last executing test programs: 30m13.908262211s ago: executing program 0 (id=832): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) 30m13.485492672s ago: executing program 0 (id=834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 30m12.938792426s ago: executing program 0 (id=835): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000300)="05031c00", 0x4, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) 30m11.997523141s ago: executing program 0 (id=845): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x3) 30m11.786338287s ago: executing program 0 (id=847): syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b"], 0x0) 30m10.981513897s ago: executing program 0 (id=849): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000005c0)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0x26000, {}, 0x1, 0xc}, {"7d141eb7ad66d8daf4e38835d6e70d9d55296eb2c36e50d54f0d34613be4614ba1281c117b33fcb43767503fcaabbf284170937241093fa9cfbb624be8ec7b4e06bc4a4bfde3123549c3f753eada1e7c249e717905909988e09ac81179028ba71d10bbbd641f85bc53cf28086eb2df7f88ef2e2cbf50ed37810b684fdd2ee73e5f99688aa2a75681fa84c18240caa51200246c929bbd0b59e1d49135eb7e6c8b6546c6e8bc1eb9bed258f66c8def90f4244b8a9e91a5a4638265086e80d18e0cbd929d9b1628376e9809871af94bc9a293ef9d27abf84952b5452a3aad4d2516912489dee29d77815eba3bbeac3de7d8117601fd310c8d3da265f86f17fdba756856988d813fa47e9703eae6ab3e9a7f3869d2b3a3a7f2d039d4bd4d319d77fe3657d2ab04c8ef359d398357d5845d729b9e9d16ad74327050b8891503e8468a4f079babaebf007aa9cc25de29706e9a6c1bf3ab53afa10bef99a360dd6715e64d56d8c4e2063df16b3680fe56b3ae027d44d9cfad653981044d704e8c92121baf89c4cf76440e6089e486c1fbed86765f07938013da044ee260bf8fce020e049cec5e10332a2ffa81dc9c6c1b6bc56a9224649ecd591bdc8acd75e1b3b20129e2d6fab9e795ee6f2010ac8f242807a21d9631ce750c92cafac8c0a68d98dcee27982958463d89c10a20fec48eb2974cc022c7de74d39e2eed822f7e6668bb921a8db21f78e16cdd8e71e5757e063e1aaea6e1cea467cd3c2217a9ae20f721da27b1dd45c4a8471e837ec8c2ee2f763df2ea59d94c5b6be5f49ec640f6068b772e9fa5dfe4a02bc2fecbfa85a24375b2769268fdf756ababa469272ffc0969ecae8bd3a1122b8996ee77cf7947eb056b10bc099c3233db8dff9f97bbe3b8ff4f2a99555402a91971e8558c3af94bbb538c42fc05d8b5eedd1ceb306eae773b8d33a953906325104d11d9b4aa69ec7f32a30d6664a1cdb310944aee156ea713e37b4de2c8bd53156eabb3d6e494923289181102ba09d5cd707b895f89be0b66673b8520d475cc8e8d4fbb4b017033abdd13932bc41551966b959c55e943fa3efd92870a83fc2d917186e3eebc6ef75ddfdea52b44c51c45ef4297e065470d13fcad4c42f8f7dbd66545aa31a3f9e999b5cac5d8893d0dfafc63adb97610134507617bc93c77c4dcc9a0305c727eddde9ced309cd7ec72ddcd27f73b11835cb9de090f1fe93c9bd442af8f50d26e9789a255813e774804fcc36bacc50117bfea3cc2e2670d65226978c683f76d40412a9aedc8b002c835196929716b90233fd60b5a27eeabc5d93097a941ca5adf1c11a7a92755a73f0530ffe6b53a92127fd3cd897cd1496adebe1f46154845c91ca99027541d8f2df7d41abb1b016276a6aee113dde179fe18365655014a5b764482c56ece0533ae791a70ee0f4a19047e3847c971a45eef444b1748320970550965d021f626d8dd17091c3efcc5a26f702040b5d85e13dab48b66ffee27048d4eaf3092df1bb70489a6d02e0650bf3cd6d8c04df31d1ec6c7ce051c61724829a860062a28593e1016f2c94bcfafc2db3970f92aa04f15b8594f6c3f0c6cba18c1776785eaddc3510ad8f75a583d71c99072b15333c6031f90237f41336fb4318dfcdc271cbcb369d0085d178cc3ed73cbb8593993a894a2f4f7183524f70dd499f14d9dc225e5017085d501d170c7644909c0327cc867d2c99b1f77b62f827d17eae3899218047c456cbebfded12cfdc86cd42a7da91f394668bc6f4855faae32fa3b2410e2ba2fecf55242866ff8d2b2d1b66fc25f6958bec72c4aa2bab40683b1dc552fd5462ca255e0613648781768ece01e03bee42bf386b5cf14e05935a1fa3951b89267e9a72406ef5f78e510f3b5ebb6b2b390839316f58c7907c0f2e7b4eb5478b833705d3264a1724bb64267a5f28e35ac556ba28779ad3a8c1dba38194e9e56e41532fe4892041f71b3c72bbd25b4c7e2d49f27701ea18cfb375b63453c762bbc0411198d862dfba97fc876955e57f05834784699a88e73ff41cb5268a689d66a950780c11e0f70357a6a8e77fa5cbcac6281d6b3346452a4df5eedeb5e4171f3116bcf8c06cc3db746416754adc6f1a07d27e5be3241b64b116e27635a9cda80725452b0922edad97939853d546212bba8935f849f930ce04f15e45a7addc4699f6e89beaee18434cc34d9513a5827783f24eac29bf6aa7b1195c1f914343b93ecdb000d42d0d0775700e3830d16323191801ffd7a083abaef2a92b924babbe5610a9e040505d7930b3f2a2f7d5df9d7a778bc757b96abe3a0c0a837c7e9b40d896d75bec67672ddfb8dda78cf27fc69bec9bd6448812b23ff02775c4f04cf7ee65e46f89e24f24b380e33239230944a83cce01faae8a043d227287dbf87b12f684a6b10e5783d36da7b3b4b9246d9ec22ee56ed002a7c2b4e3be2f6fce43a7ffd6c59cd0d8da1c36d6fd09e3e92087513a18f4fce3a3bf1e8d33e437bc982a5094e2f43d5be04a3bfdd26809ded456f22664b6be5b625e7ae122bd2da1788f8bc181934857104d345981ea48cf7a52b3c680aa836641006b1e41fbddbcc712cf58490a98179c7d778da01952391de5bcc3344bd7d8b26cb268afa1ea81ef9ed607d76713f0078338ca1fb4829e619253e20d2ca4ea7bf8b998ff00685ad333f034acd9cd7b1de23fa08ac8856caa898397df32a8eda57cc129d8713ca87ba645265eec454a7f91134f3b7631202b860027a753c84182cb23e1fc21e780be8c7bbe0fe44c01c3357863acd1b0bf433079a0ad2e5bd20055bf013948aeae92bee1e2136e9f11f9c30f27af907aac4c70e1f25dd786f9988d91ed1b50d156a4e0d862c2e157dcae4bbba5f689c9b6c22b71d4fe8d8d248be466e1146cd0a7457da77a3276a7b56ec9f523c8a262f96c4ea7992cb4d98d715e33232837de6feebb6970bf51174731c56481938cc83cc6def53db43c3ea37c4d845a03e5b32fe1150b01fe4d6eb57649f05abc74e81bbdaa180bf0215054ce1c74870fb7626ed50b894c7de80acd3db8bc073e02a5fad267264ee0c6892822cf0b8bc01c0bd925e95733a8a35fb5e52afccf5219529fdb94be4726368cd8f61e93bc6acdb1ecee71a6ba07e7a415bab37f2684f407c71e38f3f775579db6cffd4172e729405c002bd7410c8985b30fd01e8ca8b63b1e652e9b7dc857e6a1d439b326ad6480c7942ae6d661d7b9c61e5c0e852f5473da9b5d2d9664cd9fe1d0db7e2e2dd28244c9b8a028860cd510f7e98c1aa5dd913e3607ac8ce912894f8813adb3433860b6916c157d360d9da3a9b835303d1c10fef73fe58265bc44cb065052a875cb4960671763d821f1882eeda84b66c21db49776e34b7fc8ac98d113f13b2307ea16609b396b999f487860920265f6715886ecb198c219e7015e4bcda8d70df30bbf7d1d91cf7f5978de25959a5cbb95125519bed2ac8b7f707c0222a7839c614cab422ea19c95ae3a36945c2ed8a370fd6c237f3263a3d6bcc2100e745c6e26fd4edafb0e6d90d132d2bba8ffadcc4b6c85fad583b3a683b5773b3fc0f9e70dd56eb6b4aa54fa5a0da26642e778eeacee84bc4d94528e2a2a193c81423e0aa706d53257170b2d8ab0cf5327594f2b0fee91c57533694d46d1eee566a6eac553447c23ed27e9bffb78248302874b4d43cdd4bd27836e6344bd0736313b9540810e62c5efcfa2b863cd88e306b1f649324f820b8bd8fc6265bf16040344996fc392b4fa151e6d7de66052079b191503c56ad382af42c2985e78c5f9ced5359e3e5fb875982b19817b0e589001323a7a9acb38864c12cf73ab881c4a7329e450915842463ec9e49ac8ee35f25c22f23001596858ec46bd9cb70e9ef4a0c0b5e85ae35c312f088ed19bd17a0fd8ca8b8a60dcf81142214d5e575a6af58aa47b6de84745bbd42cc75c59d36b5c562c805c0060753a4b72f18b20e6e69874d693e3bc6ecb733de44e5a65de3fd3f00068c30ebeddf36b4b1e808528679f5068cc2644403a91e15c7465d6dc94eec57533938b9e52e1428895a217e21a08bcc5bdf8b1d48568d80e59c03b0e8315824fc0b49504d90e130d66177603af59ce84e0242bb4844bb42bf1826f3ac00dfd9f6f3f3d54d0eb01c1ab46907fbfda2b48dc683c361164fec4bff8a5ec2c6fa1f40562aa5f5ebfb58dad7f3dbfc95ee053daa045d42b9f9dbffaf16533a709e2be90b67e45ffb9397a39ad4761bf49e39745fa1a27b9f39257d05cd53f7f210716c72730e1c01dd9f12265e2ea1d37a8bfd87e86205a15b3019096c72580008fe75010804d60f49e70b846dcd5e59e03d9b8f1a8bba2a3ebe808afc5577b32b75d7a14d118824ab59198151737fe4e485c6e9fc04d99c8f1d8ebefc357d4008f0e250792da3b1025a502f81b4e07c4bfcf5c4178ea45179ba782ffbfca485ce035a45ad74690d2fd3a8c83ea544b0467c05a77cb7a4730152e3af0c84556d6b30dafe002bd7a097f2d7948644e2026b4e854b273b978ce02eb8196beb4f2c2616696102600e348e85d2804b5ad225dab473496711d154e8f5836114cb692d000e6ad0cffc7dfa7789a2250a07b37ba5e8c1e5459234004d796f8201d99695a53089b0b64fdba693654e02ec5ab293df63ca4f586e9575838e3829d743b7a2e79d32a6349cea6a62872754c2ee36ff33a7447e178c2939fbe731b712502c841b0f619ca4b01049eea9984cfbe545c2c036d35d4f83d59b153347323e68137d718c3d6df6cc86edbea4f37333a2e4d6eb50a7c1d5ed8860f3ced015cdb86aa5de1401b6ca1ee24908a8d22a3e69652bd23842960b992b9cec74b94e2622a283b14c0835926996db28b23aec0193fd4b73f8f33e4303d5f6b55f3835014f93ce59bf87bd050d6aacb56a89d9978d8bdbf882f5f47f4bb79cb47422d630338c2b4ad7bfbd9ab5a1b285be56fac14fc105154e11ad8b1740393d37a1c919b70893549bdbb5bb92a1e51c682dd889fcd7394933f60c7318652a92df65d961ae21adb220b9f5f44d5990cd5e662b04d3d8a6a8254836037656e44561373ea8fd5fd52b1cb2ab637688bdd19f82052d2d44cbbd906e033e1f50496e6cae65a0f2d755332da9466c6b85b33a275aa560e03c8e086f1426cffb6de21dd8ae60e58ca2edd46052afc5acfdd148ff523ee32c124ae37aa31c41854920078832ce80b61d91a0aad990a894bdd7f505f50ac2a50787097735053a6b0625f8b67036217fd3063c56496c6ce6b4d751068fbaeae1ccdeca4f839e4ca95ee3672d9a84d63b125adf53c8a369e859e66f5d3d617c74e4d2a74f7e3c743e28a304686d637f17bc2c36f04d11d863b7d72b15cb280dfbb974e1d9e703f1521e8113d48199c4d928fe4fb394f96d814cf4b0655fb13333d4fb61266a2106c6a2418651bf7af76e00d9b413f517328171cd6de78742465c7805beec01f83d9877d636402183dec4c3eafb4640255219c5e4afbd6f9ac05286b6b9fe7c01b501e10841725131e81783232c3b1548c2ba65d069452d704e1c8bd69418df693cefe6f9b979b6648e0fb02d5a441647cc52ce38c99fd52eb3c678ddc7740728137e2fd20a3d383472d522791446e52cd1c159c4caeb29a4d80655be56e3171e5af447a8a5221c5c735587abf2cc064dbd2ef2668c3958d8ee3b67e59221e9d43c9485455a28ab63841ef8951fb08510a60a1a50563f546ff67c632f25292e9015ae5a6d37644bcc77a1c913336897ec105bffd3", "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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30m10.422429812s ago: executing program 32 (id=849): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000005c0)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0x26000, {}, 0x1, 0xc}, {"7d141eb7ad66d8daf4e38835d6e70d9d55296eb2c36e50d54f0d34613be4614ba1281c117b33fcb43767503fcaabbf284170937241093fa9cfbb624be8ec7b4e06bc4a4bfde3123549c3f753eada1e7c249e717905909988e09ac81179028ba71d10bbbd641f85bc53cf28086eb2df7f88ef2e2cbf50ed37810b684fdd2ee73e5f99688aa2a75681fa84c18240caa51200246c929bbd0b59e1d49135eb7e6c8b6546c6e8bc1eb9bed258f66c8def90f4244b8a9e91a5a4638265086e80d18e0cbd929d9b1628376e9809871af94bc9a293ef9d27abf84952b5452a3aad4d2516912489dee29d77815eba3bbeac3de7d8117601fd310c8d3da265f86f17fdba756856988d813fa47e9703eae6ab3e9a7f3869d2b3a3a7f2d039d4bd4d319d77fe3657d2ab04c8ef359d398357d5845d729b9e9d16ad74327050b8891503e8468a4f079babaebf007aa9cc25de29706e9a6c1bf3ab53afa10bef99a360dd6715e64d56d8c4e2063df16b3680fe56b3ae027d44d9cfad653981044d704e8c92121baf89c4cf76440e6089e486c1fbed86765f07938013da044ee260bf8fce020e049cec5e10332a2ffa81dc9c6c1b6bc56a9224649ecd591bdc8acd75e1b3b20129e2d6fab9e795ee6f2010ac8f242807a21d9631ce750c92cafac8c0a68d98dcee27982958463d89c10a20fec48eb2974cc022c7de74d39e2eed822f7e6668bb921a8db21f78e16cdd8e71e5757e063e1aaea6e1cea467cd3c2217a9ae20f721da27b1dd45c4a8471e837ec8c2ee2f763df2ea59d94c5b6be5f49ec640f6068b772e9fa5dfe4a02bc2fecbfa85a24375b2769268fdf756ababa469272ffc0969ecae8bd3a1122b8996ee77cf7947eb056b10bc099c3233db8dff9f97bbe3b8ff4f2a99555402a91971e8558c3af94bbb538c42fc05d8b5eedd1ceb306eae773b8d33a953906325104d11d9b4aa69ec7f32a30d6664a1cdb310944aee156ea713e37b4de2c8bd53156eabb3d6e494923289181102ba09d5cd707b895f89be0b66673b8520d475cc8e8d4fbb4b017033abdd13932bc41551966b959c55e943fa3efd92870a83fc2d917186e3eebc6ef75ddfdea52b44c51c45ef4297e065470d13fcad4c42f8f7dbd66545aa31a3f9e999b5cac5d8893d0dfafc63adb97610134507617bc93c77c4dcc9a0305c727eddde9ced309cd7ec72ddcd27f73b11835cb9de090f1fe93c9bd442af8f50d26e9789a255813e774804fcc36bacc50117bfea3cc2e2670d65226978c683f76d40412a9aedc8b002c835196929716b90233fd60b5a27eeabc5d93097a941ca5adf1c11a7a92755a73f0530ffe6b53a92127fd3cd897cd1496adebe1f46154845c91ca99027541d8f2df7d41abb1b016276a6aee113dde179fe18365655014a5b764482c56ece0533ae791a70ee0f4a19047e3847c971a45eef444b1748320970550965d021f626d8dd17091c3efcc5a26f702040b5d85e13dab48b66ffee27048d4eaf3092df1bb70489a6d02e0650bf3cd6d8c04df31d1ec6c7ce051c61724829a860062a28593e1016f2c94bcfafc2db3970f92aa04f15b8594f6c3f0c6cba18c1776785eaddc3510ad8f75a583d71c99072b15333c6031f90237f41336fb4318dfcdc271cbcb369d0085d178cc3ed73cbb8593993a894a2f4f7183524f70dd499f14d9dc225e5017085d501d170c7644909c0327cc867d2c99b1f77b62f827d17eae3899218047c456cbebfded12cfdc86cd42a7da91f394668bc6f4855faae32fa3b2410e2ba2fecf55242866ff8d2b2d1b66fc25f6958bec72c4aa2bab40683b1dc552fd5462ca255e0613648781768ece01e03bee42bf386b5cf14e05935a1fa3951b89267e9a72406ef5f78e510f3b5ebb6b2b390839316f58c7907c0f2e7b4eb5478b833705d3264a1724bb64267a5f28e35ac556ba28779ad3a8c1dba38194e9e56e41532fe4892041f71b3c72bbd25b4c7e2d49f27701ea18cfb375b63453c762bbc0411198d862dfba97fc876955e57f05834784699a88e73ff41cb5268a689d66a950780c11e0f70357a6a8e77fa5cbcac6281d6b3346452a4df5eedeb5e4171f3116bcf8c06cc3db746416754adc6f1a07d27e5be3241b64b116e27635a9cda80725452b0922edad97939853d546212bba8935f849f930ce04f15e45a7addc4699f6e89beaee18434cc34d9513a5827783f24eac29bf6aa7b1195c1f914343b93ecdb000d42d0d0775700e3830d16323191801ffd7a083abaef2a92b924babbe5610a9e040505d7930b3f2a2f7d5df9d7a778bc757b96abe3a0c0a837c7e9b40d896d75bec67672ddfb8dda78cf27fc69bec9bd6448812b23ff02775c4f04cf7ee65e46f89e24f24b380e33239230944a83cce01faae8a043d227287dbf87b12f684a6b10e5783d36da7b3b4b9246d9ec22ee56ed002a7c2b4e3be2f6fce43a7ffd6c59cd0d8da1c36d6fd09e3e92087513a18f4fce3a3bf1e8d33e437bc982a5094e2f43d5be04a3bfdd26809ded456f22664b6be5b625e7ae122bd2da1788f8bc181934857104d345981ea48cf7a52b3c680aa836641006b1e41fbddbcc712cf58490a98179c7d778da01952391de5bcc3344bd7d8b26cb268afa1ea81ef9ed607d76713f0078338ca1fb4829e619253e20d2ca4ea7bf8b998ff00685ad333f034acd9cd7b1de23fa08ac8856caa898397df32a8eda57cc129d8713ca87ba645265eec454a7f91134f3b7631202b860027a753c84182cb23e1fc21e780be8c7bbe0fe44c01c3357863acd1b0bf433079a0ad2e5bd20055bf013948aeae92bee1e2136e9f11f9c30f27af907aac4c70e1f25dd786f9988d91ed1b50d156a4e0d862c2e157dcae4bbba5f689c9b6c22b71d4fe8d8d248be466e1146cd0a7457da77a3276a7b56ec9f523c8a262f96c4ea7992cb4d98d715e33232837de6feebb6970bf51174731c56481938cc83cc6def53db43c3ea37c4d845a03e5b32fe1150b01fe4d6eb57649f05abc74e81bbdaa180bf0215054ce1c74870fb7626ed50b894c7de80acd3db8bc073e02a5fad267264ee0c6892822cf0b8bc01c0bd925e95733a8a35fb5e52afccf5219529fdb94be4726368cd8f61e93bc6acdb1ecee71a6ba07e7a415bab37f2684f407c71e38f3f775579db6cffd4172e729405c002bd7410c8985b30fd01e8ca8b63b1e652e9b7dc857e6a1d439b326ad6480c7942ae6d661d7b9c61e5c0e852f5473da9b5d2d9664cd9fe1d0db7e2e2dd28244c9b8a028860cd510f7e98c1aa5dd913e3607ac8ce912894f8813adb3433860b6916c157d360d9da3a9b835303d1c10fef73fe58265bc44cb065052a875cb4960671763d821f1882eeda84b66c21db49776e34b7fc8ac98d113f13b2307ea16609b396b999f487860920265f6715886ecb198c219e7015e4bcda8d70df30bbf7d1d91cf7f5978de25959a5cbb95125519bed2ac8b7f707c0222a7839c614cab422ea19c95ae3a36945c2ed8a370fd6c237f3263a3d6bcc2100e745c6e26fd4edafb0e6d90d132d2bba8ffadcc4b6c85fad583b3a683b5773b3fc0f9e70dd56eb6b4aa54fa5a0da26642e778eeacee84bc4d94528e2a2a193c81423e0aa706d53257170b2d8ab0cf5327594f2b0fee91c57533694d46d1eee566a6eac553447c23ed27e9bffb78248302874b4d43cdd4bd27836e6344bd0736313b9540810e62c5efcfa2b863cd88e306b1f649324f820b8bd8fc6265bf16040344996fc392b4fa151e6d7de66052079b191503c56ad382af42c2985e78c5f9ced5359e3e5fb875982b19817b0e589001323a7a9acb38864c12cf73ab881c4a7329e450915842463ec9e49ac8ee35f25c22f23001596858ec46bd9cb70e9ef4a0c0b5e85ae35c312f088ed19bd17a0fd8ca8b8a60dcf81142214d5e575a6af58aa47b6de84745bbd42cc75c59d36b5c562c805c0060753a4b72f18b20e6e69874d693e3bc6ecb733de44e5a65de3fd3f00068c30ebeddf36b4b1e808528679f5068cc2644403a91e15c7465d6dc94eec57533938b9e52e1428895a217e21a08bcc5bdf8b1d48568d80e59c03b0e8315824fc0b49504d90e130d66177603af59ce84e0242bb4844bb42bf1826f3ac00dfd9f6f3f3d54d0eb01c1ab46907fbfda2b48dc683c361164fec4bff8a5ec2c6fa1f40562aa5f5ebfb58dad7f3dbfc95ee053daa045d42b9f9dbffaf16533a709e2be90b67e45ffb9397a39ad4761bf49e39745fa1a27b9f39257d05cd53f7f210716c72730e1c01dd9f12265e2ea1d37a8bfd87e86205a15b3019096c72580008fe75010804d60f49e70b846dcd5e59e03d9b8f1a8bba2a3ebe808afc5577b32b75d7a14d118824ab59198151737fe4e485c6e9fc04d99c8f1d8ebefc357d4008f0e250792da3b1025a502f81b4e07c4bfcf5c4178ea45179ba782ffbfca485ce035a45ad74690d2fd3a8c83ea544b0467c05a77cb7a4730152e3af0c84556d6b30dafe002bd7a097f2d7948644e2026b4e854b273b978ce02eb8196beb4f2c2616696102600e348e85d2804b5ad225dab473496711d154e8f5836114cb692d000e6ad0cffc7dfa7789a2250a07b37ba5e8c1e5459234004d796f8201d99695a53089b0b64fdba693654e02ec5ab293df63ca4f586e9575838e3829d743b7a2e79d32a6349cea6a62872754c2ee36ff33a7447e178c2939fbe731b712502c841b0f619ca4b01049eea9984cfbe545c2c036d35d4f83d59b153347323e68137d718c3d6df6cc86edbea4f37333a2e4d6eb50a7c1d5ed8860f3ced015cdb86aa5de1401b6ca1ee24908a8d22a3e69652bd23842960b992b9cec74b94e2622a283b14c0835926996db28b23aec0193fd4b73f8f33e4303d5f6b55f3835014f93ce59bf87bd050d6aacb56a89d9978d8bdbf882f5f47f4bb79cb47422d630338c2b4ad7bfbd9ab5a1b285be56fac14fc105154e11ad8b1740393d37a1c919b70893549bdbb5bb92a1e51c682dd889fcd7394933f60c7318652a92df65d961ae21adb220b9f5f44d5990cd5e662b04d3d8a6a8254836037656e44561373ea8fd5fd52b1cb2ab637688bdd19f82052d2d44cbbd906e033e1f50496e6cae65a0f2d755332da9466c6b85b33a275aa560e03c8e086f1426cffb6de21dd8ae60e58ca2edd46052afc5acfdd148ff523ee32c124ae37aa31c41854920078832ce80b61d91a0aad990a894bdd7f505f50ac2a50787097735053a6b0625f8b67036217fd3063c56496c6ce6b4d751068fbaeae1ccdeca4f839e4ca95ee3672d9a84d63b125adf53c8a369e859e66f5d3d617c74e4d2a74f7e3c743e28a304686d637f17bc2c36f04d11d863b7d72b15cb280dfbb974e1d9e703f1521e8113d48199c4d928fe4fb394f96d814cf4b0655fb13333d4fb61266a2106c6a2418651bf7af76e00d9b413f517328171cd6de78742465c7805beec01f83d9877d636402183dec4c3eafb4640255219c5e4afbd6f9ac05286b6b9fe7c01b501e10841725131e81783232c3b1548c2ba65d069452d704e1c8bd69418df693cefe6f9b979b6648e0fb02d5a441647cc52ce38c99fd52eb3c678ddc7740728137e2fd20a3d383472d522791446e52cd1c159c4caeb29a4d80655be56e3171e5af447a8a5221c5c735587abf2cc064dbd2ef2668c3958d8ee3b67e59221e9d43c9485455a28ab63841ef8951fb08510a60a1a50563f546ff67c632f25292e9015ae5a6d37644bcc77a1c913336897ec105bffd3", "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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m33.848565911s ago: executing program 5 (id=3797): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_ALM_SET(r0, 0x40187013, &(0x7f0000000040)={0x1, 0x2e, 0xf, 0x3, 0x7, 0xd, 0x6, 0xa0, 0x1}) signalfd(r0, &(0x7f0000000000)={[0x1000]}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r4 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x0, 0x4000010) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000e9ffffffff141000"/30], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 18m32.893825806s ago: executing program 5 (id=3800): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = gettid() clock_nanosleep(0x2, 0x1, &(0x7f0000000040)={0x77359400}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/rt6_stats\x00') r2 = openat(r1, &(0x7f0000000e00)='nfsd.export/channel\x00', 0x2, 0x0) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/91, 