last executing test programs: 13m19.177766375s ago: executing program 2 (id=1047): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) 13m18.523489857s ago: executing program 2 (id=1051): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x8, @mcast2, 0x4}, 0x1c, 0x0}}], 0x1, 0x24000045) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac14"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 13m17.434038134s ago: executing program 2 (id=1056): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa3, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 13m16.159583128s ago: executing program 2 (id=1060): socket$kcm(0x10, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071106e00000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000006ac0)=[{&(0x7f0000000380)=""/165, 0x4f}], 0x1) r3 = socket(0xa, 0x3, 0x87) sendmsg(r3, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00', 0x7, 0x4}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000005c0)='R', 0x1}], 0x2}, 0x4040010) close(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xfffffffffffffcfe, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50b10, 0x51b23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0xfe, 0x0, 0x46}, {0x6, 0x1, 0xfb, 0x2}]}) write(r5, &(0x7f0000000280)="73a3901297b394457d9ec9b395c0de25e4ce3095c6869d8db0a86077d284a3c1058bb47a260cc5b4fc0a93c0f8faf42ced54b1c510a286c65bf70edfe4f647e08b0b24df001000", 0x47) r6 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@setlink={0x3c, 0x13, 0x1, 0x4070bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3d82, 0x1f9c6}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x3c}}, 0x20044000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x1, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@broadcast, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 13m14.601769948s ago: executing program 2 (id=1067): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x27, 0x22, 0x0, &(0x7f00000004c0)="8e5763539bb91a84c8007f5b0800f08db9b5b254aaea0075d4a8248217893240553e", 0x0, 0x4200, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m13.692452621s ago: executing program 2 (id=1072): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f000029a000/0x4000)=nil, 0x4000, 0x6, 0x11, r0, 0x3000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x60, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 12m58.349667598s ago: executing program 32 (id=1072): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f000029a000/0x4000)=nil, 0x4000, 0x6, 0x11, r0, 0x3000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x60, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 8m16.532249852s ago: executing program 4 (id=1956): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) 8m15.084112873s ago: executing program 4 (id=1960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449", 0xa4}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xbe8}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x40) 8m13.801451903s ago: executing program 4 (id=1965): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x80000000) 8m12.130567226s ago: executing program 4 (id=1968): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0x8, 0x4) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2c, 0x1}, 0x14}}, 0x18) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x9, @private1, 0x8}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)="81", 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x40}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 8m10.313459962s ago: executing program 4 (id=1972): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000000)=0x1, 0x4) 8m9.813841856s ago: executing program 4 (id=1973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0xfffffd12}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fa80a010100"], 0x57) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='defcontex']) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x6}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m54.295616682s ago: executing program 33 (id=1973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0xfffffd12}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fa80a010100"], 0x57) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='defcontex']) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x6}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m22.586839933s ago: executing program 1 (id=2154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) 6m21.16225666s ago: executing program 1 (id=2157): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="400f5c00000000000a3c34f8acec3b5620db66896eb8c833cdc26f95ed3d4e3dc901e6a4b302c6d9a3ce93041da63a9da5d7c7d14cfb63226684d58ced59e6a5fb934fd176b75dba4a0df3"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 6m16.293544884s ago: executing program 1 (id=2164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m13.628415438s ago: executing program 1 (id=2170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 6m11.76527975s ago: executing program 1 (id=2174): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x8}, 0x20) 6m10.885263178s ago: executing program 1 (id=2176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pread64(r4, 0x0, 0x0, 0x800000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x23, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x350c0000, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x3, 0x0, 0x4, 0x8, 0x1, 0xffffffffffffffe0, 0x10}, @jmp={0x5, 0x0, 0xd, 0xb, 0xb, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7fffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2, 0x1000, &(0x7f00000007c0)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ed}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x8}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r6) 5m54.799583995s ago: executing program 34 (id=2176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pread64(r4, 0x0, 0x0, 0x800000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x23, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x350c0000, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x3, 0x0, 0x4, 0x8, 0x1, 0xffffffffffffffe0, 0x10}, @jmp={0x5, 0x0, 0xd, 0xb, 0xb, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7fffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2, 0x1000, &(0x7f00000007c0)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ed}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x8}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r6) 4m57.266205197s ago: executing program 6 (id=2297): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) 4m56.263892609s ago: executing program 6 (id=2299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012b", 0x7}, {&(0x7f0000000540)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a3c7ffcc2", 0x25}], 0x2}, 0x20008b88) 4m54.239757609s ago: executing program 6 (id=2301): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x4030582a, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1a0, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x19}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5b}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa3}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x7fffffff, 0x6, 0x800, 0x3, 0xe3, 0x8001, 0x98, 0xffff, 0x65f]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x18}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x7, 0xad7, 0x10001, 0x80, 0x4]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xa}]}}, @CTA_NAT_DST={0x94, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4621}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x1a0}}, 0x400c001) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x2}}, 0x26) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x19, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000009000000000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001815000076eadb617b3278e363b56e73113b54d5", @ANYRES32=r0, @ANYBLOB="000000000000000018000000b29300000000000001000000058401800500000085000000bc000000da68200000000000184b00000000000000000000000000001861000002000000000000000600000009238000690000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1000, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x29, '\x00', 0x0, @cgroup_sockopt=0x16, r0, 0x8, &(0x7f0000001780)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x1, 0x2, 0x2, 0x9}, 0x10, r6, r7, 0x0, &(0x7f00000018c0)=[r0, 0xffffffffffffffff, r0, r3, r0, r0, r0, r0], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) close(0x3) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000500)=0x2) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@loopback}, {@private}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000006000000000000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000007f557abeaf31b88500000083000000bf0900000000000055090100000000009500000000000000bf9100000000ff0d00000000000000008500000084000000b70000000000110095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 4m53.591455218s ago: executing program 6 (id=2303): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@grpquota}, {@nogrpid}, {@orlov}]}, 0x1, 0x501, &(0x7f0000000e80)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILohcaModhzFTmlCD+mZKxJInODIH8C5J+5cENy4lAMSPyJQg4SE0YwnqZvajdUkdhR/PtJo3ps39fe9pvNe/U3iF8DIuh4R+xExERGfRsRsdj2XHfFR+0jue3LwYOXw4MFKLlqtT/6RS9uTa9HxZxLXstcsRsT3vhXxo9zzcRu7exvL1WplO6vPN2tb843dvVvrteW1ylpls1xeWlxa+OD2++VzG+tbtYms9MXHv9//2k+Sbs1kVzrHcZ7aQy8cx0mMR8R3LiLYEIxl45kYdkd4KfmIeD0i3k6f/9kYS7+aAMBV1mrNRmu2sw4AXHX5NAeWy5eyXMBM5POlUjuH90ZM56v1RvPm3frO5mo7VzYXhfzd9WplIcsVzkUhl9QX0/LTevlE/XZEvBYRP5ucSuullXp1dZj/8QGAEXbtxPr/78n2+g8AXHHFYXcAABg46z8AjB7rPwCMHus/AIye9vo/NexuAAAD5P0/AIwe6z8AjJTvfvxxcrQOs8+/Xr23u7NRv3drtdLYKNV2Vkor9e2t0lq9vpZ+Zk/ttNer1utbi+/Fzv25r281mvON3b07tfrOZvNO+rnedyqF9K79AYwMAOjltbce/SmXrMgfTqVHdOzlUBhqz4CLlh92B4ChGRt2B4ChsdsXjK4zvMeXHoArossWvc8odvsFoVar1bq4LgEX7Mbn5P9hVHXk//0UMIwY+X8YXfL/MLparVy/e/5HvzcCAJebHD/Q4/v/r2fn32TfHPjB6nHT/7IZZACdAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEvqaP/fUrYX+Ezk86VSxCsRMReF3N31amUhIl6NiD9OFiaT+uKQ+wwAnFX+r7ls/68bs+/OPNP05rXj4kRE/PiXn/z8/nKzuf2HiIncPyePrjd/kV0vD773AMDpjtbp9NzxRv7JwYOVo2OQ/fnbNyOi2I5/eDARh8fxx2M8PRejEBHT/8pl9bZcR+7iLPYfRsRnu40/FzNpDqS98+nJ+EnsVwYaP/9M/Hza1j4nfxefOYe+wKh5lMw/H3V7/vJxPT13f/6L6Qx1dtn8l7zUymE6Bz6NfzT/jfWY/673G+O93327XZp6vu1hxOfHI45iH3bMP0fxcz3iv9tn/D9/4c23e7W1fhVxI7rH74w136xtzTd2926t15bXKmuVzXJ5aXFp4YPb75fn0xz1fO/V4O8f3ny1V1sy/uke8YunjP/LfY7/1//99PtfekH8r77TLX4+3nhB/GRN/Eqf8Zenf1vs1ZbEX+0x/tO+/jf7jP/4L3urfd4KAAxAY3dvY7larWwrKFz+QvJP9hJ0o2vhGxce4oftsU9E93t++k77mT7R1Gq9VNBeM8Z5ZN2Ay+D4oY+I/wy7MwAAAAAAAAAAAAAAQFeD+O2oYY8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAq+v/AQAA//8bfNYI") fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 4m50.837136385s ago: executing program 6 (id=2307): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x40240c4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r1, 0x211d9572}, &(0x7f00000001c0)=0x8) syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 4m46.671528667s ago: executing program 6 (id=2313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0xfffffff5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m43.938874227s ago: executing program 35 (id=2313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0xfffffff5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m23.935358903s ago: executing program 5 (id=2577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000001700)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0xc0, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0x51, 0x52, 0x0, 0x0, @str=':(\x91][{\x00\xd2w\xdb\xafo\xfa\'\xc5\xc2\x89sl\x8d\xe9\xd7\xe3m\x8el\xce\xb2D\xdb\xab~bp\x8a\x90\xc1<\x05\xd1\xd2\x97\xc5J\x0fz\x12\x16,\xc3\x02\xb6O\t\x8d\xda\xe9\x1c\xb96\x87\x84\xbcU\xe7\xc9\xf2\x86M\f\x163\x05\'\xd6\x9cv'}, @nested={0x52, 0x2, 0x0, 0x1, [@generic="bda3c288ca5b1df831dcdff0c15af351be58c64528bea02ae329eb75a898100db90903564d3c5a02857d358016cf1fb73450c5c857ddaa7d84f5802189d5634b57a195487cf76b2e639813cadf15"]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) unshare(0x400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$netlink(0x10, 0x3, 0x15) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000040)='\v', 0x1}], 0x1) 1m22.660868738s ago: executing program 5 (id=2579): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x9, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = epoll_create(0x7) r4 = epoll_create(0x7) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) unshare(0x2a020400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$alg(r10, &(0x7f0000001240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) preadv(r9, 0x0, 0x0, 0x7, 0x10000008) sendto$packet(r10, 0x0, 0x0, 0x24008095, &(0x7f00000013c0)={0x11, 0x1b, 0x0, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0x2e, 0x7e619ff98403b192}, 0x20) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x20000001}) 1m21.888042215s ago: executing program 5 (id=2580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfffffffe, 0x6361, 0x4, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x0) 1m19.674009492s ago: executing program 5 (id=2583): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x30010a9, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') truncate(&(0x7f0000000100)='./file2\x00', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1m18.406523342s ago: executing program 5 (id=2586): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}], 0x1, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1m17.233523014s ago: executing program 5 (id=2588): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x9, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = epoll_create(0x7) r4 = epoll_create(0x7) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) unshare(0x2a020400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$alg(r10, &(0x7f0000001240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) preadv(r9, 0x0, 0x0, 0x7, 0x10000008) sendto$packet(r10, 0x0, 0x0, 0x24008095, &(0x7f00000013c0)={0x11, 0x1b, 0x0, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0x2e, 0x7e619ff98403b192}, 0x20) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x20000001}) 1m15.670941606s ago: executing program 36 (id=2588): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x9, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = epoll_create(0x7) r4 = epoll_create(0x7) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) unshare(0x2a020400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$alg(r10, &(0x7f0000001240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) preadv(r9, 0x0, 0x0, 0x7, 0x10000008) sendto$packet(r10, 0x0, 0x0, 0x24008095, &(0x7f00000013c0)={0x11, 0x1b, 0x0, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0x2e, 0x7e619ff98403b192}, 0x20) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x20000001}) 17.20015874s ago: executing program 0 (id=2656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x14, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0xc0fe}, 0x0) 16.066473761s ago: executing program 0 (id=2657): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c14, &(0x7f0000001300)=ANY=[@ANYBLOB='uni_xlate=1,shortname=win95,shortname=winnt,codepage=936,iocharset=cp932,shortname=mixed,utf8=1,utf8=0,nonumtail=0,shortname=winnt,utf8=0,rodir,shortname=lower,\x00'], 0x81, 0x29b, &(0x7f00000015c0)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) 15.175540236s ago: executing program 0 (id=2658): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, 0x0, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000007000000000018001680140001801000020df70a00c39ccef7000300040008001b"], 0x40}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0xe0, 0x290, 0xffffffff, 0xe0, 0x0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{}, {{0x2, [0x0, 0x1, 0x0, 0xe9a50803c32c7add, 0x4], 0x1, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 6.173177113s ago: executing program 3 (id=2665): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2124000, 0x800, 0x3, 0x1}, 0x20) 5.52109331s ago: executing program 3 (id=2666): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x147001, 0xa8) fstat(r0, &(0x7f0000007880)) 5.439433952s ago: executing program 9 (id=2667): socket$kcm(0x10, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071106e00000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000006ac0)=[{&(0x7f0000000380)=""/165, 0x4f}], 0x1) r3 = socket(0xa, 0x3, 0x87) sendmsg(r3, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00', 0x7, 0x4}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000005c0)='R', 0x1}], 0x2}, 0x4040010) close(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0xfe, 0x0, 0x46}, {0x6, 0x1, 0xfb, 0x2}]}) write(r5, &(0x7f0000000280)="73a3901297b394457d9ec9b395c0de25e4ce3095c6869d8db0a86077d284a3c1058bb47a260cc5b4fc0a93c0f8faf42ced54b1c510a286c65bf70edfe4f647e08b0b24df001000", 0x47) socket$netlink(0x10, 0x3, 0x6) r6 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@setlink={0x3c, 0x13, 0x1, 0x4070bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3d82, 0x1f9c6}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x3c}}, 0x20044000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x1, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@broadcast, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 4.475788426s ago: executing program 3 (id=2668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000001700)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0xc0, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0x51, 0x52, 0x0, 0x0, @str=':(\x91][{\x00\xd2w\xdb\xafo\xfa\'\xc5\xc2\x89sl\x8d\xe9\xd7\xe3m\x8el\xce\xb2D\xdb\xab~bp\x8a\x90\xc1<\x05\xd1\xd2\x97\xc5J\x0fz\x12\x16,\xc3\x02\xb6O\t\x8d\xda\xe9\x1c\xb96\x87\x84\xbcU\xe7\xc9\xf2\x86M\f\x163\x05\'\xd6\x9cv'}, @nested={0x52, 0x2, 0x0, 