last executing test programs: 17m5.162180074s ago: executing program 32 (id=183): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1901b0d, &(0x7f0000000580)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nobh}, {@data_err_ignore}, {@lazytime}]}, 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000240)='./file0\x00', 0x179) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x2c000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[], 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) lsetxattr$trusted_overlay_origin(&(0x7f0000000380)='./file2\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_flash={0x33, 0x7f, './file0/../file0/file0\x00'}}) ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f00000002c0)={0x0, r6, r2, 0x29f7, 0x8000000000000001, '\x00', {0x8001, 0x1b1b, 0x5, 0x4, 0x3, 0xfffffff8, 0x6, 0x9, {0x0, 0x8}, {0x5, 0x10000}, {0x4, 0x2c}, 0xffffffffffffffff, 0x400, 0x2400, 0xa13, 0x9, 0x7ff, 0x9, 0x80, 0x1, 0xfffb, '\x00', 0x1, 0x0, 0x9, 0x2}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lgetxattr(&(0x7f0000002840)='./file0\x00', &(0x7f0000002880)=@known='system.posix_acl_default\x00', 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000800)="240000001e005f0214f90408faac4700001e0000010000000000080008000dc00e0000ff", 0x24) 16m48.497696043s ago: executing program 33 (id=209): connect$x25(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, 0x0, 0x172) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 14m44.90045463s ago: executing program 1 (id=455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0xffdd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) userfaultfd(0x801) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='pstore\x00', 0x28c2008, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000040), 0x5005) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r3, 0x0, 0x20) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000180)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffc}, 0x94) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x0) 14m43.222412305s ago: executing program 1 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x14, 0x89}, 0x0) socket$l2tp(0x2, 0x2, 0x73) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x40004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in6=@loopback={0x2ff}, 0xfffd, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 14m41.35093056s ago: executing program 1 (id=459): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/keys\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x122f, &(0x7f0000003700)="$eJzs3E9rHGUcB/Cfm6Spifmj1moF6YO96GVIcvCiIEFSkC4obSO0gjA1G10y7obMElgRoyevXnwBXsWjN0G86SUefA3e4sGjB3Wku23s2pWg/TM1fD6XfdhnvrO/Z2d44Fn2mYOXPn1va7PMNvNeNB56ORrbEZO/p0jRiJs+iudf/O77Zy5duXphtdlcu5jS+dXLyy+klObPfvPmB18++21v9o2v5r+ejv3Ftw5+Wflp//T+mYM/Lr/bLlO7TJ1uL+XpWrfby68VrbTRLreylF4vWnnZSu1O2doZ6d8sutvb/ZR3NuZmtndaZZnyTj9ttfqp1029nX7K38nbnZRlWZqbCe7E+he/VlUVUVVTcSKqqqoejploxCMxF/OxEIvxaDwWj8epeCJOx5PxVJwZHHV4gp9rLR8AAAAAAAAAAAAAAAAAAACOiXH7/2dv2///WcS4/f9nay4eAAAAAAAAAAAAAAAAAAAAjolLV65eWG021y6mdDKi+GR3fXd9+DrsX92MdhTRiqVYiN9isPt/aNg+Ec21pTSwGB8Xezfye7vrE6P55cHjBG7Ln3+1ubY8zKfR/HTM3JpfiYU4NT6/8rf8uUH+ZDx37pZ8Fgvx49vRjSI24nr2r/yHyym98lrzMP/D/nDsGzVeFwAAALibsnRo7Po9y/6pf5g/6veB6+vrpbHr+8l4erLesRNR9t/fyouitVN742ZFw3f2IuIBKew/NxoRcc8+Yiruwnmmjjxmtoav7vPZiDuIT4zcSA/EnfB/bBw1c0zc03mJ++PGRZ+uuw4AAAAAAAAAAAD+nfvxd8K6xwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCf7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK8CAAD//89nyNQ=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000001280)={0x58f5, 0xd0002, 0x2, 0xfffffff7fffffffd, 0x1, 0x0, 0x2401}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) r3 = epoll_create1(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000340)={0x2}) fcntl$getownex(r3, 0x10, &(0x7f00000001c0)) open_by_handle_at(r2, &(0x7f0000000380)=@reiserfs_2={0x8, 0x2, {0xba}}, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) pread64(r0, &(0x7f0000002100)=""/171, 0xab, 0x9a) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) getrandom(&(0x7f0000004300)=""/176, 0xb0, 