0x5b) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = socket(0x28, 0x5, 0x0) read$FUSE(r2, &(0x7f0000002d80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) migrate_pages(r4, 0x8, &(0x7f0000004dc0)=0x2, &(0x7f0000004e00)=0x8) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) 18m32.609011163s ago: executing program 5 (id=3802): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a801000000000030e000000080018004e204e201400bf002001000000000000000000000000000114000200fc0000000000000000000000000000047a7ef2822ec3cabaf0934890e7cd296b943fc836830ac64de5d0fe6c43a00d05570c05b4f79f3e140953881cc6d8a393117ea00b886f7fc25d6fdefcd955b6e554fcee7a743727b4"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 18m31.087963092s ago: executing program 5 (id=3803): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x8, 0x0, 0x0, 0xf7, 0x42}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 18m23.878447908s ago: executing program 5 (id=3807): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x10, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 18m22.547328402s ago: executing program 5 (id=3812): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = gettid() clock_nanosleep(0x2, 0x1, &(0x7f0000000040)={0x77359400}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/rt6_stats\x00') r2 = openat(r1, &(0x7f0000000e00)='nfsd.export/channel\x00', 0x2, 0x0) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/91, 0x5b) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = socket(0x28, 0x5, 0x0) read$FUSE(r2, &(0x7f0000002d80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) migrate_pages(r4, 0x8, &(0x7f0000004dc0)=0x2, &(0x7f0000004e00)=0x8) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) 2m45.140000497s ago: executing program 3 (id=4686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x8, 0x0, 0x0, 0xf7, 0x42}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r4, 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = fanotify_init(0x8, 0x2) write$P9_RSYMLINK(r8, &(0x7f0000000340)={0x14, 0x11, 0x0, {0x0, 0x4}}, 0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004010) 2m42.010495187s ago: executing program 3 (id=4689): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x600, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, 0x0) write(r1, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80, 0x1}) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="674cca217bb4236c83f33ba287e7879c0674862fcf3cc1e67376c6c857085ea5", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) r8 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, &(0x7f0000000280)='\x00', 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/94, 0x5e, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) 2m37.183421212s ago: executing program 3 (id=4691): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002200)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f000076e000/0x2000)=nil, 0x2000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x1906) 2m36.094016689s ago: executing program 3 (id=4693): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$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") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a801000000000030e000000080018004e204e201400bf002001000000000000000000000000000114000200fc0000000000000000000000000000047a7ef2822ec3cabaf0934890e7cd296b943fc836830ac64de5d0fe6c43a00d05570c05b4f79f3e140953881cc6d8a393117ea00b886f7fc25d6fdefcd955b6e554fcee7a743727b4"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 2m32.339725445s ago: executing program 3 (id=4697): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x74) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x12443) pselect6(0x40, &(0x7f0000000040)={0x9, 0x7, 0x1, 0x300, 0x0, 0x10000000, 0xfffffffffffffffd, 0xb}, 0x0, &(0x7f0000000100)={0x9, 0x3, 0x2, 0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) 2m28.295600388s ago: executing program 3 (id=4700): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$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") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a801000000000030e000000080018004e204e201400bf002001000000000000000000000000000114000200fc0000000000000000000000000000047a7ef2822ec3cabaf0934890e7cd296b943fc836830ac64de5d0fe6c43a00d05570c05b4f79f3e140953881cc6d8a393117ea00b886f7fc25d6fdefcd955b6e554fcee7a743727b4"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 2m11.647064793s ago: executing program 33 (id=4700): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$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") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a801000000000030e000000080018004e204e201400bf002001000000000000000000000000000114000200fc0000000000000000000000000000047a7ef2822ec3cabaf0934890e7cd296b943fc836830ac64de5d0fe6c43a00d05570c05b4f79f3e140953881cc6d8a393117ea00b886f7fc25d6fdefcd955b6e554fcee7a743727b4"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 21.424837363s ago: executing program 2 (id=4810): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$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") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a801000000000030e000000080018004e204e201400bf002001000000000000000000000000000114000200fc0000000000000000000000000000047a7ef2822ec3cabaf0934890e7cd296b943fc836830ac64de5d0fe6c43a00d05570c05b4f79f3e140953881cc6d8a393117ea00b886f7fc25d6fdefcd955b6e554fcee7a743727b4"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 18.129897817s ago: executing program 2 (id=4814): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x600, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, 0x0) write(r1, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000140)={0x0, 0xaa32, 0x8, 0x1, 0x75}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80, 0x1}) socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043e130600c8000700ffff"], 0x16) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="674cca217bb4236c83f33ba287e7879c0674862fcf3cc1e67376c6c857085ea5", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) r11 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, 0x0, &(0x7f0000000280)='\x00', 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/94, 0x5e, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) 15.68627824s ago: executing program 2 (id=4816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x8, 0x0, 0x0, 0xf7, 0x42}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r4, 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = fanotify_init(0x8, 0x2) write$P9_RSYMLINK(r8, &(0x7f0000000340)={0x14, 0x11, 0x0, {0x0, 0x4}}, 0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004010) 15.636012621s ago: executing program 1 (id=4817): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$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") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 14.417902882s ago: executing program 4 (id=4819): socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000880)={{0x3, 0x3, 0x6c32, 0x3, '\x00', 0x3}, 0x3, 0x100, 0x5, r2, 0x4, 0x4, 'syz1\x00', &(0x7f0000000440)=['\\*+,-@U@{\x00', '\x1d\x00', '\x00', '\x00'], 0xe}) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f00000000000000', 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='net_cls.classid\x00', 0x2, 0x0) userfaultfd(0x80001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400d4}, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="89d56a6fc2ff6a07", 0x8, 0x10, 0x0, 0x0) 12.212503018s ago: executing program 1 (id=4820): socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000880)={{0x3, 0x3, 0x6c32, 0x3, '\x00', 0x3}, 0x3, 0x100, 0x5, r2, 0x4, 0x4, 'syz1\x00', &(0x7f0000000440)=['\\*+,-@U@{\x00', '\x1d\x00', '\x00', '\x00'], 0xe}) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f00000000000000', 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='net_cls.classid\x00', 0x2, 0x0) userfaultfd(0x80001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400d4}, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="89d56a6fc2ff6a07", 0x8, 0x10, 0x0, 0x0) 12.164651719s ago: executing program 4 (id=4821): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$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") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 11.069393757s ago: executing program 1 (id=4822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) 9.79157206s ago: executing program 4 (id=4823): socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000880)={{0x3, 0x3, 0x6c32, 0x3, '\x00', 0x3}, 0x3, 0x100, 0x5, r2, 0x4, 0x4, 'syz1\x00', &(0x7f0000000440)=['\\*+,-@U@{\x00', '\x1d\x00', '\x00', '\x00'], 0xe}) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f00000000000000', 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='net_cls.classid\x00', 0x2, 0x0) userfaultfd(0x80001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400d4}, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="89d56a6fc2ff6a07", 0x8, 0x10, 0x0, 0x0) 8.453041784s ago: executing program 4 (id=4824): socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000880)={{0x3, 0x3, 0x6c32, 0x3, '\x00', 0x3}, 0x3, 0x100, 0x5, r2, 0x5, 0x4, 'syz1\x00', &(0x7f0000000440)=['\'{@&^\x00', '\\*+,-@U@{\x00', '\x1d\x00', '\x00', '\x00'], 0x14}) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='net_cls.classid\x00', 0x2, 0x0) userfaultfd(0x80001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400d4}, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="89d56a6fc2ff6a07", 0x8, 0x10, 0x0, 0x0) 7.366641682s ago: executing program 4 (id=4825): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$eJzs3MtvG8UfAPDvruv03ab9PaAPIFAQEY+kSQv0wAUEUi9ISIBUjiFNq9K0QU2QaFXRFKFyRP0LgCMSfwEnuCDgBOIKEhckhFShXiicFq29mzgPp7ZjJ4R8PpLbmd0Zz3x3d+zxjp0ANq2B/J8kYldE/NgXsbeeXVhgoP7fndtXx/+8fXU8iSx75fekVu6P21fHy6JlvZ1FZjCNSN9P4tAy7U5fvnJ+bHJy4lKRH5658Nbw9OUrT567MHZ24uzExdETJ44fG3nm6dGnuhLn7ryvB9+dOnzg5Os3Xxo/dfONbz7Lt+8q9jfGUdff8nNvb7J9IAYWHssGj0T8kmVZy2380+1uSCdbWqiwp4edoWWViMhPVzUf/7E3KjF/8vbGi++ta+eAnsqyLNu6ZGulTMxmwL9YEk13pWvaEWCNlW/0+eff8rGG0491d+u5+gegPO47xaO+Z0ukRZnqos+33TQQEadm//oof8Sy9yEAALrri3z+88Ry8780/t9Qbk/U14b6I2JfROyPiP9ExH8j4n8RtbL3RMS9bbafz3/27ZrPL53/fN9seaUr8vnfs8Xa1vz8r68Wf6G/UuR21+KvJmfOTU4cLY7JYFS35vmRFdr48oUfPpzLbFu4r3H+lz/y9su5YF3625ZFN+hOj82MdSH0mlvX5wJdNP9N5lYCkog4EBEHO3j+/Jide+zTw8323z3+FbSyznQX2ScRj9bP/2wsir+UrLw+ObwtJieODpdXxVLffnfj5Wbtryr+Lrh1PWLHkus/GuPvTxrXa6fbb+PGTx80/UzT6fXfl7xaS/cV294Zm5m5NBLRl8wu3T46X7fMl+Xz+AePLBd/WnuOj4t6hyIiv4jvi4j7I+KBou8PRsRDEXFkhfi/fv7hNzuPv7fy+E+3df7bT1TOf/V5s/ZbO//Ha6nBYksrr3+tdnA1xw4AAAA2irT2HfgkHZpLp+nQUMRrtXu7O9LJqemZx89MvX3xdP278v1RTcs7XWnD/dCR4t5wmR9dlD9Wu2+cZVm2vZYfGp+a7NWaOtCanU3Gf+7Xynr3Dui5ttbRmv2iDdiQ2hr/S38tBGxgXfgeDbBBtTr+qz3uB7D2vP/D5rXc+L8WcWcdugKsMe//sHkZ/7B5Gf+weRn/sCmt5nf9KyX2n+y4eraq1su/r9Jh9Z97cjRWSlQ6rb61jT9z0INEpMvuqkbEuvSnrUTauybyi6+9WvmJbLXwtU4v7LYTC14m+tbjtQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAb/g4AAP//rxHhTg==") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 7.348230722s ago: executing program 2 (id=4826): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$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") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a801000000000030e000000080018004e204e201400bf002001000000000000000000000000000114000200fc0000000000000000000000000000047a7ef2822ec3cabaf0934890e7cd296b943fc836830ac64de5d0fe6c43a00d05570c05b4f79f3e140953881cc6d8a393117ea00b886f7fc25d6fdefcd955b6e554fcee7a743727b4"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 6.957053612s ago: executing program 1 (id=4827): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0xf1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1a0, 0x0, 0x8}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r4, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/55, 0x37}, {0x0}, {&(0x7f0000000600)=""/136, 0x88}, {&(0x7f0000000740)=""/121, 0x79}, {&(0x7f00000007c0)=""/63, 0x3f}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000a80)=""/72, 0x48}, {0x0}], 0x2}, 0x5}], 0x2, 0x40, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000005280), 0x402, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e", 0x2b}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x10000) 5.560427558s ago: executing program 2 (id=4828): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x74) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x12443) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x9, 0x3, 0x2, 0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) 2.134912575s ago: executing program 1 (id=4829): socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000880)={{0x3, 0x3, 0x6c32, 0x3, '\x00', 0x3}, 0x3, 0x100, 0x5, r2, 0x5, 0x4, 'syz1\x00', &(0x7f0000000440)=['\'{@&^\x00', '\\*+,-@U@{\x00', '\x1d\x00', '\x00', '\x00'], 0x14}) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='net_cls.classid\x00', 0x2, 0x0) userfaultfd(0x80001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400d4}, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="89d56a6fc2ff6a07", 0x8, 0x10, 0x0, 0x0) 2.089991836s ago: executing program 4 (id=4830): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x600, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, 0x0) write(r1, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000140)={0x0, 0xaa32, 0x8, 0x1, 0x75}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x80, 0x1}) socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043e130600c8000700ffff"], 0x16) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="674cca217bb4236c83f33ba287e7879c0674862fcf3cc1e67376c6c857085ea5", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) r11 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, 0x0, &(0x7f0000000280)='\x00', 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/94, 0x5e, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) 2.061571957s ago: executing program 2 (id=4831): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$eJzs3MtvG8UfAPDvruv03ab9PaAPIFAQEY+kSQv0wAUEUi9ISIBUjiFNq9K0QU2QaFXRFKFyRP0LgCMSfwEnuCDgBOIKEhckhFShXiicFq29mzgPp7ZjJ4R8PpLbmd0Zz3x3d+zxjp0ANq2B/J8kYldE/NgXsbeeXVhgoP7fndtXx/+8fXU8iSx75fekVu6P21fHy6JlvZ1FZjCNSN9P4tAy7U5fvnJ+bHJy4lKRH5658Nbw9OUrT567MHZ24uzExdETJ44fG3nm6dGnuhLn7ryvB9+dOnzg5Os3Xxo/dfONbz7Lt+8q9jfGUdff8nNvb7J9IAYWHssGj0T8kmVZy2380+1uSCdbWqiwp4edoWWViMhPVzUf/7E3KjF/8vbGi++ta+eAnsqyLNu6ZGulTMxmwL9YEk13pWvaEWCNlW/0+eff8rGG0491d+u5+gegPO47xaO+Z0ukRZnqos+33TQQEadm//oof8Sy9yEAALrri3z+88Ry8780/t9Qbk/U14b6I2JfROyPiP9ExH8j4n8RtbL3RMS9bbafz3/27ZrPL53/fN9seaUr8vnfs8Xa1vz8r68Wf6G/UuR21+KvJmfOTU4cLY7JYFS35vmRFdr48oUfPpzLbFu4r3H+lz/y9su5YF3625ZFN+hOj82MdSH0mlvX5wJdNP9N5lYCkog4EBEHO3j+/Jide+zTw8323z3+FbSyznQX2ScRj9bP/2wsir+UrLw+ObwtJieODpdXxVLffnfj5Wbtryr+Lrh1PWLHkus/GuPvTxrXa6fbb+PGTx80/UzT6fXfl7xaS/cV294Zm5m5NBLRl8wu3T46X7fMl+Xz+AePLBd/WnuOj4t6hyIiv4jvi4j7I+KBou8PRsRDEXFkhfi/fv7hNzuPv7fy+E+3df7bT1TOf/V5s/ZbO//Ha6nBYksrr3+tdnA1xw4AAAA2irT2HfgkHZpLp+nQUMRrtXu7O9LJqemZx89MvX3xdP278v1RTcs7XWnD/dCR4t5wmR9dlD9Wu2+cZVm2vZYfGp+a7NWaOtCanU3Gf+7Xynr3Dui5ttbRmv2iDdiQ2hr/S38tBGxgXfgeDbBBtTr+qz3uB7D2vP/D5rXc+L8WcWcdugKsMe//sHkZ/7B5Gf+weRn/sCmt5nf9KyX2n+y4eraq1su/r9Jh9Z97cjRWSlQ6rb61jT9z0INEpMvuqkbEuvSnrUTauybyi6+9WvmJbLXwtU4v7LYTC14m+tbjtQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAb/g4AAP//rxHhTg==") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a801000000000030e000000080018004e204e201400bf002001000000000000000000000000000114000200fc0000000000000000000000000000047a7ef2822ec3cabaf0934890e7cd296b943fc836830ac64de5d0fe6c43a00d05570c05b4f79f3e140953881cc6d8a393117ea00b886f7fc25d6fdefcd955b6e554fcee7a743727b4"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 0s ago: executing program 1 (id=4832): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$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") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0081001000080049000038000200000106", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a801000000000030e000000080018004e204e201400bf002001000000000000000000000000000114000200fc0000000000000000000000000000047a7ef2822ec3cabaf0934890e7cd296b943fc836830ac64de5d0fe6c43a00d05570c05b4f79f3e140953881cc6d8a393117ea00b886f7fc25d6fdefcd955b6e554fcee7a743727b4"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) kernel console output (not intermixed with test programs): an invalid length. [ 1926.131275][T23244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1926.214523][T23244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1926.415383][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4708'. [ 1926.447709][T23244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1926.474435][T23385] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4708'. [ 1926.511981][T23244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1926.539536][T23244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1926.605880][T23244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1926.608492][T23388] loop4: detected capacity change from 0 to 512 [ 1926.739337][T23388] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1926.751653][T23388] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1926.802317][T23244] device hsr_slave_0 entered promiscuous mode [ 1926.816697][T23388] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1926.858141][T23388] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.4709: attempt to clear invalid blocks 2 len 1 [ 1926.959225][T23244] device hsr_slave_1 entered promiscuous mode [ 1926.971037][T23388] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4709: invalid indirect mapped block 1819239214 (level 0) [ 1927.634415][T23388] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4709: invalid indirect mapped block 1819239214 (level 1) [ 1927.787965][T23388] EXT4-fs (loop4): 1 truncate cleaned up [ 1927.794243][T23388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1929.063306][T23405] loop1: detected capacity change from 0 to 512 [ 1929.075465][T14564] EXT4-fs (loop4): unmounting filesystem. [ 1929.558585][T23405] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1929.689267][T23405] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1929.704175][T23405] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1929.768273][T23405] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.4712: attempt to clear invalid blocks 2 len 1 [ 1929.898580][T23405] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4712: invalid indirect mapped block 1819239214 (level 0) [ 1929.964400][T23405] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4712: invalid indirect mapped block 1819239214 (level 1) [ 1930.202316][T23405] EXT4-fs (loop1): 1 truncate cleaned up [ 1930.334923][T23405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1930.829067][T14893] EXT4-fs (loop3): unmounting filesystem. [ 1931.227662][T13955] Bluetooth: hci4: unexpected subevent 0x06 length: 18 > 10 [ 1931.428595][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.428724][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.428814][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.428881][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.428949][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.429178][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.429247][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.429313][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.429380][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.429447][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.429554][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.429622][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.429688][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.429756][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.429822][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.429889][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.429955][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430023][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430185][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430253][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430321][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430365][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430432][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430545][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430613][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430680][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430747][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430814][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430881][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430948][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.430970][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.431036][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.431102][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.431320][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.431410][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.431477][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.431550][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.431618][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.431684][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.431751][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.431819][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.431885][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.431953][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.432020][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.432085][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.432161][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.432408][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.432476][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.432551][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.432618][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.432685][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.432752][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.432819][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.432885][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.432952][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.433019][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.433086][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.433153][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.433219][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.433286][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.433501][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.433598][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.433666][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.433732][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.433800][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.433866][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.433933][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.434000][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.434045][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.434135][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.434202][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.434269][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.434335][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.434559][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.434649][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.434716][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.434783][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.434850][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.434916][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.434983][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.435050][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.435117][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.435184][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.435250][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.435317][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.435385][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.435588][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.435679][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.435746][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.435812][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.435879][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.435946][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.436013][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.436081][T13981] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1931.453961][T13981] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1932.532734][T15051] EXT4-fs (loop1): unmounting filesystem. [ 1932.534179][T23426] loop2: detected capacity change from 0 to 512 [ 1932.673748][T23426] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1932.721151][T23422] fido_id[23422]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1932.747848][T23426] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1932.795861][T23430] loop4: detected capacity change from 0 to 512 [ 1932.822518][T23426] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1932.881473][T23430] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1932.897500][T23426] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.4717: attempt to clear invalid blocks 2 len 1 [ 1932.927740][T23426] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4717: invalid indirect mapped block 1819239214 (level 0) [ 1932.952285][T23430] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1932.963992][T23430] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1932.981811][T23438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4718'. [ 1933.057288][T23430] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.4716: attempt to clear invalid blocks 2 len 1 [ 1933.075006][T23426] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4717: invalid indirect mapped block 1819239214 (level 1) [ 1933.109688][T23430] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4716: invalid indirect mapped block 1819239214 (level 0) [ 1933.125491][T23426] EXT4-fs (loop2): 1 truncate cleaned up [ 1933.169341][T23426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1933.189202][T23436] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4718'. [ 1933.222205][T23430] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4716: invalid indirect mapped block 1819239214 (level 1) [ 1933.267105][ T4288] Bluetooth: hci4: command 0x2021 tx timeout [ 1933.293225][T23430] EXT4-fs (loop4): 1 truncate cleaned up [ 1933.490109][T23430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1934.588799][T13955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1934.600599][T13946] EXT4-fs (loop2): unmounting filesystem. [ 1934.679496][T13955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1934.961177][T13955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1934.972653][T13955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1935.358294][T13955] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1935.365861][T13955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1937.418991][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 1938.148686][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1938.449776][T14564] EXT4-fs (loop4): unmounting filesystem. [ 1939.013498][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.497419][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 1941.179446][T23460] netlink: 'syz.2.4719': attribute type 10 has an invalid length. [ 1941.577535][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 1942.469782][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.657539][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 1945.688775][T23504] netlink: 'syz.1.4723': attribute type 10 has an invalid length. [ 1945.852711][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.171271][T23531] netlink: 'syz.1.4727': attribute type 10 has an invalid length. [ 1950.381868][T23244] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1950.418669][T23244] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1950.472455][T23244] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1950.522798][T23244] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1951.762571][T23556] syz.2.4732: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1952.382655][T23564] overlayfs: failed to resolve './file1': -2 [ 1952.607066][T23556] CPU: 1 PID: 23556 Comm: syz.2.4732 Not tainted syzkaller #0 [ 1952.614599][T23556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1952.624785][T23556] Call Trace: [ 1952.628187][T23556] [ 1952.631139][T23556] dump_stack_lvl+0x188/0x24e [ 1952.635938][T23556] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1952.642457][T23556] ? show_regs_print_info+0x12/0x12 [ 1952.647677][T23556] ? load_image+0x410/0x410 [ 1952.652207][T23556] ? __rcu_read_unlock+0x78/0xd0 [ 1952.657160][T23556] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1952.663588][T23556] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1952.670278][T23556] warn_alloc+0x242/0x330 [ 1952.674624][T23556] ? __sched_text_start+0x8/0x8 [ 1952.679499][T23556] ? zone_watermark_ok_safe+0x270/0x270 [ 1952.685153][T23556] ? preempt_schedule+0xbc/0xd0 [ 1952.690020][T23556] ? preempt_schedule_common+0xa5/0xd0 [ 1952.695516][T23556] ? preempt_schedule+0xbc/0xd0 [ 1952.700590][T23556] ? schedule_preempt_disabled+0x20/0x20 [ 1952.706349][T23556] ? __mutex_trylock_common+0x15c/0x260 [ 1952.711925][T23556] __vmalloc_node_range+0x11e/0x1380 [ 1952.717229][T23556] ? preempt_schedule_thunk+0x16/0x18 [ 1952.722623][T23556] ? __mutex_lock+0x1bf/0xae0 [ 1952.727327][T23556] ? __kmem_cache_free+0xb6/0x200 [ 1952.732658][T23556] ? tomoyo_path_number_perm+0x205/0x650 [ 1952.738319][T23556] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1952.744139][T23556] ? dvb_dvr_do_ioctl+0x75/0x220 [ 1952.749461][T23556] ? tomoyo_path_number_perm+0x205/0x650 [ 1952.755144][T23556] ? free_vm_area+0x50/0x50 [ 1952.760214][T23556] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 1952.765359][T23556] vmalloc+0x75/0x80 [ 1952.769453][T23556] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 1952.774621][T23556] dvb_dvr_do_ioctl+0x12a/0x220 [ 1952.779545][T23556] dvb_usercopy+0x191/0x2b0 [ 1952.784191][T23556] ? dvb_dvr_release+0x3d0/0x3d0 [ 1952.789157][T23556] ? dvb_generic_ioctl+0xb0/0xb0 [ 1952.794425][T23556] ? dvb_dvr_poll+0x230/0x230 [ 1952.799581][T23556] dvb_dvr_ioctl+0x25/0x30 [ 1952.804196][T23556] __se_sys_ioctl+0xfa/0x170 [ 1952.808898][T23556] do_syscall_64+0x4c/0xa0 [ 1952.813440][T23556] ? clear_bhb_loop+0x60/0xb0 [ 1952.818194][T23556] ? clear_bhb_loop+0x60/0xb0 [ 1952.822927][T23556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1952.829068][T23556] RIP: 0033:0x7fec2219e0d9 [ 1952.833522][T23556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1952.853513][T23556] RSP: 002b:00007fec230ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1952.862051][T23556] RAX: ffffffffffffffda RBX: 00007fec22425fa0 RCX: 00007fec2219e0d9 [ 1952.870126][T23556] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000006 [ 1952.878124][T23556] RBP: 00007fec22235024 R08: 0000000000000000 R09: 0000000000000000 [ 1952.886120][T23556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1952.894105][T23556] R13: 00007fec22426038 R14: 00007fec22425fa0 R15: 00007fff9d3131f8 [ 1952.902285][T23556] [ 1952.922042][ T9] tipc: Left network mode [ 1953.195921][T23244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1953.301529][T23556] Mem-Info: [ 1953.304790][T23556] active_anon:39854 inactive_anon:0 isolated_anon:0 [ 1953.304790][T23556] active_file:11399 inactive_file:40761 isolated_file:0 [ 1953.304790][T23556] unevictable:768 dirty:129 writeback:0 [ 1953.304790][T23556] slab_reclaimable:21526 slab_unreclaimable:104351 [ 1953.304790][T23556] mapped:34952 shmem:35170 pagetables:650 [ 1953.304790][T23556] sec_pagetables:0 bounce:0 [ 1953.304790][T23556] kernel_misc_reclaimable:0 [ 1953.304790][T23556] free:1270522 free_pcp:2156 free_cma:0 [ 1954.176807][T23556] Node 0 active_anon:159676kB inactive_anon:0kB active_file:45540kB inactive_file:162840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139788kB dirty:456kB writeback:0kB shmem:139144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11312kB pagetables:2612kB sec_pagetables:0kB all_unreclaimable? no [ 1956.006054][T23556] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1956.100818][T23445] chnl_net:caif_netlink_parms(): no params data found [ 1956.213808][T23583] netlink: 'syz.4.4735': attribute type 10 has an invalid length. [ 1956.454231][T23556] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1956.634201][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1956.706608][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1956.941324][T23556] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1956.971074][T23556] Node 0 DMA32 free:1148200kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:159420kB inactive_anon:0kB active_file:45540kB inactive_file:162840kB unevictable:1536kB writepending:468kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:10068kB local_pcp:8060kB free_cma:0kB [ 1956.979683][T23244] 8021q: adding VLAN 0 to HW filter on device team0 [ 1957.006103][T23556] lowmem_reserve[]: 0 0 1 1 1 [ 1957.015565][T23556] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 1957.048915][T23556] lowmem_reserve[]: 0 0 0 0 0 [ 1957.053928][T23556] Node 1 Normal free:3916852kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1957.084198][T23556] lowmem_reserve[]: 0 0 0 0 0 [ 1957.089206][T23556] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1957.102806][T23556] Node 0 DMA32: 1060*4kB (UME) 1005*8kB (UME) 607*16kB (ME) 264*32kB (UME) 571*64kB (UME) 193*128kB (UME) 49*256kB (UME) 13*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 252*4096kB (UM) = 1148200kB [ 1957.126433][T23556] Node 0 Normal: 3*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1957.148316][T23556] Node 1 Normal: 235*4kB (UE) 49*8kB (UME) 44*16kB (UME) 226*32kB (UME) 94*64kB (UME) 31*128kB (UE) 19*256kB (UM) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 949*4096kB (M) = 3916852kB [ 1958.167083][T23556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1958.241227][T23556] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1958.298155][T23556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1958.363483][T23556] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1958.401197][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1958.415229][T23556] 87328 total pagecache pages [ 1958.443873][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1958.527181][T23556] 0 pages in swap cache [ 1958.531618][T23556] Free swap = 124372kB [ 1958.535788][T23556] Total swap = 124996kB [ 1958.573277][T23556] 2097051 pages RAM [ 1958.584861][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1958.592083][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1958.617356][T23556] 0 pages HighMem/MovableOnly [ 1959.397191][T23556] 415222 pages reserved [ 1959.416420][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1959.423263][T23556] 0 pages cma reserved [ 1959.425478][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1959.454025][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1959.461255][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1959.507899][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1959.690568][T23606] netlink: 'syz.1.4738': attribute type 10 has an invalid length. [ 1959.715736][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1959.910980][T23445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1959.922545][T23445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.938138][T23445] device bridge_slave_0 entered promiscuous mode [ 1960.016251][T23445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1960.028624][T23445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1960.047289][T23445] device bridge_slave_1 entered promiscuous mode [ 1960.218079][T23445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1960.334549][T23445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1960.396786][T23445] team0: Port device team_slave_0 added [ 1960.414528][T23445] team0: Port device team_slave_1 added [ 1960.453734][T23445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1960.460929][T23445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1960.489262][T23445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1960.590853][T23445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1960.607413][T23445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1960.634363][T23445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1960.694527][ T9] device hsr_slave_0 left promiscuous mode [ 1960.711494][ T9] device hsr_slave_1 left promiscuous mode [ 