0x1, [@generic="bda3c288ca5b1df831dcdff0c15af351be58c64528bea02ae329eb75a898100db90903564d3c5a02857d358016cf1fb73450c5c857ddaa7d84f5802189d5634b57a195487cf76b2e639813cadf15"]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) unshare(0x400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$netlink(0x10, 0x3, 0x15) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000040)='\v', 0x1}], 0x1) 3.829986687s ago: executing program 9 (id=2669): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x8, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x880) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x7f) 3.471330211s ago: executing program 7 (id=2203): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0xd, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 2.97013262s ago: executing program 3 (id=2670): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0}, {r0, 0x5010}], 0x2, 0x5e5f) shutdown(r0, 0x0) 2.77648426s ago: executing program 0 (id=2671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xec, 0x3, 0xbd80}, {0x6, 0xa, 0x5, 0x9}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="a79e914e6f749d8e09", 0x9}], 0x1}, 0x40) 2.724698069s ago: executing program 9 (id=2672): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x38, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe7b}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 1.758852521s ago: executing program 9 (id=2673): r0 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x1e78, 0x40, 0x2, 0x207}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000200)=[@ioring_restriction_sqe_flags_required={0x3, 0x10}], 0x43) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000100), 0x0) 1.389880933s ago: executing program 0 (id=2674): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000080), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.315208911s ago: executing program 3 (id=2675): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x490, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x460, 0x2, [@TCA_BASIC_POLICE={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x4}}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x502, 0x0, 0x2, 0x2, 0x5, 0x1, 0x9, 0x913d, 0x9, 0x9, 0x20, 0x80000001, 0x7, 0x9, 0x8, 0x3, 0x3, 0x0, 0x9, 0x8, 0xb6ed, 0x4, 0x9, 0x10001, 0x788, 0x80000001, 0x72b63a23, 0x9eea, 0x80, 0x2, 0x5c07, 0x6, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0xc, 0x2, 0x7, 0xb6, 0xfffffffe, 0x9, 0xff, 0x8, 0x3, 0x7, 0xa6f2, 0xf2fd, 0x1, 0x8, 0x7, 0x8, 0x7, 0x2, 0xb, 0xfffeffff, 0xffff, 0x1, 0x6, 0x80, 0x7fff, 0x1cb1415d, 0x6, 0x0, 0x61d, 0x8, 0x8, 0x2, 0x1, 0xffffffff, 0x5, 0x0, 0x5, 0x5, 0x1, 0xfffffffa, 0x7, 0x4, 0x8, 0xb861, 0xffffffff, 0x9, 0x5, 0x3390, 0x7f, 0x9, 0x4, 0x650, 0x4, 0x3, 0x6, 0x10000, 0x2, 0xc15, 0x5, 0x1, 0x5, 0x7, 0x2, 0x101, 0xfffffffd, 0xd, 0xffff, 0x1, 0x69f, 0x4, 0x40, 0x45, 0x9, 0x3, 0xfffffffe, 0x6, 0x7, 0x3, 0xa61, 0xa2, 0x8, 0x345, 0x7, 0x0, 0x0, 0x8, 0xecf9, 0x1, 0x8000, 0x80, 0x3, 0x4, 0x7, 0xffff, 0x8, 0x10, 0xc17, 0xb8, 0x27, 0x800, 0x100, 0x100, 0x2d, 0x1, 0x184, 0xfffffffb, 0x8001, 0x3, 0x6, 0xda, 0x6, 0x8, 0xd71, 0x2, 0x10001, 0x3, 0x2, 0xdd3, 0x4, 0x400, 0x5ff, 0x1, 0x80, 0x5, 0x8, 0x5, 0x30fc, 0x1, 0x3, 0x8d, 0x9, 0x7, 0x0, 0x3, 0x0, 0x3, 0x7fff, 0xfffff5f0, 0x7fffffff, 0x3, 0xd7, 0xf1, 0x1, 0x5, 0xaed, 0x7, 0xa, 0xfffffffb, 0x9, 0x1, 0x8, 0x5050, 0x8, 0x58, 0x8cb9, 0x5, 0x4, 0x5, 0xe0c, 0x1, 0x2, 0x2, 0xa, 0x10, 0x9, 0x69c, 0x2, 0x7, 0x1, 0x10, 0x1, 0x9, 0x8, 0x49c, 0x7ff, 0x800, 0xfff, 0x8, 0x3, 0x6, 0x3, 0xf03, 0x0, 0x4, 0x1, 0xbab3, 0xffffff00, 0x10, 0xf17, 0x3, 0x10000, 0x7, 0x2, 0xfdb4, 0x5, 0xfffffffc, 0x6, 0xc7, 0x2, 0x3, 0x5, 0xfffffffa, 0x5, 0xb, 0x5, 0x8204, 0x7f, 0x7, 0x1, 0x3, 0x7f, 0x0, 0x80000000, 0x7fff, 0x75054153, 0xfffffffe, 0x40, 0x5]}]}, @TCA_BASIC_POLICE={0x48, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x4, 0x159, 0xdebc, 0xffffff47, {0xf1, 0x2, 0x8, 0xffff, 0x8001}, {0x9, 0xfce0a9191980eb45, 0x1000, 0x7f, 0x7, 0xffff4289}, 0x7fffffff, 0x0, 0x9}}]}]}}]}, 0x490}}, 0x24000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000080)={'veth1_to_bond\x00', {0x2, 0x0, @initdev}}) write$bt_hci(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="8a660525428df56a7061506f70091241ed7838e3c2bb70a52ea8b9b4dea45beef9f27cdde74e77fe573ed04c6c6f9e84c06a443030c58562ed994b0970701648425ca0d453e726c7af4f4f8a5e2259fa54813067d9c1405c6c0e13c93cf7abb02e52afade67041458753b2e14ff13ee9ad7c1401b02a8653961e6cc7f567de1808f0feed986e24b982484b4c1f737cea2d5e8d02d3f7c893dd0a960cc576bd39243ea69801e35f293333ef044ebbde77651f5f046eab8d6b73e2f4c484b365cc07a6d583c7c23332752f916ea818fd01151b9c139ba38462db74ca3a4e5ff0", @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESHEX=r2, @ANYRES32=r3, @ANYRES32=r3, @ANYRES8=r2, @ANYRES8=r2], 0x6) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x11, 0x3, 0x0) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe5, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x100}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.096329534s ago: executing program 7 (id=2676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4004) 917.31512ms ago: executing program 9 (id=2677): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) capget(&(0x7f0000000180)={0x20071026, r0}, &(0x7f00000001c0)={0xd980, 0x6, 0xea, 0x8, 0x3, 0x9}) 509.650296ms ago: executing program 3 (id=2678): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3f", 0x46, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) recvmmsg(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}, 0x3}}, 0x10) recvmsg$can_j1939(r4, &(0x7f0000001d80)={&(0x7f0000000280)=@generic, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000680)=""/186, 0xba}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/108, 0x6c}, {&(0x7f00000018c0)=""/144, 0x90}, {0x0}, {&(0x7f0000001a80)=""/126, 0x7e}, {0x0}], 0x9}, 0x40) 369.153432ms ago: executing program 0 (id=2679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000001700)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0xc0, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0x51, 0x52, 0x0, 0x0, @str=':(\x91][{\x00\xd2w\xdb\xafo\xfa\'\xc5\xc2\x89sl\x8d\xe9\xd7\xe3m\x8el\xce\xb2D\xdb\xab~bp\x8a\x90\xc1<\x05\xd1\xd2\x97\xc5J\x0fz\x12\x16,\xc3\x02\xb6O\t\x8d\xda\xe9\x1c\xb96\x87\x84\xbcU\xe7\xc9\xf2\x86M\f\x163\x05\'\xd6\x9cv'}, @nested={0x52, 0x2, 0x0, 0x1, [@generic="bda3c288ca5b1df831dcdff0c15af351be58c64528bea02ae329eb75a898100db90903564d3c5a02857d358016cf1fb73450c5c857ddaa7d84f5802189d5634b57a195487cf76b2e639813cadf15"]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) unshare(0x400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$netlink(0x10, 0x3, 0x15) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000040)='\v', 0x1}], 0x1) 164.011511ms ago: executing program 9 (id=2680): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@polexpire={0xcc, 0x1b, 0x301, 0x70bd2d, 0x25dfdbfb, {{{@in=@local, @in6=@local, 0x4e23, 0x0, 0x4e23, 0x8, 0x2, 0x80, 0x20, 0x84}, {0x0, 0x0, 0x401, 0x5, 0xf8, 0x5e, 0x1, 0x62f}, {0xc, 0xfffffffffffffff8, 0x7ffffffffffffffa, 0x1ff}, 0xfffffff9, 0x6e6bc0, 0x2, 0x0, 0x3, 0x1}, 0x2}, [@policy_type={0xa}]}, 0xcc}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x45, 0x201, 0x0, 0x0, 0x0, 0x4}}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 7 (id=2681): r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x109040, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x0, 0xf9}) restart_syscall() syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000300)="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", 0x135, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) kernel console output (not intermixed with test programs): w=524288, sector=16, nr_sectors = 40 limit=16 [ 905.964706][T13624] tipc: Resetting bearer [ 905.973192][T13630] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 906.059418][T13630] erofs (device loop0): read error -117 @ 1 of nid 89 [ 906.066999][ T29] audit: type=1800 audit(1778744824.787:5): pid=13630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2210" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 906.547270][ T4871] Bluetooth: hci3: command tx timeout [ 907.338702][T13624] tipc: Disabling bearer [ 908.482466][T13654] loop6: detected capacity change from 0 to 1024 [ 908.491566][T13654] EXT4-fs: Ignoring removed bh option [ 908.776527][ T4871] Bluetooth: hci3: command tx timeout [ 910.130352][T13663] loop3: detected capacity change from 0 to 512 [ 910.150496][T13654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.501682][T13663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.605006][T13663] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 910.680721][T12732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.949909][ T4871] Bluetooth: hci3: command tx timeout [ 911.114690][ T5579] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 911.348694][T13674] loop5: detected capacity change from 0 to 256 [ 911.399657][ T5579] EXT4-fs (loop3): Remounting filesystem read-only [ 911.593242][T13674] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 912.403323][ T5579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.473311][T13686] loop3: detected capacity change from 0 to 256 [ 914.600254][T13686] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 916.333684][T13703] syzkaller0: entered promiscuous mode [ 916.395059][T13700] loop0: detected capacity change from 0 to 512 [ 916.476367][T13700] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 916.731281][T13700] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 916.747114][T13700] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2230: bg 0: block 248: padding at end of block bitmap is not set [ 916.753148][T13703] syzkaller0: entered allmulticast mode [ 916.784490][T13700] loop0: lost filesystem error report for type 5 error -117 [ 916.792535][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 916.806535][ C1] EXT4-fs (loop0): last error at time 1778744835: ext4_validate_block_bitmap:441 [ 916.904476][T13700] Quota error (device loop0): write_blk: dquota write failed [ 916.978363][T13700] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 917.043407][T13700] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2230: Failed to acquire dquot type 1 [ 917.062661][ T5671] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 917.081918][T13699] tipc: Started in network mode [ 917.087099][T13699] tipc: Node identity 9ee0ed21767d, cluster identity 4711 [ 917.095404][T13699] tipc: Enabled bearer , priority 0 [ 917.134638][ T6085] tipc: Resetting bearer [ 917.149897][T13687] tipc: Resetting bearer [ 917.245628][T13700] loop0: lost filesystem error report for type 5 error -28 [ 917.262727][T13700] EXT4-fs (loop0): 1 truncate cleaned up [ 917.369646][T13700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 917.546699][T13687] tipc: Disabling bearer [ 917.913996][ T5587] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 918.446386][T13715] loop3: detected capacity change from 0 to 1024 [ 918.603241][T13715] EXT4-fs: Ignoring removed oldalloc option [ 918.640873][T13715] EXT4-fs: Ignoring removed bh option [ 919.031713][ T5671] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.042797][ T5671] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 919.051950][ T5671] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.092930][T13715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 919.135454][ T29] audit: type=1800 audit(1778744837.827:6): pid=13715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2235" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 919.428931][T13715] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 919.430200][ T5671] usb 6-1: config 0 descriptor?? [ 919.553552][ T5671] usb 6-1: can't set config #0, error -71 [ 919.562069][ T5671] usb 6-1: USB disconnect, device number 4 [ 919.622535][T13723] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.3.2235: path /468/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 919.733432][T13520] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 921.314756][ T5579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.572255][T13520] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.583430][T13520] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 921.594117][T13520] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.606386][T13520] usb 7-1: config 0 descriptor?? [ 922.921645][T13520] usbhid 7-1:0.0: can't add hid device: -71 [ 922.928029][T13520] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 922.955289][T13520] usb 7-1: USB disconnect, device number 4 [ 923.119288][T13742] loop3: detected capacity change from 0 to 512 [ 923.861825][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2242'. [ 924.176658][T13748] tipc: Enabled bearer , priority 0 [ 925.327508][T13748] syzkaller0: entered promiscuous mode [ 925.333116][T13748] syzkaller0: entered allmulticast mode [ 925.340886][T13748] tipc: Resetting bearer [ 925.363168][T13747] tipc: Resetting bearer [ 926.237612][T13747] tipc: Disabling bearer [ 926.818078][T13763] loop6: detected capacity change from 0 to 512 [ 929.992360][T13603] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.999768][T13603] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.007241][T13603] bridge_slave_0: entered allmulticast mode [ 930.015351][T13603] bridge_slave_0: entered promiscuous mode [ 930.026782][T13603] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.034084][T13603] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.041488][T13603] bridge_slave_1: entered allmulticast mode [ 930.067030][T13603] bridge_slave_1: entered promiscuous mode [ 930.317455][T13603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.334423][T13603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.465129][T13603] team0: Port device team_slave_0 added [ 930.477753][T13603] team0: Port device team_slave_1 added [ 931.110894][T13603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.117960][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.507742][T13603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.522299][T13603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.529367][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.560800][T13603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.576669][ T5226] 8021q: adding VLAN 0 to HW filter on device eth4 [ 932.290405][T13786] loop5: detected capacity change from 0 to 8192 [ 932.476872][T13603] hsr_slave_0: entered promiscuous mode [ 932.485251][T13603] hsr_slave_1: entered promiscuous mode [ 932.492769][T13603] debugfs: 'hsr0' already exists in 'hsr' [ 932.747814][T13603] Cannot create hsr debugfs directory [ 932.882373][T13794] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 932.890100][T13794] FAT-fs (loop5): Filesystem has been set read-only [ 932.897852][T13786] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 933.034079][T13786] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 933.045663][T13786] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 933.208695][T13795] tipc: Enabling of bearer rejected, failed to enable media [ 934.406673][ T9575] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 936.297303][T13818] loop0: detected capacity change from 0 to 256 [ 936.350385][T13818] exfat: Deprecated parameter 'utf8' [ 936.371551][T13818] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 936.523098][T13603] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 936.826126][T13603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 937.189971][T13603] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 937.418401][T13603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 937.568838][T13603] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 937.847638][T13603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 937.954281][T13603] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 938.236597][T13603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 938.908789][T13841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.508987][T13603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.673122][T13845] loop5: detected capacity change from 0 to 256 [ 939.837222][T13603] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.987229][ T9830] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.994787][ T9830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.127057][ T9830] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.134374][ T9830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.463302][T13845] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 941.327520][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.334581][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.979315][T13859] loop6: detected capacity change from 0 to 256 [ 942.878889][T13859] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 943.250166][T13859] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 943.273394][T13859] exFAT-fs (loop6): failed to load alloc-bitmap [ 943.279749][T13859] exFAT-fs (loop6): failed to recognize exfat type [ 943.563999][T13873] loop5: detected capacity change from 0 to 512 [ 943.719741][T13873] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 943.935283][T13873] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 943.951729][T13873] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2273: bg 0: block 248: padding at end of block bitmap is not set [ 944.402794][T13873] loop5: lost filesystem error report for type 5 error -117 [ 944.406835][T13873] Quota error (device loop5): write_blk: dquota write failed [ 944.427869][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 944.427964][ C1] EXT4-fs (loop5): last error at time 1778744863: ext4_validate_block_bitmap:441 [ 944.647282][T13873] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 