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000021c0)=0xb3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xf9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x6) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x54, 0x18, 0x1, 0x70bd25, 0x25dfdbff, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8840}, 0x20040844) 14m37.813889326s ago: executing program 1 (id=470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') getdents(r2, &(0x7f0000000200)=""/25, 0x19) r3 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x101040) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000", 0x5) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x569) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 14m36.384706599s ago: executing program 1 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x14, 0x89}, 0x0) socket$l2tp(0x2, 0x2, 0x73) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in6=@loopback={0x2ff}, 0xfffd, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 14m35.607276054s ago: executing program 1 (id=477): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0xf00, 0x181000) fanotify_mark(r3, 0x1, 0x8000000, r2, 0x0) r4 = fanotify_init(0x2, 0x0) fanotify_mark(r4, 0x2, 0x800100a, r2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x15, 0x0, &(0x7f00000000c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000206010400000000050001000700000004000780050005000a00000005000400000000000900020073797a323b70f82c0efe17e400000000100003006269746d61703a706f727400"], 0x4c}, 0x1, 0x0, 0x0, 0x20004890}, 0x4044814) socket$inet_smc(0x2b, 0x1, 0x0) (async) epoll_create1(0x0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) fanotify_init(0xf00, 0x181000) (async) fanotify_mark(r3, 0x1, 0x8000000, r2, 0x0) (async) fanotify_init(0x2, 0x0) (async) fanotify_mark(r4, 0x2, 0x800100a, r2, 0x0) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x15, 0x0, &(0x7f00000000c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000206010400000000050001000700000004000780050005000a00000005000400000000000900020073797a323b70f82c0efe17e400000000100003006269746d61703a706f727400"], 0x4c}, 0x1, 0x0, 0x0, 0x20004890}, 0x4044814) (async) 14m34.935936653s ago: executing program 34 (id=477): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0xf00, 0x181000) fanotify_mark(r3, 0x1, 0x8000000, r2, 0x0) r4 = fanotify_init(0x2, 0x0) fanotify_mark(r4, 0x2, 0x800100a, r2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x15, 0x0, &(0x7f00000000c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000206010400000000050001000700000004000780050005000a00000005000400000000000900020073797a323b70f82c0efe17e400000000100003006269746d61703a706f727400"], 0x4c}, 0x1, 0x0, 0x0, 0x20004890}, 0x4044814) socket$inet_smc(0x2b, 0x1, 0x0) (async) epoll_create1(0x0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) fanotify_init(0xf00, 0x181000) (async) fanotify_mark(r3, 0x1, 0x8000000, r2, 0x0) (async) fanotify_init(0x2, 0x0) (async) fanotify_mark(r4, 0x2, 0x800100a, r2, 0x0) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x15, 0x0, &(0x7f00000000c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000206010400000000050001000700000004000780050005000a00000005000400000000000900020073797a323b70f82c0efe17e400000000100003006269746d61703a706f727400"], 0x4c}, 0x1, 0x0, 0x0, 0x20004890}, 0x4044814) (async) 3m35.687382599s ago: executing program 6 (id=2410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r3) r4 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) 3m34.265563383s ago: executing program 6 (id=2426): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x3}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3m33.559318459s ago: executing program 6 (id=2437): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m33.370363342s ago: executing program 6 (id=2441): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 3m33.016174209s ago: executing program 6 (id=2444): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) 3m32.758850212s ago: executing program 6 (id=2448): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x64, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m17.676214968s