T8888] device bridge3 entered promiscuous mode [ 540.045042][ T8888] team0: Port device bridge3 added [ 540.192481][ T8875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.272619][ T8890] device bridge4 entered promiscuous mode [ 540.310458][ T8890] team0: Port device bridge4 added [ 540.444509][ T8875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.692770][ T8875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.393750][ T8875] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.460482][ T8875] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.620268][ T8875] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.684165][ T8875] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.418049][ T8914] device syzkaller0 entered promiscuous mode [ 542.820451][ T8925] loop2: detected capacity change from 0 to 512 [ 544.876247][ T8925] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1020: corrupted in-inode xattr [ 544.889651][ T8925] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1020: couldn't read orphan inode 15 (err -117) [ 544.903480][ T8925] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 546.170106][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 552.891435][ T9029] loop7: detected capacity change from 0 to 512 [ 553.205505][ T9029] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 553.213738][ T9029] System zones: 1-12 [ 553.219634][ T9029] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.1039: Directory hole found for htree index block 0 [ 553.238120][ T9029] EXT4-fs (loop7): Remounting filesystem read-only [ 553.245779][ T9029] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 553.254170][ T9029] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.1039: Directory hole found for htree index block 0 [ 553.276813][ T9029] EXT4-fs (loop7): Remounting filesystem read-only [ 553.291480][ T9029] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 553.300218][ T9029] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 553.319079][ T9029] EXT4-fs (loop7): shut down requested (2) [ 556.383071][ T7726] EXT4-fs (loop7): unmounting filesystem. [ 557.151213][ T9078] device bridge2 entered promiscuous mode [ 557.329607][ T9078] team0: Port device bridge2 added [ 557.784589][ T9078] device bridge3 entered promiscuous mode [ 557.848616][ T9078] team0: Port device bridge3 added [ 557.883053][ T9078] bridge0: port 3(team0) entered blocking state [ 557.923363][ T9078] bridge0: port 3(team0) entered disabled state [ 557.931185][ T9078] device team0 entered promiscuous mode [ 558.126770][ T9078] device team_slave_0 entered promiscuous mode [ 558.151631][ T9078] device team_slave_1 entered promiscuous mode [ 558.205879][ T9078] bridge0: port 3(team0) entered blocking state [ 558.212296][ T9078] bridge0: port 3(team0) entered forwarding state [ 558.343735][ T9093] loop7: detected capacity change from 0 to 512 [ 558.452400][ T9093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 558.541747][ T9093] System zones: 1-12 [ 558.548613][ T9093] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.1050: Directory hole found for htree index block 0 [ 558.561858][ T9093] EXT4-fs (loop7): Remounting filesystem read-only [ 558.569609][ T9093] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 558.577968][ T9093] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.1050: Directory hole found for htree index block 0 [ 558.591024][ T9093] EXT4-fs (loop7): Remounting filesystem read-only [ 558.597725][ T9093] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 558.645378][ T9093] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 558.797770][ T9093] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #2: comm syz.7.1050: Directory hole found for htree leaf block 0 [ 559.024504][ T9093] EXT4-fs (loop7): Remounting filesystem read-only [ 560.340287][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.346801][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.180234][ T9099] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 561.226592][ T9099] EXT4-fs (loop7): Remounting filesystem read-only [ 562.112266][ T9138] loop2: detected capacity change from 0 to 256 [ 562.152034][ T9138] FAT-fs (loop2): Directory bread(block 64) failed [ 562.159126][ T9138] FAT-fs (loop2): Directory bread(block 65) failed [ 562.165879][ T9138] FAT-fs (loop2): Directory bread(block 66) failed [ 562.172449][ T9138] FAT-fs (loop2): Directory bread(block 67) failed [ 562.179231][ T9138] FAT-fs (loop2): Directory bread(block 68) failed [ 562.185846][ T9138] FAT-fs (loop2): Directory bread(block 69) failed [ 562.192515][ T9138] FAT-fs (loop2): Directory bread(block 70) failed [ 562.199234][ T9138] FAT-fs (loop2): Directory bread(block 71) failed [ 562.205907][ T9138] FAT-fs (loop2): Directory bread(block 72) failed [ 562.212472][ T9138] FAT-fs (loop2): Directory bread(block 73) failed [ 562.734390][ T7726] EXT4-fs (loop7): unmounting filesystem. [ 563.015025][ T9156] fuse: Bad value for 'fd' [ 566.026436][ T9200] loop2: detected capacity change from 0 to 512 [ 566.145816][ T9200] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1067: corrupted in-inode xattr [ 566.159594][ T9200] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1067: couldn't read orphan inode 15 (err -117) [ 566.179750][ T9200] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 567.036545][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 577.293129][ T9338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 577.447720][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 583.031626][ T9405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 586.614792][ T9455] loop2: detected capacity change from 0 to 512 [ 586.740725][ T9455] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 586.829681][ T9455] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 586.911383][ T9455] EXT4-fs (loop2): orphan cleanup on readonly fs [ 586.935361][ T9455] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 586.982938][ T9455] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 587.004118][ T9455] EXT4-fs (loop2): 1 orphan inode deleted [ 587.020208][ T9455] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 587.401824][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 588.219935][ T9483] loop7: detected capacity change from 0 to 256 [ 588.339308][ T9483] FAT-fs (loop7): Directory bread(block 64) failed [ 588.387744][ T9483] FAT-fs (loop7): Directory bread(block 65) failed [ 588.397577][ T9483] FAT-fs (loop7): Directory bread(block 66) failed [ 588.404162][ T9483] FAT-fs (loop7): Directory bread(block 67) failed [ 588.494714][ T9483] FAT-fs (loop7): Directory bread(block 68) failed [ 588.501421][ T9483] FAT-fs (loop7): Directory bread(block 69) failed [ 588.524966][ T9483] FAT-fs (loop7): Directory bread(block 70) failed [ 588.531567][ T9483] FAT-fs (loop7): Directory bread(block 71) failed [ 588.563665][ T9483] FAT-fs (loop7): Directory bread(block 72) failed [ 588.582071][ T9483] FAT-fs (loop7): Directory bread(block 73) failed [ 588.690180][ T9494] device syzkaller0 entered promiscuous mode [ 594.948657][ T9549] loop7: detected capacity change from 0 to 512 [ 595.038590][ T9549] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 595.063662][ T9549] System zones: 1-12 [ 595.107086][ T9549] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.1144: Directory hole found for htree index block 0 [ 595.272269][ T9549] EXT4-fs (loop7): Remounting filesystem read-only [ 595.311473][ T9549] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 595.447795][ T9549] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.1144: Directory hole found for htree index block 0 [ 595.546034][ T9549] EXT4-fs (loop7): Remounting filesystem read-only [ 595.560171][ T9549] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 595.614693][ T9549] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 595.647515][ T9549] EXT4-fs (loop7): shut down requested (2) [ 596.206384][ T7726] EXT4-fs (loop7): unmounting filesystem. [ 604.378109][ T9665] device bridge1 entered promiscuous mode [ 604.458995][ T9665] team0: Port device bridge1 added [ 604.739625][ T9670] device bridge2 entered promiscuous mode [ 604.796390][ T9670] team0: Port device bridge2 added [ 604.825603][ T9665] bridge0: port 3(team0) entered blocking state [ 604.859810][ T9665] bridge0: port 3(team0) entered disabled