1960.718735][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1960.726684][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1960.735832][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1960.743677][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1960.755327][ T9] device bridge_slave_0 left promiscuous mode [ 1960.772733][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1960.823094][ T9] device veth1_macvtap left promiscuous mode [ 1960.839627][ T9] device veth0_macvtap left promiscuous mode [ 1960.845911][ T9] device veth1_vlan left promiscuous mode [ 1960.868223][ T9] device veth0_vlan left promiscuous mode [ 1961.431632][ T4288] Bluetooth: hci0: unexpected subevent 0x06 length: 18 > 10 [ 1961.434215][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1963.050704][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1963.132835][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1963.223931][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1963.373194][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1963.497055][ T4288] Bluetooth: hci0: command 0x2021 tx timeout [ 1963.536013][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1963.690477][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1963.837936][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1963.988355][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1964.131764][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1964.208709][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1964.253119][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1964.359007][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1964.446782][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1964.498839][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1964.534304][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1964.566245][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1964.636425][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1964.720843][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1964.807324][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1964.883572][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1964.957937][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.050412][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.114936][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.185092][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.198991][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.203006][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1965.206643][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.218336][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1965.227498][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.238432][T13955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1965.248686][T13955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1965.255764][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.257537][T13955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1965.263407][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.271775][T13955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1965.287878][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.295655][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.311401][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.321104][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.331451][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.342116][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.352798][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.362855][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.373354][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.381317][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.389457][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.397298][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.405269][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.412949][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.420653][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.428763][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.437747][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.445427][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.453282][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.460776][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.468590][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.476055][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.483606][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.491199][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.498952][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.506568][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.514286][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.521905][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.529427][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.537148][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.544573][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.552551][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.560692][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.568298][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.575937][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.584417][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.592441][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.600146][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.607860][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.615567][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.623358][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.630823][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.638719][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.646402][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.654328][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.662360][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.669949][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.677433][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.684842][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.692393][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.699926][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.707526][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.715888][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.723753][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.731372][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.739116][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.746890][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.754641][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.762361][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.770184][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.777795][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.785375][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.792913][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.800927][T13981] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1965.816156][T13981] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1966.069694][T23667] fido_id[23667]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1966.155276][T23674] loop4: detected capacity change from 0 to 512 [ 1967.347051][T13955] Bluetooth: hci2: command 0x0409 tx timeout [ 1967.954200][T23674] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1968.026681][T23674] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1968.218935][T23674] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1968.402469][T23674] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.4743: attempt to clear invalid blocks 2 len 1 [ 1968.512689][T23674] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4743: invalid indirect mapped block 1819239214 (level 0) [ 1968.578198][T23674] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4743: invalid indirect mapped block 1819239214 (level 1) [ 1968.717674][T23674] EXT4-fs (loop4): 1 truncate cleaned up [ 1968.723429][T23674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1969.956516][T13955] Bluetooth: hci2: command 0x041b tx timeout [ 1971.200308][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1971.610696][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1971.752334][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1971.830804][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1971.898388][ T9] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1971.977463][T13955] Bluetooth: hci2: command 0x040f tx timeout [ 1972.121523][ T127] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1972.296481][ T9] bond0 (unregistering): Released all slaves [ 1972.307123][ T127] usb 2-1: Using ep0 maxpacket: 8 [ 1972.314167][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 110, changing to 10 [ 1972.325939][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26466, setting to 1024 [ 1972.339868][ T127] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1972.349281][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.384338][ T127] usb 2-1: config 0 descriptor?? [ 1972.390609][T23695] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1972.462342][T23680] netlink: 'syz.2.4745': attribute type 10 has an invalid length. [ 1972.580219][T14564] EXT4-fs (loop4): unmounting filesystem. [ 1972.626521][ T127] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1972.754605][T23445] device hsr_slave_0 entered promiscuous mode [ 1972.769008][T23445] device hsr_slave_1 entered promiscuous mode [ 1972.776731][T23445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1972.786294][T23445] Cannot create hsr debugfs directory [ 1972.846063][T23697] syz.4.4749: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1972.866368][T23697] CPU: 1 PID: 23697 Comm: syz.4.4749 Not tainted syzkaller #0 [ 1972.873999][T23697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1972.884214][T23697] Call Trace: [ 1972.887504][T23697] [ 1972.890434][T23697] dump_stack_lvl+0x188/0x24e [ 1972.895211][T23697] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1972.901748][T23697] ? show_regs_print_info+0x12/0x12 [ 1972.907240][T23697] ? load_image+0x410/0x410 [ 1972.911789][T23697] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1972.918695][T23697] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1972.925410][T23697] warn_alloc+0x242/0x330 [ 1972.929793][T23697] ? zone_watermark_ok_safe+0x270/0x270 [ 1972.935397][T23697] ? __mutex_trylock_common+0x15c/0x260 [ 1972.941014][T23697] __vmalloc_node_range+0x11e/0x1380 [ 1972.946536][T23697] ? rcu_is_watching+0x11/0xa0 [ 1972.951350][T23697] ? trace_contention_end+0x5f/0x170 [ 1972.956685][T23697] ? __mutex_lock+0x1ab/0xae0 [ 1972.961494][T23697] ? __kmem_cache_free+0xb6/0x200 [ 1972.966573][T23697] ? tomoyo_path_number_perm+0x205/0x650 [ 1972.972544][T23697] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1972.978312][T23697] ? dvb_dvr_do_ioctl+0x75/0x220 [ 1972.983292][T23697] ? tomoyo_path_number_perm+0x205/0x650 [ 1972.989251][T23697] ? free_vm_area+0x50/0x50 [ 1972.993802][T23697] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 1972.999044][T23697] vmalloc+0x75/0x80 [ 1973.003072][T23697] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 1973.008501][T23697] dvb_dvr_do_ioctl+0x12a/0x220 [ 1973.013508][T23697] dvb_usercopy+0x191/0x2b0 [ 1973.018094][T23697] ? dvb_dvr_release+0x3d0/0x3d0 [ 1973.023164][T23697] ? dvb_generic_ioctl+0xb0/0xb0 [ 1973.028460][T23697] ? dvb_dvr_poll+0x230/0x230 [ 1973.033293][T23697] dvb_dvr_ioctl+0x25/0x30 [ 1973.037933][T23697] __se_sys_ioctl+0xfa/0x170 [ 1973.042580][T23697] do_syscall_64+0x4c/0xa0 [ 1973.047045][T23697] ? clear_bhb_loop+0x60/0xb0 [ 1973.051758][T23697] ? clear_bhb_loop+0x60/0xb0 [ 1973.056650][T23697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1973.063577][T23697] RIP: 0033:0x7fb7f859e0d9 [ 1973.068159][T23697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1973.089381][T23697] RSP: 002b:00007fb7f9404028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1973.099030][T23697] RAX: ffffffffffffffda RBX: 00007fb7f8825fa0 RCX: 00007fb7f859e0d9 [ 1973.107501][T23697] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000006 [ 1973.116307][T23697] RBP: 00007fb7f8635024 R08: 0000000000000000 R09: 0000000000000000 [ 1973.125505][T23697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1973.134669][T23697] R13: 00007fb7f8826038 R14: 00007fb7f8825fa0 R15: 00007ffdc0c9f098 [ 1973.145605][T23697] [ 1973.149373][ C1] vkms_vblank_simulate: vblank timer overrun [ 1973.330777][ T4261] usb 2-1: USB disconnect, device number 99 [ 1973.650613][T23701] netlink: 'syz.2.4750': attribute type 10 has an invalid length. [ 1974.057143][T13955] Bluetooth: hci2: command 0x0419 tx timeout [ 1976.228848][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.235597][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.837560][T23697] Mem-Info: [ 1976.840989][T23697] active_anon:40037 inactive_anon:0 isolated_anon:0 [ 1976.840989][T23697] active_file:11399 inactive_file:40770 isolated_file:0 [ 1976.840989][T23697] unevictable:768 dirty:129 writeback:0 [ 1976.840989][T23697] slab_reclaimable:21510 slab_unreclaimable:104641 [ 1976.840989][T23697] mapped:36131 shmem:35167 pagetables:654 [ 1976.840989][T23697] sec_pagetables:0 bounce:0 [ 1976.840989][T23697] kernel_misc_reclaimable:0 [ 1976.840989][T23697] free:1266785 free_pcp:5906 free_cma:0 [ 1976.977505][T23697] Node 0 active_anon:160348kB inactive_anon:0kB active_file:45540kB inactive_file:162876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144468kB dirty:512kB writeback:0kB shmem:139132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11312kB pagetables:2716kB sec_pagetables:0kB all_unreclaimable? no [ 1977.401188][T23697] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1977.433528][T23697] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1977.461351][T23697] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1977.467336][T23697] Node 0 DMA32 free:1134404kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:160320kB inactive_anon:0kB active_file:45540kB inactive_file:162884kB unevictable:1536kB writepending:512kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:24516kB local_pcp:18316kB free_cma:0kB [ 1977.512413][T23445] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1977.518194][T23697] lowmem_reserve[]: 0 0 1 1 1 [ 1977.524156][T23697] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 1977.552457][T23697] lowmem_reserve[]: 0 0 0 0 0 [ 1977.557584][T23697] Node 1 Normal free:3916852kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1977.562018][T23445] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1977.631827][T23697] lowmem_reserve[]: 0 0 0 0 0 [ 1977.662127][T23697] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1977.695313][T23718] loop2: detected capacity change from 0 to 512 [ 1977.720419][T23713] netlink: 'syz.1.4751': attribute type 10 has an invalid length. [ 1977.732544][T23445] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1977.920822][T23697] Node 0 DMA32: 11*4kB (E) 61*8kB (E) 425*16kB (ME) 293*32kB (UME) 586*64kB (UME) 199*128kB (UME) 48*256kB (UME) 14*512kB (UME) 5*1024kB (UM) 1*2048kB (E) 251*4096kB (UM) = 1134404kB [ 1978.002623][T23718] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1978.079160][T23718] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1978.154732][T23665] chnl_net:caif_netlink_parms(): no params data found [ 1978.232135][T23697] Node 0 Normal: 3*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1978.276826][T23718] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1978.392533][T23445] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1978.465003][T23697] Node 1 Normal: 235*4kB (UE) 49*8kB (UME) 44*16kB (UME) 226*32kB (UME) 94*64kB (UME) 31*128kB (UE) 19*256kB (UM) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 949*4096kB (M) = 3916852kB [ 1978.569990][T23718] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.4752: attempt to clear invalid blocks 2 len 1 [ 1978.751687][T23697] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1978.773459][T23718] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4752: invalid indirect mapped block 1819239214 (level 0) [ 1978.920616][T23697] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1979.033680][T23718] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4752: invalid indirect mapped block 1819239214 (level 1) [ 1979.141659][T23697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1979.229987][T23697] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1979.254490][T23718] EXT4-fs (loop2): 1 truncate cleaned up [ 1979.312626][T23718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1979.343469][T23697] 87413 total pagecache pages [ 1979.452875][T23697] 0 pages in swap cache [ 1979.539622][T23697] Free swap = 124372kB [ 1979.671754][T23697] Total swap = 124996kB [ 1979.762327][T23697] 2097051 pages RAM [ 1979.856753][T23697] 0 pages HighMem/MovableOnly [ 1979.897598][T23697] 415222 pages reserved [ 1979.902215][T23697] 0 pages cma reserved [ 1980.236094][T23665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1980.250771][T23665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1980.993485][T23665] device bridge_slave_0 entered promiscuous mode [ 1981.152912][T23727] netlink: 'syz.4.4753': attribute type 10 has an invalid length. [ 1981.196247][T23665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1981.256534][T23665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.341034][T23665] device bridge_slave_1 entered promiscuous mode [ 1981.508130][T13946] EXT4-fs (loop2): unmounting filesystem. [ 1981.648449][T23665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1981.737908][T23665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1984.814967][T23665] team0: Port device team_slave_0 added [ 1985.012392][T23445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1985.263618][T23665] team0: Port device team_slave_1 added [ 1985.743750][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1985.778127][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1988.389510][T23768] netlink: 'syz.1.4759': attribute type 10 has an invalid length. [ 1988.409456][T23445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1988.495479][T23665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1988.536653][T23665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1988.633768][T23665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1988.647779][T23772] netlink: 