ago: executing program 35 (id=2448): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x64, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m31.29735955s ago: executing program 9 (id=2920): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m30.944547371s ago: executing program 9 (id=2922): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2m30.02520875s ago: executing program 9 (id=2929): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESCSIZE(r1, 0x4004480d, 0x0) 2m29.594451031s ago: executing program 9 (id=2935): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7ffffffffffffffd, 0x8005, 0x0, 0x0, 0x13, 0xd, "ef359f413bb93852f7d6a4ae6dddbbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafaf3afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359628e45668100e3700000e6d60200cd8ffe000000000000000100", [0x4204]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) 2m28.438655879s ago: executing program 9 (id=2945): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000b00), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/22, 0x16}], 0x0}, 0x20) 2m27.335308798s ago: executing program 9 (id=2955): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2m25.972837225s ago: executing program 36 (id=2955): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1m16.934437349s ago: executing program 7 (id=3368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xcd, 0x0, &(0x7f0000000300)="b994bc444b9893b04bf30981fd1a626f7389e32a4a7941c2515284700e44a97c20a00f058be0da09f79b19459fe87a2d1c33b64e62a91efc244b5f1e5f2751a8a71426c42e2819529c68f0cb08d7abcb7517687c402e46f41741ed42cf78d4bb059cdd4cb3b8a6688aec470f364827b2fe1b2f117ffed12a16621878284769347464b039230762fe3606c1f2ad62d657d2280e735362c779b4e7ecf49f3f0f2ba3394636a7f2eb647d3fac6fe0e1360ed0c4e9bba1c89cd8bc9f415189d695f401f4993481e036bf159b1ff68c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x1b) 1m16.832012519s ago: executing program 7 (id=3369): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x365, &(0x7f0000000700)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) 1m16.535763335s ago: executing program 7 (id=3373): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc4040}, 0x8806) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m16.262946435s ago: executing program 7 (id=3376): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) 1m15.886493141s ago: executing program 7 (id=3378): add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800", 0x28}, 0x48, 0xfffffffffffffffb) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000040)={@id={0x2, 0x0, @b}, 0x0, r1}) 1m15.183659604s ago: executing program 7 (id=3385): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r2, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) 1m13.978398059s ago: executing program 37 (id=3385): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r2, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) 55.141834725s ago: executing program 2 (id=3477): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) 53.774064774s ago: executing program 2 (id=3484): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) syz_emit_ethernet(0x5d, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 52.706804966s ago: executing program 2 (id=3488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 52.028763207s ago: executing program 2 (id=3491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 46.135098076s ago: executing program 2 (id=3510): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) syz_mount_image$fuse(&(0x7f0000000540), &(0x7f0000000000)='./bus\x00', 0x322020, &(0x7f0000000580)=ANY=[], 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 45.091441776s ago: executing program 2 (id=3515): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd26, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, &(0x7f0000000a00)={0x0, 0x8001, &(0x7f0000000540), 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0xf) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="ba0455111f1b8072fd972350948b", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 9.174038139s ago: executing