state [ 604.877668][ T9665] device team0 entered promiscuous mode [ 604.889342][ T9665] device team_slave_0 entered promiscuous mode [ 604.931259][ T9665] device team_slave_1 entered promiscuous mode [ 604.959306][ T9665] bridge0: port 3(team0) entered blocking state [ 604.965722][ T9665] bridge0: port 3(team0) entered forwarding state [ 605.670351][ T9694] loop2: detected capacity change from 0 to 512 [ 605.733575][ T9694] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 605.822548][ T9694] System zones: 1-12 [ 605.880918][ T9694] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1170: Directory hole found for htree index block 0 [ 605.934063][ T9694] EXT4-fs (loop2): Remounting filesystem read-only [ 605.976828][ T9694] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 606.039834][ T9694] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1170: Directory hole found for htree index block 0 [ 606.164292][ T9694] EXT4-fs (loop2): Remounting filesystem read-only [ 606.172040][ T9694] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 606.223942][ T9694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 606.421963][ T9694] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #2: comm syz.2.1170: Directory hole found for htree leaf block 0 [ 606.507168][ T9694] EXT4-fs (loop2): Remounting filesystem read-only [ 609.435041][ T9699] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 609.676492][ T9699] EXT4-fs (loop2): Remounting filesystem read-only [ 610.475095][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 614.513727][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1194'. [ 620.429041][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 620.435476][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.032074][ T9945] fuse: Bad value for 'fd' [ 627.417685][ T9992] xt_CT: You must specify a L4 protocol and not use inversions on it [ 628.504178][ T9998] fuse: Bad value for 'fd' [ 631.824183][T10057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 632.688593][T10064] fuse: Bad value for 'fd' [ 637.100270][T10121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 641.082262][T10174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 645.327757][T10227] loop2: detected capacity change from 0 to 256 [ 645.403323][T10227] FAT-fs (loop2): Directory bread(block 64) failed [ 645.410345][T10227] FAT-fs (loop2): Directory bread(block 65) failed [ 645.416952][T10227] FAT-fs (loop2): Directory bread(block 66) failed [ 645.423573][T10227] FAT-fs (loop2): Directory bread(block 67) failed [ 645.430245][T10227] FAT-fs (loop2): Directory bread(block 68) failed [ 645.436794][T10227] FAT-fs (loop2): Directory bread(block 69) failed [ 645.443495][T10227] FAT-fs (loop2): Directory bread(block 70) failed [ 645.450182][T10227] FAT-fs (loop2): Directory bread(block 71) failed [ 645.456783][T10227] FAT-fs (loop2): Directory bread(block 72) failed [ 645.463396][T10227] FAT-fs (loop2): Directory bread(block 73) failed [ 646.780710][T10251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 647.086430][ C0] hrtimer: interrupt took 55277 ns [ 647.782166][T10264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1286'. [ 649.067220][T10276] loop2: detected capacity change from 0 to 512 [ 649.181299][T10276] ext4: Unknown parameter 'nouser_xattr' [ 649.308820][ T9770] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 651.542197][T10297] xt_CT: You must specify a L4 protocol and not use inversions on it [ 652.311955][T10312] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1297'. [ 653.368663][T10318] loop6: detected capacity change from 0 to 256 [ 653.440239][T10318] FAT-fs (loop6): Directory bread(block 64) failed [ 653.446920][T10318] FAT-fs (loop6): Directory bread(block 65) failed [ 653.453555][T10318] FAT-fs (loop6): Directory bread(block 66) failed [ 653.460155][T10318] FAT-fs (loop6): Directory bread(block 67) failed [ 653.466812][T10318] FAT-fs (loop6): Directory bread(block 68) failed [ 653.473359][T10318] FAT-fs (loop6): Directory bread(block 69) failed [ 653.480311][T10318] FAT-fs (loop6): Directory bread(block 70) failed [ 653.487044][T10318] FAT-fs (loop6): Directory bread(block 71) failed [ 653.493683][T10318] FAT-fs (loop6): Directory bread(block 72) failed [ 653.500237][T10318] FAT-fs (loop6): Directory bread(block 73) failed [ 654.358490][T10329] loop6: detected capacity change from 0 to 512 [ 654.369213][T10329] ext4: Unknown parameter 'nouser_xattr' [ 657.110820][T10362] xt_CT: You must specify a L4 protocol and not use inversions on it [ 657.969349][T10372] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1311'. [ 658.823439][T10374] loop6: detected capacity change from 0 to 256 [ 658.863122][T10374] FAT-fs (loop6): Directory bread(block 64) failed [ 658.870108][T10374] FAT-fs (loop6): Directory bread(block 65) failed [ 658.876771][T10374] FAT-fs (loop6): Directory bread(block 66) failed [ 658.883373][T10374] FAT-fs (loop6): Directory bread(block 67) failed [ 658.889992][T10374] FAT-fs (loop6): Directory bread(block 68) failed [ 658.896833][T10374] FAT-fs (loop6): Directory bread(block 69) failed [ 658.903550][T10374] FAT-fs (loop6): Directory bread(block 70) failed [ 658.910114][T10374] FAT-fs (loop6): Directory bread(block 71) failed [ 658.916884][T10374] FAT-fs (loop6): Directory bread(block 72) failed [ 658.923610][T10374] FAT-fs (loop6): Directory bread(block 73) failed [ 660.061504][T10381] device syzkaller0 entered promiscuous mode [ 660.320849][T10387] loop2: detected capacity change from 0 to 512 [ 660.437916][T10387] ext4: Unknown parameter 'nouser_xattr' [ 661.146686][ T9770] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 663.067536][T10410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 663.291019][T10412] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1323'. [ 666.330465][T10442] IPVS: sed: FWM 3 0x00000003 - no destination available [ 667.168500][T10461] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1336'. [ 667.438361][T10464] xt_CT: You must specify a L4 protocol and not use inversions on it [ 671.427586][T10489] device syzkaller0 entered promiscuous mode [ 672.973958][T10517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1351'. [ 674.122183][T10533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1355'. [ 674.257443][T10530] syz.4.1355 (10530) used greatest stack depth: 16944 bytes left [ 674.947809][T10537] device syzkaller0 entered promiscuous mode [ 675.404865][T10549] device syzkaller0 entered promiscuous mode [ 677.444181][T10581] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.511937][T10581] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.616440][T10581] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.721545][T10581] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.883627][T10581] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.917409][T10581] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.994582][T10581] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.172393][T10590] loop6: detected capacity change from 0 to 512 [ 678.183137][T10590] ext4: Unknown parameter 'nouser_xattr' [ 678.529437][T10581] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.835488][ T9770] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 679.276314][T10603] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1372'. [ 680.365562][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.371988][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 682.304005][T10637] loop2: detected capacity change from 0 to 512 [ 682.315062][T10637] ext4: Unknown parameter 'nouser_xattr' [ 683.231866][T10643] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1385'. [ 684.320901][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 684.335587][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 684.342131][T10656] device syzkaller0 entered promiscuous mode [ 684.349672][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 684.367460][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 684.375111][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 684.383193][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 684.880058][T10668] xt_hashlimit: size too large, truncated to 1048576 [ 685.032105][T10670] netlink: 'syz.0.1389': attribute type 1 has an invalid length. [ 685.203320][T10655] chnl_net:caif_netlink_parms(): no params data found [ 685.496285][T10682] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1395'. [ 685.622328][T10655] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.629673][T10655] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.771401][T10690] loop2: detected capacity change from 0 to 512 [ 685.781918][T10690] ext4: Unknown parameter 'nouser_xattr' [ 685.800330][T10682] IPVS: sed: FWM 3 0x00000003 - no destination available [ 685.861619][T10655] device bridge_slave_0 entered promiscuous mode [ 686.386790][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 686.416695][ T9770] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 686.427034][T10655] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.434184][T10655] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.444688][T10655] device bridge_slave_1 entered promiscuous mode [ 687.451149][T10655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.524532][T10655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.688287][T10655] team0: Port device team_slave_0 added [ 687.731096][T10655] team0: Port device team_slave_1 added [ 687.803388][T10655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.828263][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.935305][T10655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.995025][T10655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.032484][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.130238][T10655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.296665][T10655] device hsr_slave_0 entered promiscuous mode [ 688.309352][T10655] device hsr_slave_1 entered promiscuous mode [ 688.329021][T10655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 688.346722][T10655] Cannot create hsr debugfs directory [ 688.382060][T10707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.489452][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 688.948888][T10655] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 688.984484][T10655] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 689.020187][T10655] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 689.035424][T10655] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 689.220444][T10655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.264595][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 689.316018][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 689.357920][T10655] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.380356][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 689.411704][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 689.443252][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.450495][ T4335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.501551][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 689.552603][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 689.603307][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 689.632602][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.639793][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.718298][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 689.752669][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 689.785271][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 689.820638][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 689.840271][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 689.865337][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 689.878845][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 689.915612][T10655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 689.956999][T10655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 689.993614][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 690.006989][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 691.120975][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 691.140044][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 691.175825][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 691.231463][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 691.396376][T10743] device syzkaller0 entered promiscuous mode [ 691.546515][T10746] tipc: Started in network mode [ 691.564957][T10746] tipc: Node identity 4, cluster identity 4711 [ 691.584215][T10746] tipc: Node number set to 4 [ 691.831303][T10756] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 691.839436][T10756] device team0 left promiscuous mode [ 691.870046][T10759] netlink: 'syz.6.1415': attribute type 3 has an invalid length. [ 691.896766][T10756] device team_slave_0 left promiscuous mode [ 691.917534][T10756] device team_slave_1 left promiscuous mode [ 691.950053][T10756] bridge0: port 3(team0) entered disabled state [ 691.995316][T10756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 692.036071][T10756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 692.079659][T10756] device bridge_slave_0 left promiscuous mode [ 692.085982][T10756] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.125264][T10756] device bridge_slave_1 left promiscuous mode [ 692.137252][T10756] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.178651][T10756] bond0: (slave bond_slave_0): Releasing backup interface [ 692.244927][T10756] bond0: (slave bond_slave_1): Releasing backup interface [ 692.312859][T10756] team0: Port device team_slave_0 removed [ 692.416738][T10756] team0: Port device team_slave_1 removed [ 692.441289][T10756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.450462][T10756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.486302][T10756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.514700][T10756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.600641][T10756] team0: Port device bridge2 removed [ 692.647995][T10756] team0: Port device bridge3 removed [ 692.672532][T10655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.876117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 693.061752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 693.236441][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 694.032719][T10791] loop2: detected capacity change from 0 to 512 [ 696.386002][T10791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 696.394457][T10791] System zones: 1-12 [ 696.412867][T10791] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1421: Directory hole found for htree index block 0 [ 696.427225][T10791] EXT4-fs (loop2): Remounting filesystem read-only [ 696.434053][T10791] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 696.442437][T10791] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1421: Directory hole found for htree index block 0 [ 696.460104][T10791] EXT4-fs (loop2): Remounting filesystem read-only [ 696.466745][T10791] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 696.475048][T10791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 696.495293][T10789] EXT4-fs (loop2): shut down requested (2) [ 696.523665][T10783] device syzkaller0 entered promiscuous mode [ 696.761836][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 699.564347][T10655] device veth0_vlan entered promiscuous mode [ 699.604603][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 699.654876][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 699.704678][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 699.728342][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 699.961227][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 700.033210][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 700.183727][T10655] device veth1_vlan entered promiscuous mode [ 700.520087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 700.563404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 700.596013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 700.625141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 700.664296][T10655] device veth0_macvtap entered promiscuous mode [ 700.683782][T10655] device veth1_macvtap entered promiscuous mode [ 700.772047][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.795328][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.939059][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.985808][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.996221][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.006738][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.020342][T10655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.027686][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 