'syz.2.4758': attribute type 10 has an invalid length. [ 1988.701598][T23774] loop4: detected capacity change from 0 to 512 [ 1988.731586][T23665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1988.744521][T23665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1988.790923][T23665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1988.804512][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1988.825808][T23774] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1988.826018][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1988.843021][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1988.847325][T23774] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1988.851096][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1988.878043][T23774] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1988.904109][T23774] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.4760: attempt to clear invalid blocks 2 len 1 [ 1988.918447][T23774] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4760: invalid indirect mapped block 1819239214 (level 0) [ 1988.933883][T23774] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4760: invalid indirect mapped block 1819239214 (level 1) [ 1988.971551][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1988.977373][T23774] EXT4-fs (loop4): 1 truncate cleaned up [ 1988.983913][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1988.984722][T23774] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1988.993779][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1989.014506][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1989.021717][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1989.031773][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1989.044835][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1989.099599][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1989.122803][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1989.311344][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1989.335730][T23665] device hsr_slave_0 entered promiscuous mode [ 1989.345956][T23665] device hsr_slave_1 entered promiscuous mode [ 1989.361474][T23665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1989.373618][T23665] Cannot create hsr debugfs directory [ 1990.123998][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1990.146524][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1990.263674][T23445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1990.288905][T14564] EXT4-fs (loop4): unmounting filesystem. [ 1990.416154][T23445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1993.888636][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1994.020665][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1994.349860][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1994.359597][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1994.369933][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1994.666244][T23803] loop1: detected capacity change from 0 to 512 [ 1994.682411][T23803] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1994.740438][T23803] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1994.750025][T23803] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1994.778623][T23785] netlink: 'syz.2.4761': attribute type 10 has an invalid length. [ 1994.788289][T23803] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.4764: attempt to clear invalid blocks 2 len 1 [ 1994.897805][T23803] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4764: invalid indirect mapped block 1819239214 (level 0) [ 1994.973037][T23803] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4764: invalid indirect mapped block 1819239214 (level 1) [ 1995.079359][T23803] EXT4-fs (loop1): 1 truncate cleaned up [ 1995.116171][T23803] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1996.323852][T15051] EXT4-fs (loop1): unmounting filesystem. [ 1996.332924][T23809] netlink: 'syz.2.4765': attribute type 10 has an invalid length. [ 1996.460472][ T9] device hsr_slave_0 left promiscuous mode [ 1996.510939][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1996.527505][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1996.544328][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1996.552621][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1996.561758][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1996.570516][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1996.628379][ T9] device hsr_slave_1 left promiscuous mode [ 1996.679437][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1996.743841][T23821] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1996.753094][T23821] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1996.783753][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1997.511035][ T9] device bridge_slave_1 left promiscuous mode [ 1997.537344][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1997.745890][ T9] device bridge_slave_0 left promiscuous mode [ 1997.831183][ T4288] Bluetooth: hci3: unexpected subevent 0x06 length: 18 > 10 [ 1997.914065][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1997.993471][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1998.497723][T23830] loop2: detected capacity change from 0 to 512 [ 1998.519848][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1998.529374][T23830] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1998.535786][T23830] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1998.548465][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1998.567429][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1998.575139][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1998.596439][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1998.617252][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 1998.635218][T23830] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1998.667354][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1998.722242][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1998.748060][T23830] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.4768: attempt to clear invalid blocks 2 len 1 [ 1998.803518][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1998.857424][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1998.871116][T23830] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4768: invalid indirect mapped block 1819239214 (level 0) [ 1998.925244][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1998.983554][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1998.999013][T23830] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4768: invalid indirect mapped block 1819239214 (level 1) [ 1999.057950][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1999.097225][T23830] EXT4-fs (loop2): 1 truncate cleaned up [ 1999.107663][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1999.165067][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1999.221837][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1999.231781][T23830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1999.293152][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1999.341896][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1999.426889][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1999.504986][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1999.573435][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1999.660363][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1999.852558][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2000.595820][ T4288] Bluetooth: hci3: command 0x2021 tx timeout [ 2000.669841][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2000.697548][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 2000.759277][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2000.810009][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2000.872879][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2000.931720][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2000.987287][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.042815][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.099446][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.156309][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.214527][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.269301][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.325874][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.393166][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.451394][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.508199][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.559887][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.605007][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.628079][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.636409][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.650821][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.659195][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.668023][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.676054][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.684033][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.692223][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.700075][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.707590][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.715081][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.722877][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.730619][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.738166][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.746270][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.753832][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.761452][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.769039][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.776574][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.784209][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.791669][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.799189][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.806877][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.815152][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.823152][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.830803][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.838457][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.846843][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.854510][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.862047][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.877635][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.885934][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.906555][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.914239][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.930169][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.942876][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.952721][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.960409][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.968125][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.975623][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.983358][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.991688][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2001.999712][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2002.007562][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2002.015028][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2002.023081][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2002.031542][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2002.039221][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2002.046668][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2002.055885][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2002.066522][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2002.088290][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2002.096043][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2002.112132][T17880] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2002.135730][T17880] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.03 Device [syz1] on syz1 [ 2002.420538][T23845] fido_id[23845]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2002.691791][ T9] team0 (unregistering): Port device team_slave_1 removed [ 2002.729992][ T9] team0 (unregistering): Port device team_slave_0 removed [ 2002.766551][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2002.777286][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 2002.806574][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2003.097777][ T9] bond0 (unregistering): Released all slaves [ 2003.304015][T23839] netlink: 'syz.1.4769': attribute type 10 has an invalid length. [ 2003.389701][T23848] netlink: 'syz.4.4770': attribute type 10 has an invalid length. [ 2003.419056][T13946] EXT4-fs (loop2): unmounting filesystem. [ 2004.857107][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 2005.435730][T23858] netlink: 'syz.1.4772': attribute type 10 has an invalid length. [ 2005.926062][T23852] device syzkaller0 entered promiscuous mode [ 2007.453617][T23816] chnl_net:caif_netlink_parms(): no params data found [ 2007.728247][T23665] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2007.963814][T23665] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2009.732003][T23665] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2012.477730][T23665] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2013.149218][T23897] netlink: 'syz.4.4775': attribute type 10 has an invalid length. [ 2013.400429][T23816] bridge0: port 1(bridge_slave_0) entered blocking state [ 2013.414896][T23816] bridge0: port 1(bridge_slave_0) entered disabled state [ 2013.440304][T23816] device bridge_slave_0 entered promiscuous mode [ 2013.464225][T23816] bridge0: port 2(bridge_slave_1) entered blocking state [ 2013.498703][T23816] bridge0: port 2(bridge_slave_1) entered disabled state [ 2013.518783][T23816] device bridge_slave_1 entered promiscuous mode [ 2013.610266][T23917] loop2: detected capacity change from 0 to 512 [ 2013.636498][T23816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2013.862497][T23917] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2013.942426][T23917] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 2014.138436][T23816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2014.153777][T23917] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2014.273409][T23926] netlink: 'syz.4.4779': attribute type 10 has an invalid length. [ 2014.483719][T23917] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.4778: attempt to clear invalid blocks 2 len 1 [ 2014.713295][ T4288] Bluetooth: hci0: unexpected subevent 0x06 length: 18 > 10 [ 2014.760112][T23917] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4778: invalid indirect mapped block 1819239214 (level 0) [ 2014.969772][T23665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2015.009074][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2015.135526][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2015.402958][T23816] team0: Port device team_slave_0 added [ 2015.419060][T23665] 8021q: adding VLAN 0 to HW filter on device team0 [ 2015.573848][T23931] loop1: detected capacity change from 0 to 512 [ 2015.799854][T23917] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4778: invalid indirect mapped block 1819239214 (level 1) [ 2015.816468][T23931] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2015.831680][T23816] team0: Port device team_slave_1 added [ 2015.858610][T23917] EXT4-fs (loop2): 1 truncate cleaned up [ 2015.864366][T23917] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2015.874569][T23931] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 2015.876758][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2015.892165][T23931] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2015.917508][T23931] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.4781: attempt to clear invalid blocks 2 len 1 [ 2015.931922][T23931] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4781: invalid indirect mapped block 1819239214 (level 0) [ 2015.947200][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2015.947780][T16042] bridge0: port 1(bridge_slave_0) entered blocking state [ 2015.962774][T16042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2015.995445][T23931] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4781: invalid indirect mapped block 1819239214 (level 1) [ 2016.074961][T23931] EXT4-fs (loop1): 1 truncate cleaned up [ 2016.084920][T23931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2016.095148][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2016.132295][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2016.206489][T16042] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.214314][T16042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2016.254692][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2016.272562][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2017.525749][ T4288] Bluetooth: hci0: command 0x2021 tx timeout [ 2018.347590][T23816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2018.361520][T23816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2018.389291][T23816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2018.408641][T18484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2018.434659][T18484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2018.471248][T18484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2018.488229][T18484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2018.510813][T18484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2018.524388][T18484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2018.671414][T15051] EXT4-fs (loop1): unmounting filesystem. [ 2018.674862][T23816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2018.679302][T13946] EXT4-fs (loop2): unmounting filesystem. [ 2018.698228][T23816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2019.080883][T23816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2019.636266][T16970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2019.685888][T16970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2019.724960][T23665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2019.750866][T23665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2020.030257][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2020.219753][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2020.708460][T23955] device