program 8 (id=3655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0xf, &(0x7f0000019200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00'}, 0x94) 8.74864779s ago: executing program 8 (id=3658): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x0) 6.819617815s ago: executing program 8 (id=3664): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="9e4aa4c07d192c34f0ab", 0xa, 0x41, &(0x7f0000000180)={0xa, 0x4e23, 0x8001, @loopback, 0xe}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0xc851) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="32140000000000000738000000020c05020001040000000000000500000000000000000000000000d80705000000000000000700000b000000003ba4000000000000c910ff01000000000000000000000000000101090000000000000000000730000000030afed0070400000000000000ff01000000000000000800000000000003000000000000000001000000000000c910fe80000000000000000000000000000cc20400005995000000000000"], 0xb0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 6.481571526s ago: executing program 3 (id=3668): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000100656e61626c656400000000000000000000000000000000000000000000000000090003000600000004000400080006", @ANYRES32=r2], 0x5c}, 0x1, 0xf000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800006121f", 0x2e}], 0x1}, 0x0) 6.053971009s ago: executing program 4 (id=3670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0xf, &(0x7f0000019200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00'}, 0x94) 6.049785645s ago: executing program 0 (id=3671): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x500) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0131010000000000400012800e00010069703665727370616e0000002c000280140005f6ff000000000000000000ffff7f00000108001500b9c20a00040012000500160001"], 0x60}}, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 6.005516124s ago: executing program 3 (id=3673): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc4040}, 0x8806) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040), 0x0, 0x40000022, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.835917789s ago: executing program 4 (id=3674): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x98, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x74, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.516042009s ago: executing program 5 (id=3675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) 4.104358425s ago: executing program 3 (id=3676): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(0x3) syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000000380)=""/153, 0x99) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 4.072021858s ago: executing program 0 (id=3677): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={0x0, 0xfffffff9}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0xa, 0x4e21, 0xe1, @ipv4={'\x00', '\xff\xff', @local}, 0x50be}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x2}, 0x8) 3.93987699s ago: executing program 0 (id=3678): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 3.898066707s ago: executing program 4 (id=3679): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 3.855809464s ago: executing program 5 (id=3680): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2}, 0x80}], 0x2, 0x10002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 3.796616494s ago: executing program 0 (id=3681): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94) listen(r0, 0xfff) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x11, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1c4, &(0x7f0000000740)="$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") 3.703428033s ago: executing program 3 (id=3682): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r0, 0x0, 0x0, 0x800, 0x78) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = gettid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 3.203178211s ago: executing program 4 (id=3683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.769585508s ago: executing program 0 (id=3684): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000100656e61626c656400000000000000000000000000000000000000000000000000090003000600000004000400080006", @ANYRES32=r2], 