701.062898][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 701.106949][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 701.130351][T10864] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.166483][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 701.793030][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.805384][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.815376][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.852917][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.896900][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.950085][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.966699][T10655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.989027][T10869] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1446'. [ 701.998913][T10869] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 702.117810][T10878] loop6: detected capacity change from 0 to 512 [ 702.181846][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 702.300735][T10878] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 702.309193][T10878] System zones: 1-12 [ 702.341346][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 702.389105][T10878] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.1448: Directory hole found for htree index block 0 [ 702.403356][T10878] EXT4-fs (loop6): Remounting filesystem read-only [ 702.410230][T10878] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 702.418803][T10878] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.1448: Directory hole found for htree index block 0 [ 702.438346][T10878] EXT4-fs (loop6): Remounting filesystem read-only [ 702.446122][T10878] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 702.454480][T10878] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 702.482463][T10878] EXT4-fs (loop6): shut down requested (2) [ 702.780597][T10655] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.813849][T10655] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.822944][T10655] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.831981][T10655] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.941916][ T7073] EXT4-fs (loop6): unmounting filesystem. [ 703.207187][T10888] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1453'. [ 703.372501][T10888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.394596][T10888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.409602][T10888] bond0 (unregistering): Released all slaves [ 703.523279][T10901] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 703.666469][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.684210][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.723372][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 703.815102][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.832103][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.859115][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 705.438995][T10938] netlink: 'syz.6.1466': attribute type 10 has an invalid length. [ 705.478396][T10938] device syz_tun entered promiscuous mode [ 705.784523][T10941] netlink: 41 bytes leftover after parsing attributes in process `syz.6.1466'. [ 706.090169][T10946] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1469'. [ 707.119676][T10982] loop2: detected capacity change from 0 to 512 [ 707.921481][T10982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 707.929612][T10982] System zones: 1-12 [ 707.948023][T10982] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1475: Directory hole found for htree index block 0 [ 707.960913][T10982] EXT4-fs (loop2): Remounting filesystem read-only [ 707.967646][T10982] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 707.975897][T10982] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1475: Directory hole found for htree index block 0 [ 707.993195][T10982] EXT4-fs (loop2): Remounting filesystem read-only [ 708.002221][T10982] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 708.010505][T10982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 708.027919][T10981] EXT4-fs (loop2): shut down requested (2) [ 708.256763][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 708.492756][T10998] loop8: detected capacity change from 0 to 512 [ 708.523174][T10942] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1469'. [ 708.542515][T10998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 708.550959][T10998] System zones: 1-12 [ 708.556189][T10998] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.1480: Directory hole found for htree index block 0 [ 708.579018][T10998] EXT4-fs (loop8): Remounting filesystem read-only [ 708.585878][T10998] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 708.595273][T10998] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.1480: Directory hole found for htree index block 0 [ 708.608962][T10998] EXT4-fs (loop8): Remounting filesystem read-only [ 708.615792][T10998] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 708.624089][T10998] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 708.636129][T10998] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #2: comm syz.8.1480: Directory hole found for htree leaf block 0 [ 708.650653][T10998] EXT4-fs (loop8): Remounting filesystem read-only [ 709.175650][T10655] EXT4-fs (loop8): unmounting filesystem. [ 710.523483][ T4491] device hsr_slave_0 left promiscuous mode [ 710.702524][ T4491] device hsr_slave_1 left promiscuous mode [ 710.855133][ T4491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.912693][ T4491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.152034][ T4491] device team0 left promiscuous mode [ 711.167079][ T4491] device team_slave_0 left promiscuous mode [ 711.174664][ T4491] device team_slave_1 left promiscuous mode [ 711.181359][ T4491] bridge0: port 3(team0) entered disabled state [ 711.406367][ T4491] device bridge_slave_1 left promiscuous mode [ 711.465744][ T4491] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.683365][ T4491] device bridge_slave_0 left promiscuous mode [ 711.865225][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.969877][ T4491] team0 (unregistering): Port device bridge4 removed [ 712.081215][ T4491] team0 (unregistering): Port device bridge3 removed [ 712.156691][ T4491] team0 (unregistering): Port device bridge2 removed [ 712.275236][ T4491] team0 (unregistering): Port device bridge1 removed [ 714.326704][ T4491] team0 (unregistering): Port device team_slave_1 removed [ 714.432379][ T4491] team0 (unregistering): Port device team_slave_0 removed [ 714.478562][ T4491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.534985][ T4491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.994472][ T4491] bond0 (unregistering): Released all slaves [ 715.123280][T11051] netlink: 'syz.0.1496': attribute type 11 has an invalid length. [ 715.125002][T11049] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 715.219736][T11049] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 715.235541][T11049] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 715.660401][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bd7ac00: rx timeout, send abort [ 715.672707][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bd7ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 716.701571][T11104] loop8: detected capacity change from 0 to 512 [ 717.441669][T11104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 717.449819][T11104] System zones: 1-12 [ 717.462094][T11104] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.1506: Directory hole found for htree index block 0 [ 717.475405][T11104] EXT4-fs (loop8): Remounting filesystem read-only [ 717.482140][T11104] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 717.490393][T11104] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.1506: Directory hole found for htree index block 0 [ 717.505723][T11104] EXT4-fs (loop8): Remounting filesystem read-only [ 717.512361][T11104] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 717.520575][T11104] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 717.538484][T11102] EXT4-fs (loop8): shut down requested (2) [ 717.751578][T10655] EXT4-fs (loop8): unmounting filesystem. [ 718.790531][T11125] netlink: 'syz.0.1512': attribute type 4 has an invalid length. [ 719.027220][T11128] netlink: 'syz.0.1512': attribute