944.657393][T13873] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2273: Failed to acquire dquot type 1 [ 944.668882][T13873] loop5: lost filesystem error report for type 5 error -28 [ 944.701057][T13873] EXT4-fs (loop5): 1 truncate cleaned up [ 944.717714][T13873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 944.956306][ T5671] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 945.193092][ T9575] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 946.093072][T13888] loop3: detected capacity change from 0 to 256 [ 946.103236][T13888] exfat: Deprecated parameter 'utf8' [ 946.108925][T13888] exfat: Deprecated parameter 'namecase' [ 946.321582][T13888] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x01dc4376, utbl_chksum : 0xe619d30d) [ 947.112752][T13897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 947.234512][ T5671] usb 7-1: unable to read config index 0 descriptor/all [ 947.241643][ T5671] usb 7-1: can't read configurations, error -71 [ 949.124532][T13911] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2283'. [ 949.583116][T13911] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.591072][T13911] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.714012][T13914] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2283'. [ 949.906709][T13914] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.914165][T13914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.922323][T13914] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.929756][T13914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.152220][T13918] loop6: detected capacity change from 0 to 256 [ 951.567496][T13927] loop0: detected capacity change from 0 to 256 [ 953.073554][T13927] FAT-fs (loop0): Directory bread(block 64) failed [ 953.161433][T13927] FAT-fs (loop0): Directory bread(block 65) failed [ 953.295008][T13927] FAT-fs (loop0): Directory bread(block 66) failed [ 953.301653][T13927] FAT-fs (loop0): Directory bread(block 67) failed [ 953.308361][T13927] FAT-fs (loop0): Directory bread(block 68) failed [ 953.315005][T13927] FAT-fs (loop0): Directory bread(block 69) failed [ 953.321760][T13927] FAT-fs (loop0): Directory bread(block 70) failed [ 953.328359][T13927] FAT-fs (loop0): Directory bread(block 71) failed [ 953.335054][T13927] FAT-fs (loop0): Directory bread(block 72) failed [ 953.341665][T13927] FAT-fs (loop0): Directory bread(block 73) failed [ 954.122029][ T6044] kworker/u8:12: attempt to access beyond end of device [ 954.122029][ T6044] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 955.136577][T13953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.485588][T13959] loop5: detected capacity change from 0 to 512 [ 955.607500][T13959] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2296: bg 0: block 5: invalid block bitmap [ 955.619942][T13959] loop5: lost filesystem error report for type 5 error -117 [ 955.621839][T13959] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 955.638006][T13959] loop5: lost filesystem error report for type 5 error -117 [ 955.640902][T13959] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2296: invalid indirect mapped block 3 (level 2) [ 955.662328][T13959] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 955.663744][T13959] EXT4-fs (loop5): 1 orphan inode deleted [ 955.737285][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 955.743810][ C0] EXT4-fs (loop5): initial error at time 1778744874: ext4_validate_block_bitmap:432 [ 955.753331][ C0] EXT4-fs (loop5): last error at time 1778744874: ext4_free_branches:1023: inode 11 [ 955.812631][T13959] EXT4-fs (loop5): 1 truncate cleaned up [ 956.657852][T13959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.675992][T13956] tipc: Enabled bearer , priority 0 [ 956.726539][T13956] syzkaller0: entered promiscuous mode [ 956.732247][T13956] syzkaller0: entered allmulticast mode [ 956.999976][T13970] loop0: detected capacity change from 0 to 256 [ 957.283545][T13970] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 957.301856][ T29] audit: type=1800 audit(1778744875.997:7): pid=13970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2298" name="file1" dev="loop0" ino=1048644 res=0 errno=0 [ 957.890493][ T29] audit: type=1800 audit(1778744875.997:8): pid=13970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2298" name="file1" dev="loop0" ino=1048644 res=0 errno=0 [ 957.981468][T13956] tipc: Resetting bearer [ 958.080978][ T9575] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.309934][T13603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.430816][T13955] tipc: Resetting bearer [ 958.490854][T13955] tipc: Disabling bearer [ 958.603875][T13974] FAT-fs (loop0): error, invalid FAT chain (i_pos 196, last_block 8200) [ 958.612363][T13974] FAT-fs (loop0): Filesystem has been set read-only [ 959.402693][T13984] loop5: detected capacity change from 0 to 512 [ 960.700872][T12734] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 960.716737][T12734] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 960.735517][T12734] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 960.989141][T13993] loop6: detected capacity change from 0 to 512 [ 960.997451][T13993] EXT4-fs: Ignoring removed orlov option [ 961.318894][T12734] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 961.472504][T12734] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 961.663591][T13993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.676300][T13993] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.585785][T12732] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 963.137039][T12732] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 963.636185][ T4871] Bluetooth: hci6: command tx timeout [ 964.772086][T14019] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.788277][T14019] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.992374][T14019] macvtap0: left promiscuous mode [ 965.139746][T14019] bridge2: left promiscuous mode [ 965.192621][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 965.731494][ T4871] Bluetooth: hci6: command tx timeout [ 965.779259][T12732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.690369][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2310'. [ 966.698383][ T98] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.811673][ T4871] Bluetooth: hci6: command tx timeout [ 970.062499][ T4871] Bluetooth: hci6: command tx timeout [ 970.449824][T12734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 970.537730][T12734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 970.547590][T12734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 970.563657][T12734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 970.575099][T12734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 970.591225][ T98] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.700130][T14061] loop3: detected capacity change from 0 to 512 [ 972.797225][T14061] EXT4-fs: Ignoring removed bh option [ 972.802822][T14061] EXT4-fs: Ignoring removed mblk_io_submit option [ 972.851935][T14061] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 972.924261][ T4871] Bluetooth: hci1: command tx timeout [ 972.949028][T14061] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 973.272834][T14061] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 973.281349][T14061] EXT4-fs (loop3): orphan cleanup on readonly fs [ 973.290506][T14061] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 973.300619][T14061] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 973.310628][T14061] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2319: Failed to acquire dquot type 1 [ 973.321932][T14061] loop3: lost filesystem error report for type 5 error -5 [ 973.325826][ T98] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.398907][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 973.398972][ C0] EXT4-fs (loop3): last error at time 1778744892: ext4_acquire_dquot:7034 [ 973.491763][T14061] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2319: Invalid block bitmap block 0 in block_group 0 [ 973.760873][T14061] loop3: lost filesystem error report for type 5 error -117 [ 973.815732][T14061] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2319: Invalid block bitmap block 0 in block_group 0 [ 973.941157][T14061] loop3: lost filesystem error report for type 5 error -117 [ 973.959028][T14061] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2319: Invalid block bitmap block 0 in block_group 0 [ 973.979904][T14061] loop3: lost filesystem error report for type 5 error -117 [ 973.986774][T14061] Quota error (device loop3): write_blk: dquota write failed [ 974.001920][T14061] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 974.011905][T14061] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2319: Failed to acquire dquot type 1 [ 974.023227][T14061] loop3: lost filesystem error report for type 5 error -28 [ 974.081962][T14061] Quota error (device loop3): write_blk: dquota write failed [ 974.096977][T14061] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 974.106931][T14061] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2319: Failed to acquire dquot type 1 [ 974.118225][T14061] loop3: lost filesystem error report for type 5 error -28 [ 974.148255][T14061] EXT4-fs (loop3): 1 orphan inode deleted [ 974.173835][T14061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 974.298794][T14061] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 974.766112][ T5579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.972877][ T4871] Bluetooth: hci1: command tx timeout [ 975.255446][T14077] sctp: [Deprecated]: syz.0.2322 (pid 14077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 975.255446][T14077] Use struct sctp_sack_info instead [ 975.375916][ T98] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.975313][T14074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.845094][T14082] hsr0: entered promiscuous mode [ 976.916486][T14084] loop3: detected capacity change from 0 to 1024 [ 977.045771][ T4871] Bluetooth: hci1: command tx timeout [ 977.731766][T14082] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input41 [ 977.744361][ T98] bridge_slave_1: left allmulticast mode [ 977.750116][ T98] bridge_slave_1: left promiscuous mode [ 977.756286][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.778922][ T98] bridge_slave_0: left allmulticast mode [ 977.874269][ T98] bridge_slave_0: left promiscuous mode [ 977.880474][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.421539][T14084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 978.485866][T14084] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 978.775498][T14084] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.2321: lblock 3 mapped to illegal pblock 3 (length 3) [ 978.947017][T14084] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 978.988521][T14084] EXT4-fs (loop3): This should not happen!! Data will be lost [ 978.988521][T14084] [ 979.134753][ T4871] Bluetooth: hci1: command tx timeout [ 979.165576][T14100] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm syz.3.2321: lblock 8 mapped to illegal pblock 8 (length 8) [ 979.417018][T14100] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 979.429410][T14100] EXT4-fs (loop3): This should not happen!! Data will be lost [ 979.429410][T14100] [ 979.459310][T14101] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.2321: lblock 0 mapped to illegal pblock 0 (length 3) [ 979.904093][T14101] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 979.916589][T14101] EXT4-fs (loop3): This should not happen!! Data will be lost [ 979.916589][T14101] [ 980.472523][ T6055] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 7: comm kworker/u8:16: lblock 7 mapped to illegal pblock 7 (length 1) [ 980.493755][ T6055] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 980.506324][ T6055] EXT4-fs (loop3): This should not happen!! Data will be lost [ 980.506324][ T6055] [ 980.530407][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.650296][ T5579] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 980.666677][ T5579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 980.809682][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.261886][ T98] bond0 (unregistering): Released all slaves [ 981.890089][T14081] hsr0: left promiscuous mode [ 982.557692][ T98] tipc: Left network mode [ 983.098496][T13985] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.106002][T13985] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.186833][T13985] bridge_slave_0: entered allmulticast mode [ 983.257033][T13985] bridge_slave_0: entered promiscuous mode [ 983.429581][T13985] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.684174][T14124] sctp: [Deprecated]: syz.0.2332 (pid 14124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 983.684174][T14124] Use struct sctp_sack_info instead [ 983.734478][T13985] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.950463][T13985] bridge_slave_1: entered allmulticast mode [ 983.958782][T13985] bridge_slave_1: entered promiscuous mode [ 984.026686][T13985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.238350][T13985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.390602][T14122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 984.925439][T14138] loop5: detected capacity change from 0 to 4096 [ 984.938973][T14138] EXT4-fs: inline encryption not supported [ 985.023247][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2328'. [ 985.398352][T14138] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 985.407159][T14138] EXT4-fs (loop5): Test dummy encryption mode enabled [ 985.502950][T14138] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c1a8, mo2=0003] [ 985.522042][T14138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.604916][T13985] team0: Port device team_slave_0 added [ 985.621518][T13985] team0: Port device team_slave_1 added [ 986.790310][ T29] audit: type=1800 audit(1778744905.497:9): pid=14147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2331" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 987.356922][T13985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.371932][T13985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.403538][T13985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.605825][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2336'. [ 987.695517][ T9575] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.714815][ T98] hsr_slave_0: left promiscuous mode [ 987.903182][T14153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2336'. [ 988.014305][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2336'. [ 988.151489][ T98] hsr_slave_1: left promiscuous mode [ 988.164808][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.183200][ T98] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.200663][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 988.222580][ T98] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.513347][ T98] veth1_macvtap: left promiscuous mode [ 988.544052][ T98] veth0_macvtap: left promiscuous mode [ 988.826525][ T98] veth1_vlan: left promiscuous mode [ 988.926402][ T98] veth0_vlan: left promiscuous mode [ 989.612922][T14164] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input42 [ 991.740448][ T98] team0 (unregistering): Port device team_slave_1 removed [ 992.011626][ T98] team0 (unregistering): Port device team_slave_0 removed [ 993.261051][T13985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.268726][T13985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.295491][T13985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.311632][T14159] hsr0: entered promiscuous mode [ 993.319583][T14159] hsr0: left promiscuous mode [ 993.615679][T13985] hsr_slave_0: entered promiscuous mode [ 993.623970][T13985] hsr_slave_1: entered promiscuous mode [ 993.631419][T13985] debugfs: 'hsr0' already exists in 'hsr' [ 993.637214][T13985] Cannot create hsr debugfs directory [ 994.216932][T14191] loop5: detected capacity change from 0 to 4096 [ 994.225579][T14191] EXT4-fs: Ignoring removed mblk_io_submit option [ 994.232248][T14191] EXT4-fs: Ignoring removed orlov option [ 994.342325][T14191] EXT4-fs (loop5): Test dummy encryption mode enabled [ 994.478574][T14191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.515722][T14193] macvtap0: entered promiscuous mode [ 994.526009][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'. [ 994.541542][T14191] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))" [ 995.865290][ T9575] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.632222][T14205] loop0: detected capacity change from 0 to 1024 [ 997.830812][T14205] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 997.869132][T14205] System zones: 0-1, 3-8 [ 997.889561][T14205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 998.031131][T14205] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 998.249240][T14205] EXT4-fs warning (device loop0): ext4_empty_dir:3104: inode #12: comm syz.0.2348: directory missing '..' [ 998.560159][T14046] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.570694][T14046] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.803397][T14046] bridge_slave_0: entered allmulticast mode [ 998.813404][T14046] bridge_slave_0: entered promiscuous mode [ 998.852247][T14211] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 998.902854][T14046] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.022568][T14046] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.073003][T14046] bridge_slave_1: entered allmulticast mode [ 999.175844][T14046] bridge_slave_1: entered promiscuous mode [ 999.345505][ T5587] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1001.467667][ T98] bridge_slave_1: left allmulticast mode [ 1001.473861][ T98] bridge_slave_1: left promiscuous mode [ 1001.614412][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.765970][ T98] bridge_slave_0: left allmulticast mode [ 1001.771789][ T98] bridge_slave_0: left promiscuous mode [ 1001.778150][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.531797][T14231] loop3: detected capacity change from 0 to 1024 [ 1002.540601][T14231] EXT4-fs: Ignoring removed bh option [ 1002.546127][T14231] EXT4-fs: inline encryption not supported [ 1002.629768][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.644122][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.659586][ T98] bond0 (unregistering): Released all slaves [ 1002.759970][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.766836][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.101260][T14231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.417682][T14046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.904837][T14046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.980785][T14246] loop0: detected capacity change from 0 to 256 [ 1003.990016][T14246] exfat: Deprecated parameter 'namecase' [ 1003.995876][T14246] exfat: Deprecated parameter 'namecase' [ 1004.063119][T14246] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1004.358179][T14233] hsr0: entered promiscuous mode [ 1004.511827][ T5579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.610132][T13985] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1004.635263][T13985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1004.893967][T14232] hsr0: left promiscuous mode [ 1005.774507][ T5671] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1005.930794][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2356'. [ 1005.973913][T13985] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1005.991466][T14263] sctp: [Deprecated]: syz.5.2359 (pid 14263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1005.991466][T14263] Use struct sctp_sack_info instead [ 1006.076754][T14263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.101973][T13985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1006.403624][T13985] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1006.426747][T13985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1006.548405][T14046] team0: Port device team_slave_0 added [ 1006.568425][T13985] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1006.746442][T13985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1006.992732][T14046] team0: Port device team_slave_1 added [ 1007.041977][T14046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.049021][T14046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.075052][T14046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.470440][T14046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.477562][T14046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.503626][T14046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.604085][ T5671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.615126][ T5671] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1007.624268][ T5671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.638027][ T5671] usb 1-1: config 0 descriptor?? [ 1008.150107][ T98] hsr_slave_0: left promiscuous mode [ 1008.190540][ T98] hsr_slave_1: left promiscuous mode [ 1008.429648][ T98] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.442734][ T98] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.060420][ T5671] usbhid 1-1:0.0: can't add hid device: -71 [ 1009.066749][ T5671] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1009.093073][ T5671] usb 1-1: USB disconnect, device number 4 [ 1009.454374][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1010.538965][ T98] team0 (unregistering): Port device team_slave_1 removed [ 1010.560350][ T98] team0 (unregistering): Port device team_slave_0 removed [ 1011.264768][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1011.275875][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.285728][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1011.292478][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1011.301607][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.313168][ T9] usb 4-1: config 0 descriptor?? [ 1012.547502][T14046] hsr_slave_0: entered promiscuous mode [ 1012.555998][T14046] hsr_slave_1: entered promiscuous mode [ 1012.563595][T14046] debugfs: 'hsr0' already exists in 'hsr' [ 1012.569402][T14046] Cannot create hsr debugfs directory [ 1012.932441][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1012.938784][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1012.950247][ T9] usb 4-1: USB disconnect, device number 3 [ 1013.165282][T14288] loop0: detected capacity change from 0 to 256 [ 1013.950053][T14288] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d) [ 1015.282519][T14302] hsr0: entered promiscuous mode [ 1015.614496][T14304] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input43 [ 1017.216640][T14301] hsr0: left promiscuous mode [ 1018.906231][T13985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.936899][T13985] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.436594][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.444247][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.137024][ T6085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.561485][T14046] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1020.932964][T14046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1021.023690][T14046] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1021.245783][T14046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1021.255781][T14046] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1021.432448][T14046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1021.855205][T14351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2378'. [ 1021.868435][T14046] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1021.978368][T14352] netlink: 'syz.3.2378': attribute type 10 has an invalid length. [ 1022.148639][T14046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1022.213160][ T6085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.277843][T14365] hsr0: entered promiscuous mode [ 1023.444765][ T6085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.678521][T12734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1023.908390][T14376] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1023.921683][T14376] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1023.935472][T14376] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1023.949972][T14376] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1024.009344][T14370] syzkaller0: entered promiscuous mode [ 1024.015020][T14370] syzkaller0: entered allmulticast mode [ 1025.287835][T14391] loop3: detected capacity change from 0 to 512 [ 1025.296474][ T6085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.476668][T14391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.489598][T14391] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.716944][T14364] hsr0: left promiscuous mode [ 1025.788897][ T5226] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1025.995748][T14376] Bluetooth: hci0: command tx timeout [ 1026.412613][ T5579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.694727][T14046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.281062][T14046] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.868542][ T6085] bridge_slave_1: left allmulticast mode [ 1027.900110][ T6085] bridge_slave_1: left promiscuous mode [ 1027.929330][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.099150][T14376] Bluetooth: hci0: command tx timeout [ 1028.305945][ T6085] bridge_slave_0: left allmulticast mode [ 1028.311864][ T6085] bridge_slave_0: left promiscuous mode [ 1028.334581][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.756249][T14413] binder: BINDER_SET_CONTEXT_MGR already set [ 1028.762476][T14413] binder: 14410:14413 ioctl 4018620d 80004a80 returned -16 [ 1030.248851][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2390'. [ 1030.259726][T14422] netlink: 'syz.5.2390': attribute type 10 has an invalid length. [ 1030.268221][T14376] Bluetooth: hci0: command tx timeout [ 1031.632818][ T6085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.695957][ T6085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.873664][ T4871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1031.968784][ T4871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1031.977841][ T4871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1031.990704][ T4871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1032.001686][ T4871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1032.210946][T14455] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input44 [ 1032.229357][ T6085] bond0 (unregistering): Released all slaves [ 1032.347695][ T4871] Bluetooth: hci0: command tx timeout [ 1032.353900][ T6085] bond1 (unregistering): Released all slaves [ 1032.380074][ T6085] bond2 (unregistering): Released all slaves [ 1032.766679][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.774153][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.621029][T14439] hsr0: entered promiscuous mode [ 1033.893261][T14443] hsr0: left promiscuous mode [ 1034.165872][ T6085] tipc: Left network mode [ 1034.307982][ T4871] Bluetooth: hci3: command tx timeout [ 1034.362316][ T6085] IPVS: stopping master sync thread 11389 ... [ 1035.449328][ T5226] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1036.207014][ T40] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1036.435735][ T4871] Bluetooth: hci3: command tx timeout [ 1036.458497][ T40] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1036.508207][ T40] usb 6-1: not running at top speed; connect to a high speed hub [ 1036.567690][ T40] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.667012][ T40] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1036.742137][ T40] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1036.841327][ T40] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1037.043108][ T40] usb 6-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 1037.075376][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.125530][ T40] usb 6-1: Product: syz [ 1037.165921][ T40] usb 6-1: Manufacturer: syz [ 1037.183052][ T40] usb 6-1: SerialNumber: syz [ 1038.558674][ T4871] Bluetooth: hci3: command tx timeout [ 1039.033634][ T40] usb 6-1: unit 4 not found! [ 1039.401958][T14501] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2401'. [ 1039.977386][ T6085] hsr_slave_0: left promiscuous mode [ 1040.010339][T14505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2403'. [ 1040.036357][ T6085] hsr_slave_1: left promiscuous mode [ 1040.080039][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.116932][T14505] netlink: 'syz.0.2403': attribute type 10 has an invalid length. [ 1040.122115][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.246047][ T40] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1040.265226][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.289649][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.350901][ T40] usb 6-1: USB disconnect, device number 5 [ 1040.589399][ T7220] udevd[7220]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1040.764344][ T6085] veth1_macvtap: left promiscuous mode [ 1040.782911][ T6085] veth0_macvtap: left promiscuous mode [ 1040.807100][ T4871] Bluetooth: hci3: command tx timeout [ 1040.826753][ T6085] veth1_vlan: left promiscuous mode [ 1041.905054][ T6085] team0 (unregistering): Port device macvlan0 removed [ 1042.287797][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 1042.425761][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 1042.942345][T13520] bridge0: entered promiscuous mode [ 1043.396999][T14510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1043.691854][ T5226] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1047.489697][T14549] loop0: detected capacity change from 0 to 128 [ 1048.310647][T14559] loop3: detected capacity change from 0 to 512 [ 1048.799693][T14559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.815993][T14371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.850944][T14371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.871002][T14371] bridge_slave_0: entered allmulticast mode [ 1048.907089][T14371] bridge_slave_0: entered promiscuous mode [ 1048.940598][ T29] audit: type=1800 audit(1778744967.667:10): pid=14559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2409" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1049.032956][T14371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.051253][T14371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.083096][T14371] bridge_slave_1: entered allmulticast mode [ 1049.104607][T14371] bridge_slave_1: entered promiscuous mode [ 1049.427572][ T5579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.158061][T14572] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2413'. [ 1050.250478][ T5226] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1050.268686][T14371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.545633][T14371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.704410][T14575] loop0: detected capacity change from 0 to 512 [ 1051.091487][T14575] EXT4-fs error (device loop0): ext4_quota_enable:7225: inode #4: comm syz.0.2414: iget: bad i_size value: -72057594037921792 [ 1051.236029][T14575] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 1051.266141][T14371] team0: Port device team_slave_0 added [ 1051.291709][T14371] team0: Port device team_slave_1 added [ 1051.297784][T14575] EXT4-fs error (device loop0): ext4_quota_enable:7228: comm syz.0.2414: Bad quota inode: 4, type: 1 [ 1051.298300][T14575] loop0: lost filesystem error report for type 5 error -117 [ 1051.312815][T14575] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1051.314847][T14575] EXT4-fs (loop0): mount failed [ 1051.590369][T14575] loop0: detected capacity change from 0 to 512 [ 1051.802259][T14371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.809397][T14371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.835539][T14371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.962251][T14575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.706849][T14371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.714024][T14371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.862209][T14371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.647136][ T5587] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.975103][T14371] hsr_slave_0: entered promiscuous mode [ 1053.984695][T14371] hsr_slave_1: entered promiscuous mode [ 1055.396585][T14609] loop0: detected capacity change from 0 to 256 [ 1055.422126][T14444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.436204][T14444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.465191][T14444] bridge_slave_0: entered allmulticast mode [ 1055.507756][T14444] bridge_slave_0: entered promiscuous mode [ 1055.783075][T14609] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 1056.175311][T14444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.319481][T14444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.327191][T14444] bridge_slave_1: entered allmulticast mode [ 1056.336746][T14444] bridge_slave_1: entered promiscuous mode [ 1056.576041][T14616] loop3: detected capacity change from 0 to 256 [ 1056.747174][T14444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.121843][T14444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.337315][T14444] team0: Port device team_slave_0 added [ 1057.474249][T14444] team0: Port device team_slave_1 added [ 1057.485949][ T5226] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1057.843257][T14444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.850380][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.028168][T14444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.044803][T14444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.196006][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.222144][T14444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.552857][T14444] hsr_slave_0: entered promiscuous mode [ 1058.563319][T14444] hsr_slave_1: entered promiscuous mode [ 1058.571876][T14444] debugfs: 'hsr0' already exists in 'hsr' [ 1058.577779][T14444] Cannot create hsr debugfs directory [ 1059.328571][T14634] loop5: detected capacity change from 0 to 1024 [ 1059.435644][T14634] EXT4-fs: Ignoring removed orlov option [ 1059.498014][T14634] EXT4-fs: Ignoring removed mblk_io_submit option [ 1059.751120][ T6085] bridge_slave_1: left allmulticast mode [ 1059.768090][T14634] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1059.768090][T14634] [ 1059.780254][ T6085] bridge_slave_1: left promiscuous mode [ 1059.824877][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.891767][ T6085] bridge_slave_0: left allmulticast mode [ 1059.930083][ T6085] bridge_slave_0: left promiscuous mode [ 1059.960476][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.070551][ T6085] bridge_slave_1: left allmulticast mode [ 1060.108641][ T6085] bridge_slave_1: left promiscuous mode [ 1060.144352][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.244737][ T6085] bridge_slave_0: left allmulticast mode [ 1060.284496][ T6085] bridge_slave_0: left promiscuous mode [ 1060.295440][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'. [ 1060.332262][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.473416][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2428'. [ 1062.248591][ T6085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.295057][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2432'. [ 1062.413931][ T6085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.475747][ T6085] bond0 (unregistering): Released all slaves [ 1063.603761][ T6085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.791265][ T6085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.959724][ T6085] bond0 (unregistering): Released all slaves [ 1064.332517][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.448780][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.977030][T14651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.012906][T14651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.556727][ T5226] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1066.845576][ T6055] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.868602][ T6055] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.909421][ T6055] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.940873][ T6055] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.581791][ T6085] hsr_slave_0: left promiscuous mode [ 1068.590738][ T6085] hsr_slave_1: left promiscuous mode [ 1068.598376][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.720429][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.788853][ T6085] hsr_slave_0: left promiscuous mode [ 1068.797066][ T6085] hsr_slave_1: left promiscuous mode [ 1068.910073][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.944190][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.722388][ T5681] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1070.789184][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 1070.905686][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 1072.226891][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 1072.328633][T14704] loop5: detected capacity change from 0 to 128 [ 1072.339245][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 1072.369872][T14704] FAT-fs (loop5): bogus sectors per cluster 7 [ 1072.391654][T14704] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1072.403136][T14704] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1072.936903][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2443'. [ 1073.104811][ T5681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.115926][ T5681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.035482][ T5681] usb 1-1: string descriptor 0 read error: -71 [ 1074.042010][ T5681] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1074.051299][ T5681] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1074.074296][ T5681] usb 1-1: config 0 descriptor?? [ 1074.198873][ T5681] usb 1-1: can't set config #0, error -71 [ 1074.208455][ T5681] usb 1-1: USB disconnect, device number 5 [ 1074.384530][T14371] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1074.432792][T14371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1074.468076][T14371] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1074.596472][T14371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1074.730668][T14371] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1074.751821][T14371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1074.761806][T14371] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1074.784348][T14371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1075.474393][T10336] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1075.707866][T10336] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1075.731001][T10336] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1075.810471][T10336] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1075.855659][T14371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.011318][T10336] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1076.042137][T10336] usb 1-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1076.062871][T14371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.071591][T10336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.136498][T10336] usb 1-1: config 0 descriptor?? [ 1076.157232][T14719] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1076.495924][ T9830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.503486][ T9830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.945308][T10336] thrustmaster 0003:044F:B323.0002: ignoring exceeding usage max [ 1077.020741][ T9830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.086605][T10336] thrustmaster 0003:044F:B323.0002: hidraw0: USB HID v0.01 Device [HID 044f:b323] on usb-dummy_hcd.0-1/input0 [ 1077.086810][T10336] thrustmaster 0003:044F:B323.0002: no inputs found [ 1077.140402][ T9830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.353572][ T5671] usb 1-1: USB disconnect, device number 6 [ 1078.138478][T14731] fido_id[14731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1079.050438][ T5226] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1079.555952][T14753] hsr0: entered promiscuous mode [ 1079.729495][T14753] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input45 [ 1080.588338][T14764] loop3: detected capacity change from 0 to 512 [ 1080.875290][T14764] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2450: bg 0: block 5: invalid block bitmap [ 1080.999262][T14764] loop3: lost filesystem error report for type 5 error -117 [ 1081.035923][T14764] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1081.135165][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1081.135253][ C0] EXT4-fs (loop3): initial error at time 1778744999: ext4_validate_block_bitmap:432 [ 1081.135364][ C0] EXT4-fs (loop3): last error at time 1778744999: ext4_validate_block_bitmap:432 [ 1081.364169][T14764] loop3: lost filesystem error report for type 5 error -117 [ 1081.385764][T14764] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2450: invalid indirect mapped block 3 (level 2) [ 1081.662779][T14764] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1081.722058][T14752] hsr0: left promiscuous mode [ 1081.744763][T14764] EXT4-fs (loop3): 2 truncates cleaned up [ 1081.755758][T14764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.959263][T14773] loop5: detected capacity change from 0 to 512 [ 1082.054734][T14773] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1082.124018][T14444] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1082.258242][T14773] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1082.310760][T14773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 1082.410962][T14773] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 1082.420614][T14773] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1082.420986][T14444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1082.433836][T14773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1082.458086][T14773] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2453: dx entry: limit 65535 != root limit 120 [ 1082.470370][T14773] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2453: Corrupt directory, running e2fsck is recommended [ 1082.486300][T14444] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1082.851855][T14444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1082.862036][T14444] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1082.897393][ T5579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.985715][ T9575] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.248510][T14376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1083.248656][T14444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1083.347076][T14376] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1083.434886][T14444] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1083.509536][T14376] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1083.522964][T14376] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1083.536278][T14376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1083.628084][T14444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1083.816095][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2454'. [ 1084.684755][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2457'. [ 1085.719053][ T4871] Bluetooth: hci1: command tx timeout [ 1086.665394][T14444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.998393][T14444] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.381123][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.388731][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.464088][T14817] hsr0: entered promiscuous mode [ 1087.771298][ T4871] Bluetooth: hci1: command tx timeout [ 1087.924365][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.931888][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.033462][T14817] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input46 [ 1088.461865][ T5226] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1089.836427][ T4871] Bluetooth: hci1: command tx timeout [ 1089.896131][T14816] hsr0: left promiscuous mode [ 1091.919534][ T4871] Bluetooth: hci1: command tx timeout [ 1093.123238][ T806] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1093.165284][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2468'. [ 1093.417250][ T806] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1093.434350][ T806] usb 4-1: config 0 has no interface number 0 [ 1093.503351][ T806] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.599825][ T806] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.674326][ T806] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1093.700551][T14376] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1093.766254][ T806] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1093.776286][T14376] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1093.847122][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.894031][T14376] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1093.950477][ T806] usb 4-1: config 0 descriptor?? [ 1094.053754][T14376] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1094.068159][T14376] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1094.968033][ T806] input: HID 28bd:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0003/input/input47 [ 1095.129262][ T806] uclogic 0003:28BD:0042.0003: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 1095.825216][ T806] usb 4-1: USB disconnect, device number 4 [ 1095.870976][T14880] hub 8-0:1.0: USB hub found [ 1096.123892][T14880] hub 8-0:1.0: 1 port detected [ 1096.152758][T14376] Bluetooth: hci0: command tx timeout [ 1097.711433][T14892] hsr0: entered promiscuous mode [ 1098.028827][T14884] fido_id[14884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1098.202823][T14892] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input48 [ 1098.238675][T14376] Bluetooth: hci0: command tx timeout [ 1099.359677][T14777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.367209][T14777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.374835][T14777] bridge_slave_0: entered allmulticast mode [ 1099.487312][T14777] bridge_slave_0: entered promiscuous mode [ 1099.510757][T14777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.518328][T14777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.525961][T14777] bridge_slave_1: entered allmulticast mode [ 1099.535141][T14777] bridge_slave_1: entered promiscuous mode [ 1099.556942][T14891] hsr0: left promiscuous mode [ 1099.727493][T14777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.749114][T14777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.262576][T14912] loop3: detected capacity change from 0 to 128 [ 1100.272936][T14912] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1100.303019][T14912] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1100.303626][T14376] Bluetooth: hci0: command tx timeout [ 1100.613761][T14777] team0: Port device team_slave_0 added [ 1100.662398][T14777] team0: Port device team_slave_1 added [ 1100.846398][T14777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.853619][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.108228][T14777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.322927][T14777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.402966][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.453948][T14777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.407606][T14777] hsr_slave_0: entered promiscuous mode [ 1102.422941][T14376] Bluetooth: hci0: command tx timeout [ 1102.471483][T14777] hsr_slave_1: entered promiscuous mode [ 1102.508123][T14777] debugfs: 'hsr0' already exists in 'hsr' [ 1102.559179][T14777] Cannot create hsr debugfs directory [ 1103.009951][T14920] tipc: Enabled bearer , priority 0 [ 1103.696091][T14925] syzkaller0: entered promiscuous mode [ 1103.725870][T14925] syzkaller0: entered allmulticast mode [ 1103.775896][T14925] tipc: Resetting bearer [ 1104.540792][T13893] tipc: Resetting bearer [ 1104.560814][T14919] tipc: Resetting bearer [ 1104.939631][T14919] tipc: Disabling bearer [ 1106.838158][T14951] loop0: detected capacity change from 0 to 128 [ 1108.053792][T14959] hsr0: entered promiscuous mode [ 1108.281997][T14973] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input49 [ 1110.337619][T14972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.347737][T14972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.858927][T15012] loop0: detected capacity change from 0 to 512 [ 1110.870545][T15012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1111.171096][T15012] EXT4-fs (loop0): 1 truncate cleaned up [ 1111.180016][T15012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1111.401312][T14972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.423687][T14972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.477108][ T5587] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.540197][T13893] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.558303][T13893] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.839230][T13893] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.972346][T13893] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.986430][ T6055] bridge_slave_1: left allmulticast mode [ 1113.993261][ T6055] bridge_slave_1: left promiscuous mode [ 1114.018993][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.122859][ T6055] bridge_slave_0: left allmulticast mode [ 1114.128725][ T6055] bridge_slave_0: left promiscuous mode [ 1114.135249][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.041421][T15035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2491'. [ 1115.909953][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.937808][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.952065][ T6055] bond0 (unregistering): Released all slaves [ 1115.964938][T14958] hsr0: left promiscuous mode [ 1116.149709][T15043] tipc: Enabled bearer , priority 0 [ 1116.478934][T15045] syzkaller0: entered promiscuous mode [ 1116.484627][T15045] syzkaller0: entered allmulticast mode [ 1116.492373][T15045] tipc: Resetting bearer [ 1116.656059][T15039] tipc: Resetting bearer [ 1117.270642][T15039] tipc: Disabling bearer [ 1118.313139][T15073] netlink: 'syz.5.2496': attribute type 4 has an invalid length. [ 1119.014217][T14858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.075539][T14858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.099385][T14858] bridge_slave_0: entered allmulticast mode [ 1119.172629][T14858] bridge_slave_0: entered promiscuous mode [ 1119.628519][ T6055] hsr_slave_0: left promiscuous mode [ 1119.715271][ T6055] hsr_slave_1: left promiscuous mode [ 1119.731214][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.748598][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.756678][ T6055] team0 (unregistering): Port device team_slave_1 removed [ 1121.884252][ T6055] team0 (unregistering): Port device team_slave_0 removed [ 1122.149713][T14858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.159609][T14858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.167202][T14858] bridge_slave_1: entered allmulticast mode [ 1122.479168][T14858] bridge_slave_1: entered promiscuous mode [ 1123.455905][T15116] syzkaller0: entered promiscuous mode [ 1123.470318][T15116] syzkaller0: entered allmulticast mode [ 1123.816408][T14858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.957339][T14858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.986332][ T5226] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1124.548758][T14858] team0: Port device team_slave_0 added [ 1124.565204][T14858] team0: Port device team_slave_1 added [ 1124.852836][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 1124.936786][T14858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.943891][T14858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.313645][T14858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.502794][T14858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.509925][T14858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.536225][T14858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.827243][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.833980][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.044373][T14777] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1126.375705][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1126.385646][T14777] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1126.405886][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1126.425161][ T6055] bridge_slave_1: left allmulticast mode [ 1126.433415][ T6055] bridge_slave_1: left promiscuous mode [ 1126.441040][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.650976][T15136] loop0: detected capacity change from 0 to 256 [ 1126.780928][ T6055] bridge_slave_0: left allmulticast mode [ 1126.828833][ T6055] bridge_slave_0: left promiscuous mode [ 1126.929507][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.676098][T15153] loop5: detected capacity change from 0 to 512 [ 1128.807469][T15153] EXT4-fs: Ignoring removed mblk_io_submit option [ 1128.814131][T15153] EXT4-fs: inline encryption not supported [ 1128.843874][T15153] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1128.850817][T15153] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1129.045274][T15153] EXT4-fs (loop5): 1 truncate