syzkaller0 entered promiscuous mode [ 2021.010976][T23816] device hsr_slave_0 entered promiscuous mode [ 2021.210652][T23816] device hsr_slave_1 entered promiscuous mode [ 2021.293789][T23974] netlink: 'syz.4.4785': attribute type 10 has an invalid length. [ 2021.442139][T23971] netlink: 'syz.2.4786': attribute type 10 has an invalid length. [ 2022.409874][T23816] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2022.421737][T23816] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2022.457992][T23816] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2022.468038][T23816] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2022.491732][ T9] device hsr_slave_0 left promiscuous mode [ 2022.498665][ T9] device hsr_slave_1 left promiscuous mode [ 2022.505176][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2022.514958][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2022.522982][ T9] device bridge_slave_1 left promiscuous mode [ 2022.534048][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 2022.542690][ T9] device bridge_slave_0 left promiscuous mode [ 2022.549570][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 2022.823977][ T9] team0 (unregistering): Port device team_slave_1 removed [ 2022.890279][ T9] team0 (unregistering): Port device team_slave_0 removed [ 2024.094428][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2024.809287][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2025.005828][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2025.023707][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2025.033017][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2025.042497][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2025.051955][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2025.069926][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2025.322066][ T9] bond0 (unregistering): Released all slaves [ 2025.462690][T24012] netlink: 'syz.4.4789': attribute type 10 has an invalid length. [ 2025.473248][T24017] netlink: 'syz.2.4788': attribute type 10 has an invalid length. [ 2025.485386][T24021] netlink: 'syz.1.4790': attribute type 10 has an invalid length. [ 2025.720347][T23816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2025.773219][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2025.793303][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2025.819562][T23816] 8021q: adding VLAN 0 to HW filter on device team0 [ 2025.839768][T24019] chnl_net:caif_netlink_parms(): no params data found [ 2025.856232][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2025.865143][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2025.874389][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 2025.881899][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2025.898996][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2025.921894][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2025.938919][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2025.957903][T16546] bridge0: port 2(bridge_slave_1) entered blocking state [ 2025.965091][T16546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2026.037776][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2026.105592][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2026.170817][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2026.210029][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2026.305087][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2026.566824][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2027.097110][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 2027.955334][T23816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2028.277569][T24048] overlayfs: missing 'workdir' [ 2028.991546][T23816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2029.025331][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2029.044557][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2029.107630][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2029.136773][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2029.165328][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2029.177159][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 2029.205591][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2029.246455][T24019] bridge0: port 1(bridge_slave_0) entered blocking state [ 2029.343362][T24019] bridge0: port 1(bridge_slave_0) entered disabled state [ 2029.372434][T24019] device bridge_slave_0 entered promiscuous mode [ 2029.401847][T24056] netlink: 'syz.2.4794': attribute type 10 has an invalid length. [ 2029.431328][T24019] bridge0: port 2(bridge_slave_1) entered blocking state [ 2029.468173][T24019] bridge0: port 2(bridge_slave_1) entered disabled state [ 2029.516417][T24019] device bridge_slave_1 entered promiscuous mode [ 2031.267068][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 2031.665851][T24073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4797'. [ 2031.789594][T24073] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4797'. [ 2031.991165][T24019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2032.102018][T24019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2032.131169][T24075] device syzkaller0 entered promiscuous mode [ 2033.337243][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 2034.673802][T24091] netlink: 'syz.1.4798': attribute type 10 has an invalid length. [ 2034.785636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2034.825416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2034.907821][T24019] team0: Port device team_slave_0 added [ 2034.920043][T23816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2036.714816][T24019] team0: Port device team_slave_1 added [ 2037.404122][T24019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2037.467323][T24019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2037.660556][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.686714][T24019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2037.695408][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.516454][T24125] loop2: detected capacity change from 0 to 512 [ 2039.584571][T24019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2039.625319][T24019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2039.659292][T24019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2039.681171][T24125] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2039.700456][T24125] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 2039.709090][T24125] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2039.724640][T24125] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.4804: attempt to clear invalid blocks 2 len 1 [ 2039.748510][T24125] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4804: invalid indirect mapped block 1819239214 (level 0) [ 2039.798477][T24125] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4804: invalid indirect mapped block 1819239214 (level 1) [ 2039.858993][T24125] EXT4-fs (loop2): 1 truncate cleaned up [ 2039.876398][T24123] netlink: 'syz.4.4803': attribute type 10 has an invalid length. [ 2039.887095][T24125] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2039.998097][T24019] device hsr_slave_0 entered promiscuous mode [ 2040.153867][T24019] device hsr_slave_1 entered promiscuous mode [ 2040.172935][T24019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2040.304217][T24019] Cannot create hsr debugfs directory [ 2040.881811][T24131] netlink: 'syz.1.4805': attribute type 10 has an invalid length. [ 2040.963646][T13946] EXT4-fs (loop2): unmounting filesystem. [ 2042.128713][T24150] loop4: detected capacity change from 0 to 512 [ 2042.196396][T24150] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2042.221347][T24150] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 2042.230584][T24150] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2042.258683][T24150] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.4808: attempt to clear invalid blocks 2 len 1 [ 2042.272622][T24150] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4808: invalid indirect mapped block 1819239214 (level 0) [ 2042.307721][T24150] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4808: invalid indirect mapped block 1819239214 (level 1) [ 2042.340939][T24150] EXT4-fs (loop4): 1 truncate cleaned up [ 2042.357035][T24150] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2042.720250][T24163] loop2: detected capacity change from 0 to 512 [ 2042.951001][T24163] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2042.951080][T24163] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 2042.953301][T24163] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2043.450164][T24163] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.4810: attempt to clear invalid blocks 2 len 1 [ 2043.545216][T24163] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4810: invalid indirect mapped block 1819239214 (level 0) [ 2043.640035][T24170] device syzkaller0 entered promiscuous mode [ 2043.648460][T24163] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4810: invalid indirect mapped block 1819239214 (level 1) [ 2043.649420][T14564] EXT4-fs (loop4): unmounting filesystem. [ 2043.696045][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2043.713809][T24163] EXT4-fs (loop2): 1 truncate cleaned up [ 2043.728375][T24163] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2043.750738][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2044.016343][T23816] device veth0_vlan entered promiscuous mode [ 2045.477366][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2045.486331][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2045.504189][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2045.515156][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2045.709244][T13946] EXT4-fs (loop2): unmounting filesystem. [ 2045.829454][T23816] device veth1_vlan entered promiscuous mode [ 2047.125709][T13955] Bluetooth: hci4: unexpected subevent 0x06 length: 18 > 10 [ 2047.143548][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.176771][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.217847][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.245971][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.260029][T24209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4815'. [ 2047.292454][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.302458][T24209] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4815'. [ 2047.318465][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.340166][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.353085][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.360706][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.372407][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.380065][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.392999][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.400777][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.409235][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.416752][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.424897][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.432977][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.440787][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.448585][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.456353][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.464057][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.471513][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.480491][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.488361][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.495916][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.503601][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.511305][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.519043][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.526495][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.534043][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.541622][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.549988][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.557806][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.565229][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.573228][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.581226][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.588968][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.596421][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.603992][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.611547][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.619257][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.626670][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.634506][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.642264][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.650057][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.658025][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.665429][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.672986][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.680565][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.688367][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.696328][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.703791][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.711275][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.718913][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.726714][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.734523][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.742091][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.749674][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.757251][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.764752][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.772345][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.780024][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.787724][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.795141][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.802614][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.810412][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.817980][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.825969][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.833487][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.840987][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.848584][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.856161][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.863762][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.871428][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.879186][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.887649][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.895171][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.903671][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.911383][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.919209][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.927279][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.934696][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.942319][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.950002][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.957496][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.965215][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.972751][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.980397][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.987951][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2047.995563][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2048.003184][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2048.010759][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2048.018364][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2048.026434][ T32] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2048.035303][ T32] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.03 Device [syz1] on syz1 [ 2048.061916][ T9] device hsr_slave_0 left promiscuous mode [ 2048.136677][ T9] device hsr_slave_1 left promiscuous mode [ 2048.180639][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2048.207677][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2048.253329][ T9] device bridge_slave_1 left promiscuous mode [ 2048.273755][T24213] loop1: detected capacity change from 0 to 512 [ 2048.280575][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 2049.177313][T13955] Bluetooth: hci4: command 0x2021 tx timeout [ 2049.397979][ T9] device bridge_slave_0 left promiscuous mode [ 2049.404416][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 2049.415268][T24211] fido_id[24211]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2049.439632][T24213] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2049.446253][T24213] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 2049.510230][T24213] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2049.533020][T24213] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.4817: attempt to clear invalid blocks 2 len 1 [ 2049.630662][T24213] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4817: invalid indirect mapped block 1819239214 (level 0) [ 2049.664088][T24213] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4817: invalid indirect mapped block 1819239214 (level 1) [ 2049.799868][T24213] EXT4-fs (loop1): 1 truncate cleaned up [ 2049.813758][T24213] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2051.603592][T15051] EXT4-fs (loop1): unmounting filesystem. [ 2051.802746][T24245] loop4: detected capacity change from 0 to 512 [ 2051.978112][T24245] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2052.043978][T24245] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 2052.215220][T24245] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2052.392418][T24245] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.4821: attempt to clear invalid blocks 2 len 1 [ 2052.525015][ T9] team0 (unregistering): Port device team_slave_1 removed [ 2052.557537][T24245] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4821: invalid indirect mapped block 1819239214 (level 0) [ 2052.683308][T24245] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4821: invalid