type 4 has an invalid length. [ 720.997128][T11156] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1519'. [ 721.232703][T11129] bridge0: port 3(team0) entered disabled state [ 721.239308][T11129] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.246624][T11129] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.612291][T11170] loop2: detected capacity change from 0 to 512 [ 721.805521][T11170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 721.814172][T11170] System zones: 1-12 [ 721.862137][T11170] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1521: Directory hole found for htree index block 0 [ 721.877307][T11170] EXT4-fs (loop2): Remounting filesystem read-only [ 721.884227][T11170] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 721.892915][T11170] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1521: Directory hole found for htree index block 0 [ 721.908707][T11170] EXT4-fs (loop2): Remounting filesystem read-only [ 721.915608][T11170] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 721.923998][T11170] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 721.951304][T11170] EXT4-fs (loop2): shut down requested (2) [ 722.354752][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 722.699103][T11129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.756765][T11129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.093756][T11129] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.102914][T11129] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.112198][T11129] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.121189][T11129] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.329693][T11168] bridge0: port 3(team0) entered disabled state [ 723.591803][T11183] tipc: Enabling of bearer rejected, failed to enable media [ 725.059904][T11203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 726.594658][T11218] loop8: detected capacity change from 0 to 512 [ 727.249579][T11218] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 727.257674][T11218] System zones: 1-12 [ 727.295516][T11218] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.1533: Directory hole found for htree index block 0 [ 727.310094][T11218] EXT4-fs (loop8): Remounting filesystem read-only [ 727.316682][T11218] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 727.325075][T11218] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.1533: Directory hole found for htree index block 0 [ 727.338308][T11218] EXT4-fs (loop8): Remounting filesystem read-only [ 727.344946][T11218] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 727.353240][T11218] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 727.372263][T11215] EXT4-fs (loop8): shut down requested (2) [ 727.632162][T10655] EXT4-fs (loop8): unmounting filesystem. [ 727.762183][T11239] tipc: Enabling of bearer rejected, failed to enable media [ 729.004082][T11258] device vlan2 entered promiscuous mode [ 729.174353][T11258] device bridge0 entered promiscuous mode [ 729.365632][T11266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 730.874575][T11290] loop8: detected capacity change from 0 to 512 [ 731.147843][T11290] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 731.156377][T11290] System zones: 1-12 [ 731.233711][T11290] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.1549: Directory hole found for htree index block 0 [ 731.249813][T11290] EXT4-fs (loop8): Remounting filesystem read-only [ 731.256871][T11290] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 731.265386][T11290] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.1549: Directory hole found for htree index block 0 [ 731.285555][T11290] EXT4-fs (loop8): Remounting filesystem read-only [ 731.292319][T11290] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 731.300674][T11290] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 731.328007][T11290] EXT4-fs (loop8): shut down requested (2) [ 731.630269][T10655] EXT4-fs (loop8): unmounting filesystem. [ 732.742548][T11310] tipc: Enabling of bearer rejected, failed to enable media [ 733.433471][T11325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 734.841257][T11347] loop6: detected capacity change from 0 to 512 [ 735.138116][T11347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 735.146655][T11347] System zones: 1-12 [ 735.155498][T11347] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.1563: Directory hole found for htree index block 0 [ 735.172279][T11347] EXT4-fs (loop6): Remounting filesystem read-only [ 735.179136][T11347] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 735.187835][T11347] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.1563: Directory hole found for htree index block 0 [ 735.203625][T11347] EXT4-fs (loop6): Remounting filesystem read-only [ 735.210366][T11347] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 735.218802][T11347] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 735.244883][T11347] EXT4-fs (loop6): shut down requested (2) [ 735.574736][ T7073] EXT4-fs (loop6): unmounting filesystem. [ 735.651622][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'. [ 736.761132][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 736.964538][T11373] tipc: Enabled bearer , priority 0 [ 737.024421][T11373] device syzkaller0 entered promiscuous mode [ 737.075148][T11373] tipc: Resetting bearer [ 737.114014][T11370] tipc: Resetting bearer [ 737.188082][T11370] tipc: Disabling bearer [ 737.434140][T11385] device syzkaller1 entered promiscuous mode [ 739.481141][T11411] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1578'. [ 739.710552][T11415] IPVS: sh: FWM 3 0x00000003 - no destination available [ 740.108295][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 741.110068][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.116525][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.927222][T11452] tipc: Enabling of bearer rejected, failed to enable media [ 743.235415][T11466] device syzkaller0 entered promiscuous mode [ 745.140498][T11508] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1596'. [ 745.254258][T11512] IPVS: sh: FWM 3 0x00000003 - no destination available [ 745.548595][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 747.867031][T11497] device bridge3 entered promiscuous mode [ 747.918456][T11507] device bridge3 entered promiscuous mode [ 747.928754][T11507] team0: Port device bridge3 added [ 748.153515][T11527] tipc: Enabling of bearer rejected, failed to enable media [ 749.838466][T11559] device syzkaller0 entered promiscuous mode [ 750.883130][T11569] netlink: 'syz.0.1607': attribute type 1 has an invalid length. [ 750.953882][T11569] device bond1 entered promiscuous mode [ 750.982878][T11569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 751.025573][T11571] bond1: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 751.074988][T11571] bond1: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 751.104337][T11571] bond1: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 752.306956][T11597] tipc: Enabling of bearer rejected, failed to enable media [ 752.451408][T11604] device bridge3 entered promiscuous mode [ 753.570374][T11606] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1616'. [ 753.947236][T11616] device bridge3 entered promiscuous mode [ 754.168050][T11616] team0: Port device bridge3 added [ 754.263008][T11608] device syzkaller1 entered promiscuous mode [ 754.495787][T11634] device syzkaller0 entered promiscuous mode [ 756.901448][T11666] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1626'. [ 758.395247][T11681] device bridge4 entered promiscuous mode [ 758.800441][T11684] device bridge4 entered promiscuous mode [ 758.807756][T11684] team0: Port device bridge4 added [ 761.709126][T11729] sctp: [Deprecated]: syz.2.1641 (pid 11729) Use of int in max_burst socket option. [ 761.709126][T11729] Use struct sctp_assoc_value instead [ 761.779734][T11740] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1643'. [ 763.064579][T11760] device bridge1 entered promiscuous mode [ 763.599459][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'. [ 764.750366][T11797] device syzkaller0 entered promiscuous mode [ 764.801330][T11798] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1658'. [ 766.018693][T11816] device bridge3 entered promiscuous mode [ 766.060638][T11816] team0: Port device bridge3 