cleaned up [ 1129.060206][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.079558][T15153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1129.203903][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.272169][ T6055] bond0 (unregistering): Released all slaves [ 1129.463514][T14777] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1129.782156][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1129.792239][T14777] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1129.811559][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1130.672258][T14858] hsr_slave_0: entered promiscuous mode [ 1130.709833][T14858] hsr_slave_1: entered promiscuous mode [ 1130.718905][T14858] debugfs: 'hsr0' already exists in 'hsr' [ 1130.726250][T14858] Cannot create hsr debugfs directory [ 1130.769397][ T5226] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1131.914162][ T9575] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.140767][ T6055] hsr_slave_0: left promiscuous mode [ 1132.260169][ T6055] hsr_slave_1: left promiscuous mode [ 1132.320389][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.435485][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.901293][T15177] loop0: detected capacity change from 0 to 256 [ 1134.220734][ T6055] team0 (unregistering): Port device team_slave_1 removed [ 1134.244069][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2518'. [ 1134.281603][ T6055] team0 (unregistering): Port device team_slave_0 removed [ 1135.273372][T15172] tipc: Enabled bearer , priority 0 [ 1135.408659][T15173] syzkaller0: entered promiscuous mode [ 1135.414365][T15173] syzkaller0: entered allmulticast mode [ 1135.421695][T15173] tipc: Resetting bearer [ 1135.793087][T15170] tipc: Resetting bearer [ 1136.603056][T15170] tipc: Disabling bearer [ 1136.674946][T14777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.632613][T14777] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.928267][T15213] loop5: detected capacity change from 0 to 512 [ 1138.089475][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.097325][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.158524][T15213] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1138.279008][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.286691][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.377735][T15213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.439670][T15213] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1138.720230][T15211] syzkaller0: entered promiscuous mode [ 1138.747053][T15211] syzkaller0: entered allmulticast mode [ 1139.223508][ T9575] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.365499][ T5226] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1139.868724][T15228] loop5: detected capacity change from 0 to 512 [ 1140.024065][T15228] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1140.081606][T15228] FAT-fs (loop5): Filesystem has been set read-only [ 1140.126797][T15229] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1141.225450][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2530'. [ 1142.082140][T15246] loop0: detected capacity change from 0 to 256 [ 1142.091519][T15246] exfat: Deprecated parameter 'utf8' [ 1142.096989][T15246] exfat: Deprecated parameter 'utf8' [ 1142.102782][T15246] exfat: Deprecated parameter 'utf8' [ 1142.483057][T15246] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1142.944777][T15249] loop5: detected capacity change from 0 to 512 [ 1143.164285][T15249] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1143.714001][T15249] EXT4-fs (loop5): 1 truncate cleaned up [ 1143.762067][T15249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.053223][T14858] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1144.426498][T14858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1144.445242][T14858] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1144.658580][T14858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1144.712188][T14858] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1144.859672][T14858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1144.880652][T14858] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1144.984061][ T4871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1144.996268][ T4871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1145.005263][ T4871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1145.017784][ T4871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1145.028856][ T4871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1145.070815][ T9575] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.163220][T14858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1146.321310][T15278] loop5: detected capacity change from 0 to 1024 [ 1146.494029][T15278] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1146.494029][T15278] [ 1147.116250][ T4871] Bluetooth: hci3: command tx timeout [ 1147.200486][T15281] syzkaller0: entered promiscuous mode [ 1147.206252][T15281] syzkaller0: entered allmulticast mode [ 1147.533000][T14858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.572940][T14858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.515369][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.522929][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.711474][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.718970][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.815306][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1149.214664][ T4871] Bluetooth: hci3: command tx timeout [ 1151.283419][ T4871] Bluetooth: hci3: command tx timeout [ 1151.815998][T15327] loop5: detected capacity change from 0 to 256 [ 1151.929116][T15327] exfat: Deprecated parameter 'utf8' [ 1151.993133][T15327] exfat: Deprecated parameter 'utf8' [ 1152.102113][T15327] exfat: Deprecated parameter 'utf8' [ 1152.543013][T15327] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1152.726333][T14376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1152.735444][T14376] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1152.863202][T14376] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1152.916683][T14376] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1153.058352][T14376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1153.388216][T14376] Bluetooth: hci3: command tx timeout [ 1154.511678][T15347] netlink: 'syz.0.2556': attribute type 10 has an invalid length. [ 1155.203725][T14376] Bluetooth: hci1: command tx timeout [ 1156.175789][T15261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.197228][T15261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.221579][T15261] bridge_slave_0: entered allmulticast mode [ 1156.269526][T15261] bridge_slave_0: entered promiscuous mode [ 1156.367957][T15261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.409686][T15261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.466355][T15261] bridge_slave_1: entered allmulticast mode [ 1156.596364][T15261] bridge_slave_1: entered promiscuous mode [ 1156.703642][T15372] kvm: emulating exchange as write [ 1156.709104][T15372] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1157.245050][T15261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.271194][T14376] Bluetooth: hci1: command tx timeout [ 1157.389620][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1157.438050][T15261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.810564][T15261] team0: Port device team_slave_0 added [ 1157.857099][T15261] team0: Port device team_slave_1 added [ 1158.088453][T15381] syzkaller0: entered promiscuous mode [ 1158.094212][T15381] syzkaller0: entered allmulticast mode [ 1158.363477][T15261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.388999][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.504283][T15261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.594931][T15261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.626889][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.773492][T15261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1158.915384][T15395] loop5: detected capacity change from 0 to 512 [ 1159.323260][T15395] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2557: bad orphan inode 15 [ 1159.362208][T14376] Bluetooth: hci1: command tx timeout [ 1159.416759][T15395] loop5: lost filesystem error report for type 5 error -117 [ 1159.418003][T15395] ext4_test_bit(bit=14, block=5) = 0 [ 1159.442366][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1159.449141][ C1] EXT4-fs (loop5): initial error at time 1778745078: ext4_orphan_get:1423 [ 1159.457992][ C1] EXT4-fs (loop5): last error at time 1778745078: ext4_orphan_get:1423 [ 1159.631813][T15395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1159.758906][T15395] EXT4-fs error (device loop5): __ext4_new_inode:1079: comm syz.5.2557: reserved inode found cleared - inode=1 [ 1160.283985][ T9575] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.316554][T15261] hsr_slave_0: entered promiscuous mode [ 1160.422268][T15261] hsr_slave_1: entered promiscuous mode [ 1161.539035][T14376] Bluetooth: hci1: command tx timeout [ 1162.296868][T15423] loop5: detected capacity change from 0 to 1024 [ 1162.465234][T15423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1162.654093][T15427] hsr0: entered promiscuous mode [ 1162.707720][T15422] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1162.793116][T15422] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1162.805500][T15422] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1162.805500][T15422] [ 1162.816366][T15422] EXT4-fs (loop5): Total free blocks count 0 [ 1162.827313][T15422] EXT4-fs (loop5): Free/Dirty block details [ 1162.841110][T15422] EXT4-fs (loop5): free_blocks=68451041280 [ 1162.847081][T15422] EXT4-fs (loop5): dirty_blocks=16 [ 1162.852342][T15422] EXT4-fs (loop5): Block reservation details [ 1162.858468][T15422] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1163.210182][ T9575] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1163.319468][ T9575] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.735024][T15426] hsr0: left promiscuous mode [ 1164.874143][ T9830] bridge_slave_1: left allmulticast mode [ 1164.925175][ T9830] bridge_slave_1: left promiscuous mode [ 1164.966699][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.062462][ T9830] bridge_slave_0: left allmulticast mode [ 1165.084177][ T9830] bridge_slave_0: left promiscuous mode [ 1165.221887][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.255669][T15462] sctp: [Deprecated]: syz.5.2569 (pid 15462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1166.255669][T15462] Use struct sctp_sack_info instead [ 1166.278422][T15462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1166.505263][ T9830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.523429][ T9830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.651977][ T9830] bond0 (unregistering): Released all slaves [ 1168.740437][T15482] loop5: detected capacity change from 0 to 256 [ 1169.351113][ T9830] hsr_slave_0: left promiscuous mode [ 1169.368448][ T9830] hsr_slave_1: left promiscuous mode [ 1169.418351][ T9830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.528396][ T9830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.243774][ T9830] team0 (unregistering): Port device team_slave_1 removed [ 1171.387508][ T9830] team0 (unregistering): Port device team_slave_0 removed [ 1171.987340][T15332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.995059][T15332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.002692][T15332] bridge_slave_0: entered allmulticast mode [ 1172.012240][T15332] bridge_slave_0: entered promiscuous mode [ 1172.210823][ T5226] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1172.323183][T15332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.364496][T15332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.398524][T15332] bridge_slave_1: entered allmulticast mode [ 1172.487330][T15332] bridge_slave_1: entered promiscuous mode [ 1172.630098][T15522] syzkaller0: entered promiscuous mode [ 1172.636962][T15522] syzkaller0: entered allmulticast mode [ 1172.947973][T15528] sctp: [Deprecated]: syz.3.2582 (pid 15528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1172.947973][T15528] Use struct sctp_sack_info instead [ 1173.065910][T15528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1173.237336][T15332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.393328][T15332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.823494][T15332] team0: Port device team_slave_0 added [ 1173.840327][ T9830] bridge_slave_1: left allmulticast mode [ 1173.857164][ T9830] bridge_slave_1: left promiscuous mode [ 1173.872501][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.928570][ T9830] bridge_slave_0: left allmulticast mode [ 1173.948531][ T9830] bridge_slave_0: left promiscuous mode [ 1173.973022][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.998220][T15535] loop5: detected capacity change from 0 to 512 [ 1174.042099][T15535] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1174.122468][T15535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 1174.209973][T15535] System zones: 1-12 [ 1174.289784][T15535] EXT4-fs (loop5): 1 truncate cleaned up [ 1174.344313][T15535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.888923][ T9575] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 1174.986445][ T9575] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1175.035441][ T9575] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1175.308341][ T9830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.346938][ T9830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.388341][ T9830] bond0 (unregistering): Released all slaves [ 1175.487736][T15332] team0: Port device team_slave_1 added [ 1175.791123][ T9575] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.210770][T15332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.268027][T15332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.382797][T15332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.431939][T15261] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1176.511743][T15261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1176.541459][T15332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.565247][T15332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.632470][T15332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.726943][ T9830] hsr_slave_0: left promiscuous mode [ 1176.750716][ T9830] hsr_slave_1: left promiscuous mode [ 1176.776803][ T9830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.804955][ T9830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.450548][ T9830] team0 (unregistering): Port device team_slave_1 removed [ 1177.508402][ T9830] team0 (unregistering): Port device team_slave_0 removed [ 1177.923915][T15261] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1178.022925][T15261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1178.053924][T15261] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1178.161586][T15261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1178.321537][T15261] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1178.449362][T15261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1178.717745][ T4871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1178.731686][ T4871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1178.745530][ T4871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1178.759252][ T4871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1178.775761][ T4871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1178.900432][T15575] syzkaller0: entered promiscuous mode [ 1178.912558][T15575] syzkaller0: entered allmulticast mode [ 1179.325739][T15332] hsr_slave_0: entered promiscuous mode [ 1179.346772][T15332] hsr_slave_1: entered promiscuous mode [ 1179.360927][T15332] debugfs: 'hsr0' already exists in 'hsr' [ 1179.407632][T15332] Cannot create hsr debugfs directory [ 1180.141107][T15587] sctp: [Deprecated]: syz.0.2593 (pid 15587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1180.141107][T15587] Use struct sctp_sack_info instead [ 1180.239042][T15589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1180.863799][T14376] Bluetooth: hci0: command tx timeout [ 1181.792954][ T9830] bridge_slave_1: left allmulticast mode [ 1181.819255][ T9830] bridge_slave_1: left promiscuous mode [ 1181.845664][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.880264][ T9830] bridge_slave_0: left allmulticast mode [ 1181.909819][ T9830] bridge_slave_0: left promiscuous mode [ 1181.947608][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.077478][T15601] netlink: 'syz.0.2594': attribute type 10 has an invalid length. [ 1182.695168][ T9830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1182.766963][ T9830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1182.813504][ T9830] bond0 (unregistering): Released all slaves [ 1182.854133][ T9830] bond1 (unregistering): Released all slaves [ 1182.943145][T14376] Bluetooth: hci0: command tx timeout [ 1183.330824][ T9830] tipc: Left network mode [ 1183.507701][T15261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.868055][ T5226] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1184.296893][T15332] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1184.342244][T15332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1184.360313][T15332] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1184.401365][T15332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1184.568017][T15332] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1184.728959][T15332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1184.794709][T15332] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1184.939307][T15332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1185.026203][T14376] Bluetooth: hci0: command tx timeout [ 1185.365913][ T9830] hsr_slave_0: left promiscuous mode [ 1185.396106][ T9830] hsr_slave_1: left promiscuous mode [ 1185.409771][ T9830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.431802][ T9830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.600235][ T9830] team0 (unregistering): Port device macvlan0 removed [ 1185.874167][ T9830] team0 (unregistering): Port device team_slave_1 removed [ 1185.919094][ T9830] team0 (unregistering): Port device team_slave_0 removed [ 1186.453272][T15261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.794752][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.802267][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.953429][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1186.960463][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.102821][T14376] Bluetooth: hci0: command tx timeout [ 1187.187015][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.187343][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.201569][T15648] netlink: 'syz.3.2602': attribute type 10 has an invalid length. [ 1188.808506][T15332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.133484][T15332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.229242][ T115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.236990][ T115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.427308][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.434967][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.776238][T15577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.794846][T15577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.813162][T15577] bridge_slave_0: entered allmulticast mode [ 1189.831666][T15577] bridge_slave_0: entered promiscuous mode [ 1189.910110][T15577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.940946][T15577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.949636][T15577] bridge_slave_1: entered allmulticast mode [ 1189.959967][T15577] bridge_slave_1: entered promiscuous mode [ 1190.236885][T15577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.277352][T15577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.783641][T15577] team0: Port device team_slave_0 added [ 1190.830513][T15577] team0: Port device team_slave_1 added [ 1191.179355][T15577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.214193][T15577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.267286][T15577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.320456][ T5226] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1191.383564][T15577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.412398][T15577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.461565][T15577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.649886][T15689] syzkaller0: entered promiscuous mode [ 1191.673058][T15689] syzkaller0: entered allmulticast mode [ 1191.749397][T15695] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2610'. [ 1192.540559][T15577] hsr_slave_0: entered promiscuous mode [ 1192.594559][T15577] hsr_slave_1: entered promiscuous mode [ 1192.626768][T15577] debugfs: 'hsr0' already exists in 'hsr' [ 1192.664854][T15577] Cannot create hsr debugfs directory [ 1193.800641][T15714] netlink: 'syz.3.2612': attribute type 10 has an invalid length. [ 1194.212720][T15261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1194.781318][T15577] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1194.830643][T15577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1194.856196][T15577] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1194.906673][T15577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1194.955225][T15577] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1195.049141][T15577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1195.150734][T15577] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1195.287343][T15577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1196.438902][T15577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.841066][T15577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.897502][T15261] veth0_vlan: entered promiscuous mode [ 1197.066078][T15332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.143814][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.151422][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.474058][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.481607][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.546088][T15261] veth1_vlan: entered promiscuous mode [ 1198.434061][T15261] veth0_macvtap: entered promiscuous mode [ 1198.570423][T15261] veth1_macvtap: entered promiscuous mode [ 1198.878581][T15261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.031931][T15261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.222217][ T98] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.270362][ T98] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.314276][ T98] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.350764][ T98] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.045920][T15789] netlink: 'syz.3.2622': attribute type 10 has an invalid length. [ 1200.307478][T15332] veth0_vlan: entered promiscuous mode [ 1200.490414][T15332] veth1_vlan: entered promiscuous mode [ 1201.090289][T15332] veth0_macvtap: entered promiscuous mode [ 1201.186120][T15332] veth1_macvtap: entered promiscuous mode [ 1201.430122][T15332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.590089][T15332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.726619][T13893] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.761653][T13893] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.800263][T13893] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.864422][T13893] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.669387][T15577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.277881][T14994] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1203.498468][T14994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.549798][T14994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.606554][T14994] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1203.657221][T14994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.729230][T14994] usb 1-1: config 0 descriptor?? [ 1204.135250][T15834] fuse: fd is not a fuse device [ 1204.484414][ T4871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1204.500820][ T4871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1204.504588][T14994] hid-led 0003:1D34:000A.0004: probe with driver hid-led failed with error -71 [ 1204.530247][ T4871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1204.556599][ T4871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1204.576056][ T4871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1204.759270][T14994] usb 1-1: USB disconnect, device number 7 [ 1205.960317][T15577] veth0_vlan: entered promiscuous mode [ 1206.120724][T15577] veth1_vlan: entered promiscuous mode [ 1206.702833][ T4871] Bluetooth: hci5: command tx timeout [ 1206.837935][T15577] veth0_macvtap: entered promiscuous mode [ 1207.030045][ T6085] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.161738][T15577] veth1_macvtap: entered promiscuous mode [ 1207.290637][ T6085] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.524561][ T6085] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.772689][ T6085] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.916985][T15577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1208.066739][T15577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1208.533824][ T6082] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.589757][ T6082] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.761032][ T6082] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.792683][ T4871] Bluetooth: hci5: command tx timeout [ 1208.809172][ T6082] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.087087][ T6085] bridge_slave_1: left allmulticast mode [ 1209.101152][ T6085] bridge_slave_1: left promiscuous mode [ 1209.134885][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.182933][ T6085] bridge_slave_0: left allmulticast mode [ 1209.204870][ T6085] bridge_slave_0: left promiscuous mode [ 1209.229982][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.940746][ T6085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1209.977339][ T6085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.000579][ T6085] bond0 (unregistering): Released all slaves [ 1210.772479][ T5761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.807733][ T5761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.863549][ T4871] Bluetooth: hci5: command tx timeout [ 1210.874853][ T6085] hsr_slave_0: left promiscuous mode [ 1210.891470][ T6085] hsr_slave_1: left promiscuous mode [ 1210.899957][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1210.928751][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.948181][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1210.960986][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.986288][ T6085] veth1_macvtap: left promiscuous mode [ 1210.992001][ T6085] veth0_macvtap: left promiscuous mode [ 1210.998176][ T6085] veth1_vlan: left promiscuous mode [ 1211.003958][ T6085] veth0_vlan: left promiscuous mode [ 1211.639881][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 1211.666504][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 1212.946450][ T4871] Bluetooth: hci5: command tx timeout [ 1213.156461][T14376] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1213.174285][T14376] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1213.194891][T14376] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1213.211561][T14376] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1213.227860][T14376] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1214.860582][T15839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.891684][T15839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.917925][T15839] bridge_slave_0: entered allmulticast mode [ 1214.939320][T15839] bridge_slave_0: entered promiscuous mode [ 1214.996596][T15839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.021114][T15839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.043412][T15839] bridge_slave_1: entered allmulticast mode [ 1215.074243][T15839] bridge_slave_1: entered promiscuous mode [ 1215.241439][ T115] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.264004][ T4871] Bluetooth: hci3: command tx timeout [ 1215.451697][ T115] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.501428][T15839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.569706][T15839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.650620][ T115] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.675527][ T5226] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1215.912197][ T115] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.012977][T15839] team0: Port device team_slave_0 added [ 1216.061244][T15839] team0: Port device team_slave_1 added [ 1216.180809][ T6082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.202120][T15839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.213439][ T6082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.232166][T15839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.263929][T15839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.289470][T15839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.301094][T15839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.329790][T15839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.694434][ T6082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.723171][ T6082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.780368][T15839] hsr_slave_0: entered promiscuous mode [ 1216.803277][T15839] hsr_slave_1: entered promiscuous mode [ 1216.900116][ T115] bridge_slave_1: left allmulticast mode [ 1216.909763][ T115] bridge_slave_1: left promiscuous mode [ 1216.920627][ T115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.958544][ T115] bridge_slave_0: left allmulticast mode [ 1216.968379][ T115] bridge_slave_0: left promiscuous mode [ 1216.979329][ T115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.342761][ T4871] Bluetooth: hci3: command tx timeout [ 1217.368245][ T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.389497][ T115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.404487][ T115] bond0 (unregistering): Released all slaves [ 1219.044250][ T115] hsr_slave_0: left promiscuous mode [ 1219.069057][ T115] hsr_slave_1: left promiscuous mode [ 1219.084955][ T115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1219.103382][ T115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.124934][ T115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1219.142534][ T115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.210696][ T115] veth1_macvtap: left promiscuous mode [ 1219.218494][ T115] veth0_macvtap: left promiscuous mode [ 1219.226372][ T115] veth1_vlan: left promiscuous mode [ 1219.232138][ T115] veth0_vlan: left promiscuous mode [ 1219.422866][ T4871] Bluetooth: hci3: command tx timeout [ 1220.380302][ T115] team0 (unregistering): Port device team_slave_1 removed [ 1220.456499][ T115] team0 (unregistering): Port device team_slave_0 removed [ 1220.553226][T15958] loop9: detected capacity change from 0 to 40427 [ 1220.592127][T15958] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 1220.618362][T15958] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1220.667790][T15958] F2FS-fs (loop9): invalid crc value [ 1221.504882][ T4871] Bluetooth: hci3: command tx timeout [ 1221.712628][T15958] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1222.736367][T15839] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1222.775925][T15839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1222.848447][T15839] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1222.896741][T15839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1222.939130][T15839] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1223.004463][T15839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1223.047360][T15839] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1223.160822][T15839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1224.194702][T15918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.213070][T15918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.233398][T15918] bridge_slave_0: entered allmulticast mode [ 1224.279347][T15918] bridge_slave_0: entered promiscuous mode [ 1224.342007][T15918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.379702][T15918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.403032][T15918] bridge_slave_1: entered allmulticast mode [ 1224.425463][T15918] bridge_slave_1: entered promiscuous mode [ 1224.750557][T15918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.813484][T15918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.049782][T15918] team0: Port device team_slave_0 added [ 1225.080820][T15918] team0: Port device team_slave_1 added [ 1225.255498][T15918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.266370][T15918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.293502][T15918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.327368][ T5226] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1225.339111][T15918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.347641][T15918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.399646][T15918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.651030][T15839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.695488][T15918] hsr_slave_0: entered promiscuous mode [ 1225.710685][T15918] hsr_slave_1: entered promiscuous mode [ 1225.721837][T15918] debugfs: 'hsr0' already exists in 'hsr' [ 1225.731865][T15918] Cannot create hsr debugfs directory [ 1226.037076][T15839] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.190850][ T9830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.198449][ T9830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.555568][ T9830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.563209][ T9830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.601676][T16004] loop9: detected capacity change from 0 to 512 [ 1226.625337][T15010] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1226.690903][T16004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1226.737576][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2640'. [ 1226.748511][T16004] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1226.830439][T15010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.908685][T15010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.963973][T15010] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1226.997719][T15010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.052873][T15010] usb 1-1: config 0 descriptor?? [ 1227.520802][T15577] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.610349][T15010] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1227.634624][T15010] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1227.657222][T15010] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1227.677093][T15010] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1227.725106][T15010] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1227.779031][T15010] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1227.832804][T15010] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1227.902068][T15010] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 1227.992039][T15010] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints? [ 1228.051598][ C1] hid-thrustmaster 0003:044F:B65D.0005: Unknown packet type 0x0, unable to proceed further with wheel init [ 1228.313710][T15010] usb 1-1: USB