indirect mapped block 1819239214 (level 1) [ 2052.698922][T24245] EXT4-fs (loop4): 1 truncate cleaned up [ 2052.704901][T24245] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2052.894896][ T9] team0 (unregistering): Port device team_slave_0 removed [ 2053.001455][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2053.162015][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2054.025610][T14564] EXT4-fs (loop4): unmounting filesystem. [ 2055.381271][ T9] bond0 (unregistering): Released all slaves [ 2056.083894][T24225] netlink: 'syz.2.4816': attribute type 10 has an invalid length. [ 2056.348349][T24259] device syzkaller0 entered promiscuous mode [ 2056.546596][T24283] loop2: detected capacity change from 0 to 512 [ 2056.621857][T24283] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2056.648910][T24283] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 2056.671980][T24283] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2056.713966][T24283] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.4826: attempt to clear invalid blocks 2 len 1 [ 2056.796286][T24287] loop4: detected capacity change from 0 to 512 [ 2056.825800][T24283] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4826: invalid indirect mapped block 1819239214 (level 0) [ 2056.908956][T24283] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4826: invalid indirect mapped block 1819239214 (level 1) [ 2056.938998][T24287] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2056.948344][T24283] EXT4-fs (loop2): 1 truncate cleaned up [ 2056.954359][T24283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2056.980048][T24287] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 2057.039480][T24287] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2057.189078][T24287] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.4825: attempt to clear invalid blocks 2 len 1 [ 2057.205290][T24019] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2057.271783][T24287] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4825: invalid indirect mapped block 1819239214 (level 0) [ 2058.060499][T24287] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4825: invalid indirect mapped block 1819239214 (level 1) [ 2058.147094][T24019] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2058.235944][T24019] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2058.404218][T13946] EXT4-fs (loop2): unmounting filesystem. [ 2058.447509][T24287] EXT4-fs (loop4): 1 truncate cleaned up [ 2058.654302][T24287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2060.606815][T24019] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2061.421209][T13955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2061.437397][T13955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2061.477139][T13955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2061.489786][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2061.505295][T13955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2061.513410][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2061.754121][T14564] EXT4-fs (loop4): unmounting filesystem. [ 2061.925741][T24317] loop2: detected capacity change from 0 to 512 [ 2062.121658][T24317] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2062.264378][T24317] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 2062.627379][T24317] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2062.659768][T24317] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.4831: attempt to clear invalid blocks 2 len 1 [ 2063.531819][ T4288] Bluetooth: hci3: unexpected subevent 0x06 length: 18 > 10 [ 2063.622826][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2063.673117][T24019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2063.698081][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2063.710810][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 2063.721454][T24317] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4831: invalid indirect mapped block 1819239214 (level 0) [ 2063.730567][T24019] 8021q: adding VLAN 0 to HW filter on device team0 [ 2063.743277][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2063.768543][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2063.796591][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2063.813884][T24317] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4831: invalid indirect mapped block 1819239214 (level 1) [ 2063.838187][T24317] EXT4-fs (loop2): 1 truncate cleaned up [ 2063.844107][T24317] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2063.853436][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2063.881791][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2063.886736][T24329] loop1: detected capacity change from 0 to 512 [ 2063.913226][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2063.929295][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2063.951174][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2063.951604][T24329] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2063.966236][T24329] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 2064.088326][T24329] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2064.125298][T24329] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.4832: attempt to clear invalid blocks 2 len 1 [ 2064.128669][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.147207][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.154659][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.162560][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.172501][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.188610][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.197757][T24329] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4832: invalid indirect mapped block 1819239214 (level 0) [ 2064.212806][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.221053][T24329] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4832: invalid indirect mapped block 1819239214 (level 1) [ 2064.235759][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.237996][T24329] EXT4-fs (loop1): 1 truncate cleaned up [ 2064.243868][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.255607][T24329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2064.308387][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.308499][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.308568][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.308634][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.308678][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.308723][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.308791][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.308858][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.308927][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.308994][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309060][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309126][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309202][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309270][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309337][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309404][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309472][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309539][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309605][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309673][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309741][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309826][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309895][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.309962][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310029][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310097][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310170][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310261][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310335][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310402][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310467][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310534][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310601][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310669][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310736][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310802][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310869][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.310936][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.311027][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.311095][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.311193][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.311260][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.311326][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.311392][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.311459][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.311535][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.311602][T22790] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 2064.311671][T22790] hid-generic 0000:0000:0000.0047: item fetching failed at offset 64/94 [ 2064.314132][T22790] hid-generic: probe of 0000:0000:0000.0047 failed with error -22 [ 2065.083264][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2065.116272][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2065.314341][T18158] bridge0: port 1(bridge_slave_0) entered blocking state [ 2065.321818][T18158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2065.861195][ T4288] Bluetooth: hci3: command 0x2021 tx timeout [ 2065.867414][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 2065.964296][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2066.139918][T24019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2066.184295][T13946] EXT4-fs (loop2): unmounting filesystem. [ 2066.198419][T15051] EXT4-fs (loop1): unmounting filesystem. [ 2066.202737][T24019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2066.288960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2066.317885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2066.326412][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2066.334216][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2067.360177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2067.369378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2067.380003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2067.391342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2067.400805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2067.410643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2067.420092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2067.429524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2067.439050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2067.451518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2067.471683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2067.488613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2067.872709][T24367] loop4: detected capacity change from 0 to 512 [ 2067.897130][T13955] Bluetooth: hci2: command 0x040f tx timeout [ 2067.966077][T24367] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2067.977550][T24367] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 2067.994249][T24355] device syzkaller0 entered promiscuous mode [ 2068.053465][T24367] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2068.129330][T24367] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.4837: attempt to clear invalid blocks 2 len 1 [ 2068.202468][T24367] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4837: invalid indirect mapped block 1819239214 (level 0) [ 2068.235022][T24367] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4837: invalid indirect mapped block 1819239214 (level 1) [ 2068.362177][T24367] EXT4-fs (loop4): 1 truncate cleaned up [ 2068.387066][T24367] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2068.528990][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2068.774259][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2069.127125][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2069.170454][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2069.197054][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2069.242014][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2069.290533][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2069.365119][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2069.377492][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2069.389709][T24306] chnl_net:caif_netlink_parms(): no params data found [ 2069.397376][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2069.404818][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.012097][T13955] Bluetooth: hci2: command 0x0419 tx timeout [ 2070.145575][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.153525][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.161749][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.169401][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.177038][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.186063][T14564] EXT4-fs (loop4): unmounting filesystem. [ 2070.196214][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.203990][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.211668][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.219402][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.226969][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.234499][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.243040][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.250549][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.258074][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.265486][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.273077][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.281665][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.289483][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.297716][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.305141][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.312682][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.320492][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.342486][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.440680][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.588587][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.686673][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.777118][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.784606][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.797171][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.817149][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.825108][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.851338][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.865710][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.873653][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2070.876263][T24306] bridge0: port 1(bridge_slave_0) entered blocking state [ 2070.881644][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.832613][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.846770][T24306] bridge0: port 1(bridge_slave_0) entered disabled state [ 2071.853998][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.858258][T24306] device bridge_slave_0 entered promiscuous mode [ 2071.861755][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.875568][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.883098][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.890638][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.898556][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.906047][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.913629][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.921284][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.928780][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.936269][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.944200][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.951751][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.959415][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.967082][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.974644][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.982540][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.990638][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2071.998132][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.005654][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.013343][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.020841][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.028604][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.036303][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.044155][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.051735][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.059517][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.067067][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.074519][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.081995][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.089678][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.097445][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.105193][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.112969][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.120557][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.128465][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.136314][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.144205][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.151773][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.159696][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.167365][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.174810][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.182254][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.189793][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.197688][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.205206][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.212758][T13952] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 2072.224372][T13952] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.03 Device [syz1] on syz1 [ 2072.407240][T24306] bridge0: port 2(bridge_slave_1) entered