added [ 766.292486][T11821] bridge0: port 3(team0) entered blocking state [ 766.321304][T11819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.339154][T11821] bridge0: port 3(team0) entered disabled state [ 766.379583][T11821] device team0 entered promiscuous mode [ 766.414678][T11821] device team_slave_0 entered promiscuous mode [ 766.421052][T11821] device team_slave_1 entered promiscuous mode [ 766.429961][T11821] bridge0: port 3(team0) entered blocking state [ 766.436361][T11821] bridge0: port 3(team0) entered forwarding state [ 768.103946][T11852] tipc: Enabling of bearer rejected, failed to enable media [ 768.219822][T11853] device syzkaller0 entered promiscuous mode [ 768.291076][T11857] ieee802154 phy0 wpan0: encryption failed: -22 [ 769.972198][T11890] device syzkaller0 entered promiscuous mode [ 770.672319][T11907] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1687'. [ 770.913634][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1684'. [ 771.194530][T11893] device veth0_macvtap left promiscuous mode [ 774.635204][T11962] loop8: detected capacity change from 0 to 512 [ 774.820511][T11962] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 774.829044][T11962] System zones: 1-12 [ 774.902121][T11962] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.1697: Directory hole found for htree index block 0 [ 774.916447][T11962] EXT4-fs (loop8): Remounting filesystem read-only [ 774.923220][T11962] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 774.931830][T11962] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.1697: Directory hole found for htree index block 0 [ 774.945937][T11962] EXT4-fs (loop8): Remounting filesystem read-only [ 774.952714][T11962] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 774.961149][T11962] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 774.991941][T11962] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #2: comm syz.8.1697: Directory hole found for htree leaf block 0 [ 775.018385][T11962] EXT4-fs (loop8): Remounting filesystem read-only [ 775.413757][T11975] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1698'. [ 775.649537][T10655] EXT4-fs (loop8): unmounting filesystem. [ 775.833668][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1700'. [ 776.236584][T11974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.253210][T11977] device macvlan2 entered promiscuous mode [ 776.263096][T11977] device bond0 entered promiscuous mode [ 776.269683][T11977] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 776.282203][T11977] team0: Port device macvlan2 added [ 776.718309][T12000] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1706'. [ 779.061710][T12042] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1715'. [ 779.670270][T12060] device syzkaller0 entered promiscuous mode [ 779.821634][T12062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1720'. [ 782.301088][T12101] device syzkaller0 entered promiscuous mode [ 782.935269][T12125] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1736'. [ 783.604062][T12120] IPVS: sh: FWM 3 0x00000003 - no destination available [ 783.681322][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 786.065034][T12167] device syzkaller0 entered promiscuous mode [ 787.634457][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1758'. [ 789.059303][T12232] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1762'. [ 789.255665][T12227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 789.308385][T12227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 789.317518][T12227] device bridge_slave_0 left promiscuous mode [ 789.323865][T12227] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.334309][T12227] device bridge_slave_1 left promiscuous mode [ 789.350542][T12227] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.375019][T12227] bond0: (slave bond_slave_0): Releasing backup interface [ 789.412735][T12227] bond0: (slave bond_slave_1): Releasing backup interface [ 789.500763][T12227] team0: Port device team_slave_0 removed [ 789.530721][T12227] team0: Port device team_slave_1 removed [ 789.545966][T12227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.553527][T12227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.644821][T12227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.662608][T12227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.724077][T12224] 8021q: VLANs not supported on vxcan1 [ 791.330085][T12277] netlink: 'syz.8.1772': attribute type 10 has an invalid length. [ 791.384735][T12277] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1772'. [ 791.409753][T12277] device dummy0 entered promiscuous mode [ 791.416770][T12277] bridge0: port 1(dummy0) entered blocking state [ 791.428967][T12277] bridge0: port 1(dummy0) entered disabled state [ 791.438958][T12277] bridge0: port 1(dummy0) entered blocking state [ 791.445463][T12277] bridge0: port 1(dummy0) entered forwarding state [ 791.483269][T12281] device syzkaller0 entered promiscuous mode [ 792.167079][T12299] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1779'. [ 792.214949][T12301] IPVS: Unknown mcast interface: vcan0 [ 793.633030][T12324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1785'. [ 793.899749][T12330] device veth3 entered promiscuous mode [ 794.015687][T12336] loop2: detected capacity change from 0 to 512 [ 794.072788][T12336] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 794.081360][T12336] System zones: 1-12 [ 794.336552][T12336] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1787: Directory hole found for htree index block 0 [ 794.354494][T12336] EXT4-fs (loop2): Remounting filesystem read-only [ 794.361409][T12336] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 794.370173][T12336] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1787: Directory hole found for htree index block 0 [ 794.386161][T12336] EXT4-fs (loop2): Remounting filesystem read-only [ 794.392971][T12336] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 794.401393][T12336] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 794.433089][T12336] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #2: comm syz.2.1787: Directory hole found for htree leaf block 0 [ 794.449961][T12336] EXT4-fs (loop2): Remounting filesystem read-only [ 794.881521][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 795.099731][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 799.406891][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 801.079218][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 801.085652][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 801.143322][T12442] tipc: Enabled bearer , priority 0 [ 801.151781][T12442] device syzkaller0 entered promiscuous mode [ 801.214178][T12442] tipc: Resetting bearer [ 801.279592][T12441] tipc: Resetting bearer [ 801.358246][T12441] tipc: Disabling bearer [ 801.801854][T12470] device syzkaller0 entered promiscuous mode [ 802.306259][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'. [ 803.182416][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1823'. [ 803.198095][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.223688][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.238526][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.249786][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.263217][T12491] batman_adv: batadv0: Adding interface: ipvlan2 [ 803.270365][T12491] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.321664][T12491] batman_adv: batadv0: Interface activated: ipvlan2 [ 805.066787][T12527] device syzkaller0 entered promiscuous mode [ 805.342415][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 806.794070][T12553] syz.0.1837 sent an empty control message without MSG_MORE. [ 808.561008][T12589] tipc: Enabled bearer , priority 10 [ 809.549921][ T126] tipc: Node number set to 3644001710 [ 809.764924][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1852'. [ 811.747830][T12630] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1860'. [ 812.314422][T12642] netlink: 49 bytes leftover after parsing attributes in process `syz.6.1863'. [ 813.396362][T12668] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1872'. [ 813.415982][T12669] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1873'. [ 814.520508][T12674] device syzkaller0 entered promiscuous mode [ 815.246559][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1881'. [ 