disconnect, device number 8 [ 1228.960645][T16017] fido_id[16017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1229.331563][T15918] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1229.469673][T15918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1229.530277][T15918] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1229.631237][T15918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1229.679055][T15918] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1229.761680][T15918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1229.821048][T15918] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1229.920795][T15918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1231.818617][T15918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.990907][T15918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.075629][T14456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.083189][T14456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.230614][T13893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.238318][T13893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.165811][T16046] overlayfs: failed to clone upperpath [ 1233.220208][T15839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.582154][T15839] veth0_vlan: entered promiscuous mode [ 1236.802204][T15839] veth1_vlan: entered promiscuous mode [ 1237.339872][T15839] veth0_macvtap: entered promiscuous mode [ 1237.483004][T15839] veth1_macvtap: entered promiscuous mode [ 1237.868437][T15839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.140948][T15839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1238.428819][ T6085] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.484815][ T6085] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.556575][ T6085] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.613782][ T6085] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.685097][T16081] loop9: detected capacity change from 0 to 512 [ 1239.057393][T16081] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1239.165327][T16081] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1239.178080][T16096] hub 8-0:1.0: USB hub found [ 1239.479601][T16096] hub 8-0:1.0: 1 port detected [ 1239.488106][T16101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1239.861708][T15918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.351686][T15577] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.417023][T15918] veth0_vlan: entered promiscuous mode [ 1244.609470][T15918] veth1_vlan: entered promiscuous mode [ 1245.109304][T15918] veth0_macvtap: entered promiscuous mode [ 1245.240236][T15918] veth1_macvtap: entered promiscuous mode [ 1245.821930][T15918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.116041][T15918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.251119][T14454] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.285113][T14454] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.399654][T14454] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.473824][T14454] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.397801][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.405720][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.560900][ T6044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.603875][ T6044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.731850][T16169] macvtap0: entered promiscuous mode [ 1248.774036][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2667'. [ 1249.091812][T14456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.119505][T14456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.388428][T16190] loop7: detected capacity change from 0 to 512 [ 1250.497278][T16190] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1250.629187][T16190] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.2203: iget: bad i_size value: 38620345925642 [ 1250.692532][T16190] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1250.696247][T16190] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2203: couldn't read orphan inode 15 (err -117) [ 1250.705904][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1250.706007][ C0] EXT4-fs (loop7): initial error at time 1778745169: ext4_orphan_get:1397: inode 15 [ 1250.706166][ C0] EXT4-fs (loop7): last error at time 1778745169: ext4_orphan_get:1397: inode 15 [ 1250.873488][T16190] loop7: lost filesystem error report for type 5 error -117 [ 1250.901637][T16190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1251.252230][T16190] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2203: bg 0: block 5: invalid block bitmap [ 1251.279144][T16204] syzkaller0: entered promiscuous mode [ 1251.301979][T16204] syzkaller0: entered allmulticast mode [ 1251.326892][T16190] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 76 with error 28 [ 1251.361142][T16190] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1251.361142][T16190] [ 1251.383910][T16190] EXT4-fs (loop7): Total free blocks count 0 [ 1251.390674][T16190] EXT4-fs (loop7): Free/Dirty block details [ 1251.401638][T16190] EXT4-fs (loop7): free_blocks=0 [ 1251.447924][T16190] EXT4-fs (loop7): dirty_blocks=76 [ 1251.495061][T16190] EXT4-fs (loop7): Block reservation details [ 1251.509928][T16190] EXT4-fs (loop7): i_reserved_data_blocks=76 [ 1251.573829][T16206] EXT4-fs (loop7): shut down requested (0) [ 1252.899180][T16226] tipc: Started in network mode [ 1252.959244][T16226] tipc: Node identity 060000000000000006, cluster identity 4711 [ 1253.331933][ T5226] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1253.886699][T16242] loop7: detected capacity change from 0 to 128 [ 1253.977862][T16242] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1254.074943][T16242] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1254.123600][T16242] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1254.267937][T16242] ===================================================== [ 1254.275885][T16242] BUG: KMSAN: uninit-value in aes_encrypt+0x92d/0x11b0 [ 1254.283196][T16242] aes_encrypt+0x92d/0x11b0 [ 1254.287934][T16242] crypto_aes_encrypt+0x3f/0x50 [ 1254.293150][T16242] crypto_ecb_encrypt2+0x142/0x300 [ 1254.298432][T16242] crypto_lskcipher_crypt_sg+0x3ad/0x960 [ 1254.304685][T16242] crypto_lskcipher_encrypt_sg+0x8b/0xc0 [ 1254.310575][T16242] crypto_skcipher_encrypt+0x111/0x1e0 [ 1254.316425][T16242] xts_encrypt+0x2e1/0x570 [ 1254.321070][T16242] crypto_skcipher_encrypt+0x18a/0x1e0 [ 1254.326838][T16242] fscrypt_crypt_data_unit+0x38e/0x590 [ 1254.332751][T16242] fscrypt_encrypt_pagecache_blocks+0x3ce/0x800 [ 1254.339226][T16242] ext4_bio_write_folio+0x139f/0x3110 [ 1254.348473][T16242] mpage_submit_folio+0x399/0x3d0 [ 1254.354742][T16242] ext4_do_writepages+0x3c54/0x7850 [ 1254.360129][T16242] ext4_writepages+0x337/0x870 [ 1254.365174][T16242] do_writepages+0x3f2/0x860 [ 1254.370013][T16242] file_write_and_wait_range+0x6f0/0x7d0 [ 1254.375932][T16242] mmb_fsync_noflush+0x82/0x3a0 [ 1254.380946][T16242] ext4_sync_file+0x619/0x1490 [ 1254.386033][T16242] vfs_fsync_range+0x135/0x1c0 [ 1254.390944][T16242] ext4_buffered_write_iter+0x5b3/0x7b0 [ 1254.396858][T16242] ext4_file_write_iter+0x104c/0x3880 [ 1254.402474][T16242] vfs_write+0xbe1/0x15c0 [ 1254.407005][T16242] ksys_pwrite64+0x1d6/0x2a0 [ 1254.411778][T16242] __ia32_sys_ia32_pwrite64+0xf0/0x150 [ 1254.417553][T16242] ia32_sys_call+0xb47/0x4360 [ 1254.422637][T16242] __do_fast_syscall_32+0x180/0x460 [ 1254.428208][T16242] do_fast_syscall_32+0x37/0x80 [ 1254.433385][T16242] do_SYSENTER_32+0x1f/0x30 [ 1254.438062][T16242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1254.448309][T16242] [ 1254.450719][T16242] Uninit was stored to memory at: [ 1254.457677][T16242] xts_xor_tweak+0x576/0xa90 [ 1254.462626][T16242] xts_encrypt+0x278/0x570 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1254.467271][T16242] crypto_skcipher_encrypt+0x18a/0x1e0 [ 1254.473036][T16242] fscrypt_crypt_data_unit+0x38e/0x590 [ 1254.478717][T16242] fscrypt_encrypt_pagecache_blocks+0x3ce/0x800 [ 1254.485430][T16242] ext4_bio_write_folio+0x139f/0x3110 [ 1254.490965][T16242] mpage_submit_folio+0x399/0x3d0 [ 1254.496320][T16242] ext4_do_writepages+0x3c54/0x7850 [ 1254.501691][T16242] ext4_writepages+0x337/0x870 [ 1254.506723][T16242] do_writepages+0x3f2/0x860 [ 1254.511506][T16242] file_write_and_wait_range+0x6f0/0x7d0 [ 1254.517462][T16242] mmb_fsync_noflush+0x82/0x3a0 [ 1254.522580][T16242] ext4_sync_file+0x619/0x1490 [ 1254.527523][T16242] vfs_fsync_range+0x135/0x1c0 [ 1254.532581][T16242] ext4_buffered_write_iter+0x5b3/0x7b0 [ 1254.538333][T16242] ext4_file_write_iter+0x104c/0x3880 [ 1254.544568][T16242] vfs_write+0xbe1/0x15c0 [ 1254.552707][T16242] ksys_pwrite64+0x1d6/0x2a0 [ 1254.557499][T16242] __ia32_sys_ia32_pwrite64+0xf0/0x150 [ 1254.564210][T16242] ia32_sys_call+0xb47/0x4360 [ 1254.569090][T16242] __do_fast_syscall_32+0x180/0x460 [ 1254.574740][T16242] do_fast_syscall_32+0x37/0x80 [ 1254.579823][T16242] do_SYSENTER_32+0x1f/0x30 [ 1254.584636][T16242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1254.591158][T16242] [ 1254.593687][T16242] Uninit was created at: [ 1254.598184][T16242] __alloc_frozen_pages_noprof+0x6fa/0x1000 [ 1254.604417][T16242] alloc_pages_mpol+0x328/0x860 [ 1254.609468][T16242] folio_alloc_noprof+0x108/0x370 [ 1254.614831][T16242] filemap_alloc_folio_noprof+0xd9/0x480 [ 1254.620653][T16242] __filemap_get_folio_mpol+0xb43/0x1960 [ 1254.626596][T16242] ext4_write_begin+0x6e3/0x2d80 [ 1254.631718][T16242] ext4_da_write_begin+0x75e/0x1450 [ 1254.637305][T16242] generic_perform_write+0x364/0x1050 [ 1254.642995][T16242] ext4_buffered_write_iter+0x178/0x7b0 [ 1254.652414][T16242] ext4_file_write_iter+0x104c/0x3880 [ 1254.657961][T16242] vfs_write+0xbe1/0x15c0 [ 1254.663499][T16242] ksys_pwrite64+0x1d6/0x2a0 [ 1254.668278][T16242] __ia32_sys_ia32_pwrite64+0xf0/0x150 [ 1254.674014][T16242] ia32_sys_call+0xb47/0x4360 [ 1254.678900][T16242] __do_fast_syscall_32+0x180/0x460 [ 1254.684438][T16242] do_fast_syscall_32+0x37/0x80 [ 1254.689484][T16242] do_SYSENTER_32+0x1f/0x30 [ 1254.694367][T16242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1254.700877][T16242] [ 1254.703429][T16242] CPU: 1 UID: 0 PID: 16242 Comm: syz.7.2681 Not tainted syzkaller #0 PREEMPT(full) [ 1254.713057][T16242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1254.723328][T16242] ===================================================== [ 1254.730374][T16242] Disabling lock debugging due to kernel taint [ 1254.865163][T16242] Kernel panic - not syncing: kmsan.panic set ... [ 1254.871750][T16242] CPU: 0 UID: 0 PID: 16242 Comm: syz.7.2681 Tainted: G B syzkaller #0 PREEMPT(full) [ 1254.882909][T16242] Tainted: [B]=BAD_PAGE [ 1254.887157][T16242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1254.897358][T16242] Call Trace: [ 1254.900749][T16242] [ 1254.903777][T16242] __dump_stack+0x26/0x30 [ 1254.908292][T16242] dump_stack_lvl+0x50/0x1c0 [ 1254.913072][T16242] ? dump_stack+0x12/0x25 [ 1254.917572][T16242] dump_stack+0x1e/0x25 [ 1254.921864][T16242] vpanic+0x7b4/0x1430 [ 1254.926137][T16242] panic+0x15d/0x160 [ 1254.930224][T16242] kmsan_report+0x31a/0x320 [ 1254.934906][T16242] ? __msan_warning+0x1b/0x30 [ 1254.939736][T16242] ? aes_encrypt+0x92d/0x11b0 [ 1254.944620][T16242] ? crypto_aes_encrypt+0x3f/0x50 [ 1254.949807][T16242] ? crypto_ecb_encrypt2+0x142/0x300 [ 1254.955265][T16242] ? crypto_lskcipher_crypt_sg+0x3ad/0x960 [ 1254.961237][T16242] ? crypto_lskcipher_encrypt_sg+0x8b/0xc0 [ 1254.967188][T16242] ? crypto_skcipher_encrypt+0x111/0x1e0 [ 1254.972995][T16242] ? xts_encrypt+0x2e1/0x570 [ 1254.977733][T16242] ? crypto_skcipher_encrypt+0x18a/0x1e0 [ 1254.983531][T16242] ? fscrypt_crypt_data_unit+0x38e/0x590 [ 1254.989342][T16242] ? fscrypt_encrypt_pagecache_blocks+0x3ce/0x800 [ 1254.995999][T16242] ? ext4_bio_write_folio+0x139f/0x3110 [ 1255.001688][T16242] ? mpage_submit_folio+0x399/0x3d0 [ 1255.007050][T16242] ? ext4_do_writepages+0x3c54/0x7850 [ 1255.012547][T16242] ? ext4_writepages+0x337/0x870 [ 1255.017625][T16242] ? do_writepages+0x3f2/0x860 [ 1255.022554][T16242] ? file_write_and_wait_range+0x6f0/0x7d0 [ 1255.028507][T16242] ? mmb_fsync_noflush+0x82/0x3a0 [ 1255.033658][T16242] ? ext4_sync_file+0x619/0x1490 [ 1255.038754][T16242] ? vfs_fsync_range+0x135/0x1c0 [ 1255.043869][T16242] ? ext4_buffered_write_iter+0x5b3/0x7b0 [ 1255.049728][T16242] ? ext4_file_write_iter+0x104c/0x3880 [ 1255.055441][T16242] ? vfs_write+0xbe1/0x15c0 [ 1255.060099][T16242] ? ksys_pwrite64+0x1d6/0x2a0 [ 1255.065046][T16242] ? __ia32_sys_ia32_pwrite64+0xf0/0x150 [ 1255.070825][T16242] ? ia32_sys_call+0xb47/0x4360 [ 1255.075881][T16242] ? __do_fast_syscall_32+0x180/0x460 [ 1255.081432][T16242] ? do_fast_syscall_32+0x37/0x80 [ 1255.086635][T16242] ? do_SYSENTER_32+0x1f/0x30 [ 1255.091465][T16242] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1255.098121][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.103419][T16242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1255.109415][T16242] ? filter_irq_stacks+0x49/0x190 [ 1255.114637][T16242] ? stack_depot_save_flags+0x35/0x790 [ 1255.120298][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.125629][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.130917][T16242] __msan_warning+0x1b/0x30 [ 1255.135590][T16242] aes_encrypt+0x92d/0x11b0 [ 1255.140274][T16242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1255.146298][T16242] ? skcipher_walk_next+0xaee/0x10f0 [ 1255.151798][T16242] crypto_aes_encrypt+0x3f/0x50 [ 1255.156853][T16242] crypto_ecb_encrypt2+0x142/0x300 [ 1255.162139][T16242] ? __pfx_crypto_aes_encrypt+0x10/0x10 [ 1255.167943][T16242] crypto_lskcipher_crypt_sg+0x3ad/0x960 [ 1255.173785][T16242] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 1255.179645][T16242] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 1255.185444][T16242] crypto_lskcipher_encrypt_sg+0x8b/0xc0 [ 1255.191257][T16242] crypto_skcipher_encrypt+0x111/0x1e0 [ 1255.196951][T16242] xts_encrypt+0x2e1/0x570 [ 1255.201563][T16242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1255.207588][T16242] ? __pfx_xts_encrypt+0x10/0x10 [ 1255.212693][T16242] crypto_skcipher_encrypt+0x18a/0x1e0 [ 1255.218381][T16242] fscrypt_crypt_data_unit+0x38e/0x590 [ 1255.224109][T16242] ? __alloc_frozen_pages_noprof+0x6fa/0x1000 [ 1255.230401][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.235728][T16242] ? __pfx_xts_encrypt_done+0x10/0x10 [ 1255.241289][T16242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1255.247339][T16242] ? alloc_pages_mpol+0x52c/0x860 [ 1255.252576][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.257904][T16242] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 1255.263949][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.269301][T16242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1255.275365][T16242] fscrypt_encrypt_pagecache_blocks+0x3ce/0x800 [ 1255.282007][T16242] ext4_bio_write_folio+0x139f/0x3110 [ 1255.287617][T16242] mpage_submit_folio+0x399/0x3d0 [ 1255.292854][T16242] ext4_do_writepages+0x3c54/0x7850 [ 1255.298225][T16242] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1255.304756][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.310083][T16242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1255.316111][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.321426][T16242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1255.327626][T16242] ext4_writepages+0x337/0x870 [ 1255.332603][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.337920][T16242] ? __pfx_ext4_writepages+0x10/0x10 [ 1255.343373][T16242] do_writepages+0x3f2/0x860 [ 1255.348163][T16242] ? _raw_spin_unlock+0x30/0x50 [ 1255.353238][T16242] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 1255.359438][T16242] file_write_and_wait_range+0x6f0/0x7d0 [ 1255.365354][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.370723][T16242] mmb_fsync_noflush+0x82/0x3a0 [ 1255.375777][T16242] ext4_sync_file+0x619/0x1490 [ 1255.380833][T16242] ? __pfx_ext4_sync_file+0x10/0x10 [ 1255.386211][T16242] vfs_fsync_range+0x135/0x1c0 [ 1255.391163][T16242] ext4_buffered_write_iter+0x5b3/0x7b0 [ 1255.396890][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.402232][T16242] ext4_file_write_iter+0x104c/0x3880 [ 1255.407783][T16242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1255.413818][T16242] ? vfs_write+0x461/0x15c0 [ 1255.418506][T16242] ? filter_irq_stacks+0x49/0x190 [ 1255.423705][T16242] ? stack_depot_save_flags+0x35/0x790 [ 1255.429401][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.434731][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.440086][T16242] ? kmsan_get_metadata+0xf1/0x160 [ 1255.445419][T16242] vfs_write+0xbe1/0x15c0 [ 1255.449968][T16242] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1255.455877][T16242] ksys_pwrite64+0x1d6/0x2a0 [ 1255.460694][T16242] __ia32_sys_ia32_pwrite64+0xf0/0x150 [ 1255.466363][T16242] ia32_sys_call+0xb47/0x4360 [ 1255.471273][T16242] __do_fast_syscall_32+0x180/0x460 [ 1255.476707][T16242] do_fast_syscall_32+0x37/0x80 [ 1255.481771][T16242] do_SYSENTER_32+0x1f/0x30 [ 1255.486458][T16242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1255.492978][T16242] RIP: 0023:0xf7f4400c [ 1255.497165][T16242] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1255.516923][T16242] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 00000000000000b5 [ 1255.525483][T16242] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 1255.533567][T16242] RDX: 0000000000000135 RSI: 000000000000fecc RDI: 0000000000000000 [ 1255.541665][T16242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1255.549770][T16242] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1255.557869][T16242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1255.565979][T16242] [ 1255.569704][T16242] Kernel Offset: disabled [ 1255.574120][T16242] Rebooting in 86400 seconds..