blocking state [ 2072.414696][T24306] bridge0: port 2(bridge_slave_1) entered disabled state [ 2072.479245][T24306] device bridge_slave_1 entered promiscuous mode [ 2072.769643][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2072.801262][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2072.920951][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.006043][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.091534][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.158010][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.285405][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.344625][T24399] fido_id[24399]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2073.357330][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.365741][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.373738][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.382287][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.390744][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.401978][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.409774][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.417592][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.425047][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.432753][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.440380][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.448185][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.455690][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.463214][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.470838][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.478443][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.486018][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.493629][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.501467][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.509040][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.516482][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.524878][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.532530][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.540231][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.549473][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.557196][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.564624][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.572404][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.580222][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.587925][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.595468][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.602906][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.610383][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.618057][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.625515][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.633306][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.640904][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.648605][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.656126][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.663657][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.671156][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.678821][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.686226][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.693806][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.701509][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.709448][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.716857][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.724476][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.732184][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.739936][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.747447][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.754968][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.762622][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.770114][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.777632][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.785247][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.793273][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.800840][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.808322][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.815733][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.823424][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.831192][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.838739][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.846708][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.854286][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.862081][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.869843][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.877450][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.884969][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.892553][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.900137][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.907649][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.915262][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.923126][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.930643][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.938356][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.945810][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.953404][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.960923][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.968436][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.975989][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.983540][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.991145][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2073.998709][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2074.006116][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2074.013732][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2074.021190][T22790] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2074.051723][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2074.057126][T22790] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.03 Device [syz1] on syz1 [ 2074.063707][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2074.223885][T24019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2074.231674][T24402] fido_id[24402]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2074.249624][T24306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2074.262643][T24306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2074.335608][T24306] team0: Port device team_slave_0 added [ 2074.350892][T24306] team0: Port device team_slave_1 added [ 2074.531647][T24306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2074.544392][T24306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2074.582746][T24306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2074.647232][T24306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2074.654252][T24306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2074.690961][T24306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2074.783517][T24306] device hsr_slave_0 entered promiscuous mode [ 2074.808462][T24306] device hsr_slave_1 entered promiscuous mode [ 2074.827111][T24306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2074.835361][T24306] Cannot create hsr debugfs directory [ 2074.991171][ T9] device hsr_slave_0 left promiscuous mode [ 2075.003855][ T9] device hsr_slave_1 left promiscuous mode [ 2075.013498][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2075.047971][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2075.061906][ T9] device bridge_slave_1 left promiscuous mode [ 2075.069967][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.089014][ T9] device bridge_slave_0 left promiscuous mode [ 2075.095445][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.160214][ T9] device veth1_vlan left promiscuous mode [ 2075.166185][ T9] device veth0_vlan left promiscuous mode [ 2075.742877][ T9] team0 (unregistering): Port device team_slave_1 removed [ 2075.803428][ T9] team0 (unregistering): Port device team_slave_0 removed [ 2075.862283][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2075.921190][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2076.285641][ T9] bond0 (unregistering): Released all slaves [ 2076.495986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2076.517314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2076.541891][T24019] device veth0_vlan entered promiscuous mode [ 2076.561578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2076.570876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2076.580916][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2076.589981][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2076.611506][T24019] device veth1_vlan entered promiscuous mode [ 2076.712222][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2076.726773][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2076.735591][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2076.753992][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2076.810936][T24019] device veth0_macvtap entered promiscuous mode [ 2076.833844][T24019] device veth1_macvtap entered promiscuous mode [ 2076.889429][T24019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2076.903524][T24019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2076.914133][T24019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2076.925036][T24019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2076.935595][T24019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2076.946962][T24019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2076.958942][T24019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2076.968000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2076.976799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2076.997340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2077.006537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2077.090714][T24019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2077.103953][T24019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2077.115772][T24019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2077.134198][T24019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2077.146475][T24019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2077.157212][T24019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2077.176260][T24019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2077.208106][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2077.227478][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2077.249924][T24019] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2077.261009][T24019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2077.270904][T24019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2077.280255][T24019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2077.438246][T17900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2077.446133][T17900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2077.467562][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2077.506165][T16246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2077.550355][T16246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2077.564691][T16246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2077.590399][T24306] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2077.605702][T24306] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2077.653854][T24306] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2077.680629][T24306] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2077.900509][T24306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2077.938320][T16246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2077.949276][T24442] Cannot find add_set index 0 as target [ 2077.949952][T16246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2077.969522][T24306] 8021q: adding VLAN 0 to HW filter on device team0 [ 2077.987832][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2078.000187][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2078.014602][T15711] bridge0: port 1(bridge_slave_0) entered blocking state [ 2078.022379][T15711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2078.060157][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2078.069270][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2078.079266][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2078.088644][T15711] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.095880][T15711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2078.105140][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2078.115194][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2078.147158][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2078.160946][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2078.171025][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2078.181854][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2078.201811][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2078.215742][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2078.235168][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2078.246380][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2078.270464][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2078.288084][T24306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2078.768226][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2078.775758][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2078.810800][T24306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2079.358205][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2079.372737][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2079.400701][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2079.416733][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2079.440681][T24306] device veth0_vlan entered promiscuous mode [ 2079.455547][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2079.466757][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2079.491216][T24306] device veth1_vlan entered promiscuous mode [ 2079.536592][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2079.556519][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2079.570027][T24306] device veth0_macvtap entered promiscuous mode [ 2079.595313][T24306] device veth1_macvtap entered promiscuous mode [ 2079.623277][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.634143][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.645208][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.668362][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.678856][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.689670][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.699757][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.710425][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.721801][T24306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2079.737567][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2079.746409][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2079.755089][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2079.764298][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2079.775442][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.787131][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.798112][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.809257][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.819403][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.830442][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.841337][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.853024][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.866383][T24306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2079.884659][T16246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2079.894700][T16246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2079.913277][T24306] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.922975][T24306] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.932189][T24306] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.941406][T24306] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.075205][ T4783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2080.093870][ T4783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2080.105562][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2080.127263][T16246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2080.135251][T16246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2080.143770][T16246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2080.223669][T24487] loop6: detected capacity change from 0 to 512 [ 2080.258024][T24487] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2080.264434][T24487] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 2080.285518][T24487] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2080.319085][T24487] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.4715: attempt to clear invalid blocks 2 len 1 [ 2080.337858][T24487] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.4715: invalid indirect mapped block 1819239214 (level 0) [ 2080.352361][T24487] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.4715: invalid indirect mapped block 1819239214 (level 1) [ 2080.368291][T24487] EXT4-fs (loop6): 1 truncate cleaned up [ 2080.374432][T24487] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2081.540706][T24306] EXT4-fs (loop6): unmounting filesystem. [ 2099.100149][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.106598][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2147.257124][T13955] Bluetooth: hci1: command 0x0406 tx timeout [ 2160.540785][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.547463][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2188.227144][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 2221.980071][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.986431][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2256.537364][ T4321] kworker/dying (4321) used greatest stack depth: 19456 bytes left [ 2283.420019][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.426392][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.859940][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.866403][ T1280] ieee802154 phy1 wpan1: encryption failed: -22