819.818576][T12695] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.172565][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.905507][T12695] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.082753][T12695] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.406970][T12695] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.264881][T12769] tipc: Started in network mode [ 825.269906][T12769] tipc: Node identity 2, cluster identity 7 [ 825.289613][T12769] tipc: Node number set to 2 [ 825.327130][T12772] device bridge4 entered promiscuous mode [ 825.365224][T12772] team0: Port device bridge4 added [ 825.376970][T12775] device bridge5 entered promiscuous mode [ 825.485799][T12775] team0: Port device bridge5 added [ 825.555177][T12695] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.607130][T12695] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.637866][T12782] device syzkaller0 entered promiscuous mode [ 825.674165][T12695] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.812382][T12695] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.067820][T12790] loop2: detected capacity change from 0 to 512 [ 827.491496][T12790] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1903: corrupted in-inode xattr [ 827.505445][T12790] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1903: couldn't read orphan inode 15 (err -117) [ 827.519337][T12790] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 829.341367][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 829.365470][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 829.845891][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1912'. [ 830.168441][T12826] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1916'. [ 833.631648][T12869] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1928'. [ 836.947103][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1927'. [ 837.365536][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1934'. [ 837.407235][T12887] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1935'. [ 839.276765][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'. [ 839.805914][T12928] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1950'. [ 841.654806][T12956] IPVS: sh: FWM 3 0x00000003 - no destination available [ 841.708286][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 842.284318][T12964] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1963'. [ 843.419083][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 843.806410][T13005] IPVS: sh: FWM 3 0x00000003 - no destination available [ 843.871419][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 844.865710][T13008] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1977'. [ 844.979761][T13008] bridge0: port 1(dummy0) entered disabled state [ 845.010371][T13015] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1979'. [ 845.417084][T13008] bridge0: port 1(dummy0) entered disabled state [ 846.041751][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1989'. [ 846.427537][T13053] IPVS: sh: FWM 3 0x00000003 - no destination available [ 846.576229][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 847.452137][T13061] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1993'. [ 847.702840][T13064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1995'. [ 847.825271][T13064] netlink: 'syz.4.1995': attribute type 17 has an invalid length. [ 847.861820][T13064] netlink: 'syz.4.1995': attribute type 27 has an invalid length. [ 848.194000][T13078] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2000'. [ 849.557725][T13088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 850.573192][T13093] IPVS: sh: FWM 3 0x00000003 - no destination available [ 850.656621][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 851.747730][T13137] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2016'. [ 854.589637][T13186] loop2: detected capacity change from 0 to 512 [ 854.645529][T13186] ext4: Unknown parameter 'nouser_xattr' [ 854.734723][T12779] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 855.067296][T13199] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2035'. [ 855.943511][T13208] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2040'. [ 857.055370][T13216] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2043'. [ 857.430228][T13228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 858.447283][T13238] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2051'. [ 858.545925][T13243] IPVS: sh: FWM 3 0x00000003 - no destination available [ 858.624510][T13244] loop6: detected capacity change from 0 to 1024 [ 858.654731][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 858.701307][T13244] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 858.771431][T13248] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2054'. [ 858.832570][T13244] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #3: block 1: comm syz.6.2053: lblock 1 mapped to illegal pblock 1 (length 1) [ 858.950021][T13244] Quota error (device loop6): write_blk: dquota write failed [ 858.968330][T13254] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2055'. [ 859.191201][T13244] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 859.306893][T13244] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.2053: Failed to acquire dquot type 0 [ 859.411226][T13244] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.2053: Freeing blocks not in datazone - block = 0, count = 4096 [ 859.527525][T13244] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.2053: Invalid inode bitmap blk 0 in block_group 0 [ 859.703509][T13244] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 859.732748][T13244] EXT4-fs (loop6): 1 orphan inode deleted [ 859.747483][T13244] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 860.228038][T13265] device bridge4 entered promiscuous mode [ 860.275996][ T4980] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 860.320944][T13265] team0: Port device bridge4 added [ 860.335238][ T4980] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 860.360720][ T4980] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:17: Failed to release dquot type 0 [ 860.392999][T13269] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2061'. [ 860.450800][T13265] device bridge5 entered promiscuous mode [ 860.480742][T13265] team0: Port device bridge5 added [ 860.573792][T13244] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 965.758785][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 965.765861][ C1] rcu: 0-...!: (1 GPs behind) idle=768c/1/0x4000000000000000 softirq=50727/50728 fqs=1 [ 965.776743][ C1] (detected by 1, t=10502 jiffies, g=69361, q=46 ncpus=2) [ 965.783995][ C1] Sending NMI from CPU 1 to CPUs 0: [ 965.789250][ C0] NMI backtrace for cpu 0 [ 965.789277][ C0] CPU: 0 PID: 13270 Comm: syz.8.2062 Not tainted syzkaller #0 [ 965.789316][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 965.789330][ C0] RIP: 0010:lock_release+0x137/0x920 [ 965.789470][ C0] Code: 8b 35 9d 9d 9d 7e 49 8d 9e dc 0a 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 5b 05 00 00 83 3b 00 0f 85 6b 04 00 00 <4c> 89 74 24 08 43 c6 44 2f 08 00 48 c7 84 24 a0 00 00 00 00 00 00 [ 965.789513][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000046 [ 965.789555][ C0] RAX: 0000000000000000 RBX: ffff88802a91641c RCX: 5ce5b13a551c4300 [ 965.789568][ C0] RDX: 0000000000000000 RSI: ffffffff8adf1b80 RDI: ffffffff8adf1b40 [ 965.789580][ C0] RBP: ffffc90000007bf0 R08: ffffffff8e1ffbef R09: 1ffffffff1c3ff7d [ 965.789593][ C0] R10: dffffc0000000000 R11: fffffbfff1c3ff7e R12: dffffc0000000000 [ 965.789606][ C0] R13: dffffc0000000000 R14: ffff88802a915940 R15: 1ffff92000000f68 [ 965.789619][ C0] FS: 00007f61907f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 965.789635][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.789647][ C0] CR2: 00007f2a360f0e9c CR3: 00000000502b1000 CR4: 00000000003506f0 [ 965.789663][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 965.789673][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 965.789684][ C0] Call Trace: [ 965.789716][ C0] [ 965.789758][ C0] ? debug_object_activate+0x2f8/0x4f0 [ 965.789831][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 965.789847][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 965.789872][ C0] ? __rwlock_init+0x140/0x140 [ 965.789887][ C0] ? debug_object_activate+0x4f0/0x4f0 [ 965.789912][ C0] _raw_spin_unlock_irqrestore+0x6d/0x120 [ 965.789967][ C0] ? _raw_spin_unlock+0x40/0x40 [ 965.789988][ C0] ? advance_sched+0x6cc/0x970 [ 965.790076][ C0] debug_object_activate+0x2f8/0x4f0 [ 965.790100][ C0] enqueue_hrtimer+0x30/0x3f0 [ 965.790145][ C0] __hrtimer_run_queues+0x685/0xd50 [ 965.790167][ C0] ? taprio_free_sched_cb+0x190/0x190 [ 965.790194][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 965.790217][ C0] hrtimer_interrupt+0x3c5/0x9c0 [ 965.790249][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 965.790302][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 965.790342][ C0] [ 965.790347][ C0] [ 965.790376][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 965.790399][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 965.790420][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 7f ee 20 f7 65 8b 05 80 60 ca 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 965.790434][ C0] RSP: 0018:ffffc9000e9e7a20 EFLAGS: 00000206 [ 965.790447][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 5ce5b13a551c4300 [ 965.790459][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001 [ 965.790470][ C0] RBP: ffffc9000e9e7ab0 R08: ffffffff8cb470c3 R09: 1ffffffff1968e18 [ 965.790483][ C0] R10: dffffc0000000000 R11: fffffbfff1968e19 R12: dffffc0000000000 [ 965.790495][ C0] R13: dffffc0000000000 R14: ffffffff8cb470c0 R15: 1ffff92001d3cf44 [ 965.790517][ C0] ? _raw_spin_unlock+0x40/0x40 [ 965.790535][ C0] ? memcpy+0x3c/0x60 [ 965.790579][ C0] ? timekeeping_update+0x3ec/0x460 [ 965.790622][ C0] timekeeping_inject_offset+0x5c3/0x670 [ 965.790645][ C0] ? do_adjtimex+0x45a/0xa00 [ 965.790666][ C0] ? timekeeping_warp_clock+0xc0/0xc0 [ 965.790687][ C0] ? add_device_randomness+0xc2/0x100 [ 965.790749][ C0] ? crng_reseed+0x190/0x190 [ 965.790770][ C0] ? security_capable+0x85/0xb0 [ 965.790815][ C0] do_adjtimex+0x45a/0xa00 [ 965.790840][ C0] ? random_get_entropy_fallback+0x60/0x60 [ 965.790863][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 965.790890][ C0] ? __might_fault+0xa6/0x120 [ 965.790960][ C0] ? __might_fault+0xc2/0x120 [ 965.790976][ C0] ? __might_fault+0xa6/0x120 [ 965.790996][ C0] __x64_sys_clock_adjtime+0x242/0x320 [ 965.791015][ C0] ? do_clock_adjtime+0x120/0x120 [ 965.791046][ C0] ? syscall_enter_from_user_mode+0x2a/0x80 [ 965.791066][ C0] do_syscall_64+0x4c/0xa0 [ 965.791097][ C0] ? clear_bhb_loop+0x60/0xb0 [ 965.791117][ C0] ? clear_bhb_loop+0x60/0xb0 [ 965.791140][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 965.791161][ C0] RIP: 0033:0x7f619259ce59 [ 965.791180][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.791194][ C0] RSP: 002b:00007f61907f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 965.791210][ C0] RAX: ffffffffffffffda RBX: 00007f6192815fa0 RCX: 00007f619259ce59 [ 965.791222][ C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 965.791234][ C0] RBP: 00007f6192632d6f R08: 0000000000000000 R09: 0000000000000000 [ 965.791245][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.791254][ C0] R13: 00007f6192816038 R14: 00007f6192815fa0 R15: 00007ffd781be338 [ 965.791274][ C0] [ 965.792244][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g69361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 966.294909][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 966.304908][ C1] rcu: RCU grace-period kthread stack dump: [ 966.310814][ C1] task:rcu_preempt state:R running task stack:27760 pid:16 ppid:2 flags:0x00004000 [ 966.321631][ C1] Call Trace: [ 966.324937][ C1] [ 966.327901][ C1] __schedule+0x11d1/0x40e0 [ 966.332566][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 966.338503][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 966.344439][ C1] ? __sched_text_start+0x8/0x8 [ 966.349346][ C1] ? __mod_timer+0x91e/0xd00 [ 966.353982][ C1] schedule+0xb9/0x180 [ 966.358095][ C1] schedule_timeout+0x184/0x2d0 [ 966.362977][ C1] ? console_conditional_schedule+0x40/0x40 [ 966.368908][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 966.374841][ C1] ? update_process_times+0x1b0/0x1b0 [ 966.380250][ C1] ? prepare_to_swait_event+0x335/0x350 [ 966.385914][ C1] rcu_gp_fqs_loop+0x303/0x1340 [ 966.390861][ C1] ? dump_blkd_tasks+0x810/0x810 [ 966.395833][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 966.400631][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 966.405536][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 966.410775][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 966.416015][ C1] rcu_gp_kthread+0x99/0x3b0 [ 966.420638][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 966.425788][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 966.431723][ C1] ? __kthread_parkme+0x162/0x1c0 [ 966.436844][ C1] kthread+0x29d/0x330 [ 966.440980][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 966.446128][ C1] ? kthread_blkcg+0xd0/0xd0 [ 966.450760][ C1] ret_from_fork+0x1f/0x30 [ 966.455246][ C1] [ 966.458299][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 966.464651][ C1] CPU: 1 PID: 6303 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 966.472316][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 966.482405][ C1] Workqueue: events_unbound toggle_allocation_gate [ 966.488985][ C1] RIP: 0010:smp_call_function_many_cond+0xea2/0x1290 [ 966.495748][ C1] Code: 00 00 00 41 8b 1f 89 de 83 e6 01 31 ff e8 f6 f6 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 82 f3 0a 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 67 f3 0a [ 966.515388][ C1] RSP: 0018:ffffc90003c47800 EFLAGS: 00000293 [ 966.521490][ C1] RAX: ffffffff81779349 RBX: dffffc0000000000 RCX: ffff888024f31dc0 [ 966.529496][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 966.537500][ C1] RBP: ffffc90003c47960 R08: ffffffff90afa247 R09: 1ffffffff215f448 [ 966.545501][ C1] R10: dffffc0000000000 R11: fffffbfff215f449 R12: 1ffff110171c8601 [ 966.553501][ C1] R13: ffff8880b8f3bbc0 R14: 0000000000000000 R15: ffff8880b8e43008 [ 966.561506][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 966.570460][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.577089][ C1] CR2: 0000200000000040 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 966.585104][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 966.593114][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 966.601116][ C1] Call Trace: [ 966.604431][ C1] [ 966.607391][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 966.612945][ C1] ? text_poke_sync+0x20/0x20 [ 966.617702][ C1] ? smp_call_function_many+0x30/0x30 [ 966.623125][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 966.628641][ C1] ? text_poke+0x90/0x90 [ 966.632934][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 966.639129][ C1] ? text_poke_loc_init+0x10f/0x5b0 [ 966.644379][ C1] ? text_poke_sync+0x20/0x20 [ 966.649107][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 966.654264][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 966.659772][ C1] text_poke_bp_batch+0x2b7/0x850 [ 966.664844][ C1] ? arch_jump_label_transform_apply+0xe/0x20 [ 966.670954][ C1] ? text_poke_loc_init+0x5b0/0x5b0 [ 966.676203][ C1] ? arch_jump_label_transform_queue+0x76/0xd0 [ 966.682395][ C1] text_poke_finish+0x16/0x30 [ 966.687113][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 966.693138][ C1] static_key_enable_cpuslocked+0x11f/0x240 [ 966.699112][ C1] static_key_enable+0x16/0x20 [ 966.703913][ C1] toggle_allocation_gate+0xba/0x470 [ 966.709233][ C1] ? show_object+0xa0/0xa0 [ 966.713721][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 966.719772][ C1] ? read_lock_is_recursive+0x10/0x10 [ 966.725183][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 966.731118][ C1] ? _raw_spin_unlock+0x40/0x40 [ 966.736008][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 966.741248][ C1] ? process_one_work+0x7b0/0x1160 [ 966.746393][ C1] process_one_work+0x8a2/0x1160 [ 966.751379][ C1] ? worker_detach_from_pool+0x240/0x240 [ 966.757064][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 966.762118][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 966.767702][ C1] ? kthread_data+0x4b/0xc0 [ 966.772262][ C1] worker_thread+0xaa2/0x1270 [ 966.777005][ C1] kthread+0x29d/0x330 [ 966.781137][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 966.786197][ C1] ? kthread_blkcg+0xd0/0xd0 [ 966.790819][ C1] ret_from_fork+0x1f/0x30 [ 966.795295][ C1]