0x5c}, 0x1, 0xf000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800006121f", 0x2e}], 0x1}, 0x0) 2.392822109s ago: executing program 5 (id=3685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.79469255s ago: executing program 3 (id=3686): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) fsopen(0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x22, 0x2, 0x2, "f70900000000000000a4f998dae108065a97630a33ea3b6ed13c74bd7001fd36", 0x34324142}) 1.646944707s ago: executing program 4 (id=3687): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc4040}, 0x8806) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.646611874s ago: executing program 5 (id=3688): syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x2101}]}}}}}}}}, 0x0) 1.598541381s ago: executing program 0 (id=3689): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB="2c66736d616769633d3078303030303030303030303030303030322c736d61636b6673665e6f6f723d736d61636b66737472616e732d7574652c666f776e65723ee913b6e7858b459aea76a61374d95a5ba0ea131492042d59ca3669979b6c1e1ec7d9bb6c99ec974795d51b342596c4a62342a4d28a02f68f2ee922c8041f11fad6b3d4a0518253955e447f57f4d4dc2acad3457c75d1861af156d552fb5c05e042d5b09427d15fea177d488b", @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB="10af9b9320e74f2badb1d4f1bf657d6e613c701d8c5846d8803fc0d4f31e0c79e44ce9044721ca748ec42f07aea4364f36ff75c213c05cfcae7d9a22289f08efffb486ace97445aaf1541ba1fc8a8f20a31dfd675975db1599d3b57a2c97d8598d7729eddf33ea3504f1779e77a3ac0655cd593e710b8f5b076c38a60ee40c06bb60956c6bd72b80348f70ccb438f549f555d0567cbbf840569f1102d47be18af8b21f48c88dcc9ad10e24f851a3642197ab2acbb330d969d01a7bc3977faf2c369f47a693654742ab", @ANYBLOB="f9c1eb3e827127e08d98faa9d0c71b0e9140cd349baa"], 0xa, 0xc35, &(0x7f0000001c40)="$eJzs3UFsHNd9B+D/Gy3FldJWTJwoThoXm7RIZcZyZUkxFatwVzXNNoAsE6GYWwCuSEpdmCIJkmpkIy2YXnroIUBR9JATgdYokKKB0RRBLwWY1gWSiw9FTj0RLWwERQ8sYCCngMXMvhWXFGkzoihR1vfZ5G935r2Z92bWMzTBNy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjff/nSmefSw24FAPAgXRn72pmz7v8A8Fi56v//AQAAAAAAAAAAAADgsEtRxBORYv7Kepqo3nfUL7f7bt0eHx7ZudqxVNU8UpUvv+rPnT13/svPD13o5uX27AfUv98+G6+OXb3UeGnu5vzC9OLi9FRjfLY9OTc1vect7Lf+doPVAWjcfO3W1PXri42zz57bsvr2wHv9Hzs5cHHo6dNPdcuOD4+MjG0WqfeWr91zQzp2G+FxNIo4HSme+f7PUisiitj/sag/2HO/3bGqE4NVJ8aHR6qOzLRbs0vlytHugSgiGj2Vmt1jtPO5iFrfA+3D7poRy2XzywYPlt0bm28ttK7NTDdGWwtL7aX23Oxo6rS27E8jiriQIlYiYq3/7s31RRG1SPHdE+vpWkQc6R6HL1UDg3dvR3GAfdyDsp2NvoiV4hE4Z4dYfxTxSqR4/+1TMZmvM9W15osRr5T5w4g3y3wxIpUfjPMR7+7wOeLRVIsi/qI8/xfX01R1PeheVy5/vfHV2etzPWW715Vf8v5w15XiId0fjm3LB+OQX5vqUUSruuKvp3v/YQcAAAAAAAAAAAAAAACA++1YFPGZSPHyf/xxNa44qnHpJy4O/cHAr/aOGX/yQ7ZTln02IpaLvY3JPZoHBo6m0ZQe8ljix1k9iviTPP7v2w+7MQAAAAAAAAAAAAAAAAAAAI+1In4aKV5451Raid45xduzNxpXW9dmOrPCduf+7c6ZvrGxsdFInWzmnMi5nHMl52rOtZxR5Po5mzknci7nXMm5mnMtZxzJ9XM2c07kXM65knM151rOqOX6OZs5J3Iu51zJuZpzLWcckrl7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Sooo4heR4jvfXE+RIqIZMRGdXO1/2K0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEr9qYgfRIrGHzbvLKtFRKr+7ThVfjsfzaNlfiKaQ2W+GM1LOVtV1prffgjtZ3/6UhE/iRT99bfunPB8/vs67+58DOLNb22++2ytk0e6Kwfe6//YyRMXh0Z+48ndXqedGjB4uT1763ZjfHhkZKxncS3v/RM9ywbyfov703UiYvH1N15rzcxML9z7i/IjsI/qj9CLVHtceupF9SJqh6IZD6fvPAbK+/+7keJ33vnP7g2/c/+vx6903t25w8fP/3Tz/v/C9g3t8f5f214v3//Le/pO9/8nepa9kH8a6atF1JduzvedjKgvvv7G6fbN1o3pG9Oz58+c+crQ0FfOnek7GlG/3p6Z7nl1Xw4XAAAAAAAAAAAAAAAAwIOTivi9SNH6yXpqRMTtarzWwMWhp08/dSSOVOOttozbfnXs6qXGS3M35xemFxenpxrjs+3Juanpve6uXg33Gh8eOZDOfKhjB9z+Y/WX5uZfX2jf+KOlHdcfr1+6tri00JrceXUciyKi2btksGrw+PBI1eiZdmu2qjq642D6X15fKuK/IsXk+Ub6fF6Wx/9vH+G/Zfz/8vYNHdD4/4/3LCv3mVIRP48Uv/2XT8bnq3Yej7uOWS73t5Fi8MLncrk4WpbrtqHzXIHOyMCy7P9Fin/8xday3fGQT2yWfW7PB/YRUZ7/E5HiB3/+vfhCXrb1+Q87n//j2zd0QOf/kz3Ljm95XsG+u04+/6cjxYtPvBW/mZd90PM/us/eOJUL33k+xwGd/0/1LBvI+/2t+9N1AAAAAAAAAACAR1pfKuLvIsWPRmrp+bxsL3//N7V9Qwf091+f7lk2tdf5imJ/059ExL/s+8ACAAAAwCHQl4r4aaS4sfTWnTHUW8d/94z//N3N8Z/Dadva6vd8v1Y9N+B+/v6v10De78T+uw0AAAAAAAAAAAAAAAAAAACHSkpFPJ/nU5+oxvNP7Tqf+mqkePl/nsnl0smyXHce+IHqe/3K3OzpSzMzc5Otpda1menG2Hxrcrqs+8lIsf43n8t1i2p+9e5885053jfnYl+IFCN/3y3bmYv9C9Xk+N35wDtzsZdlPx4p/vsftpbtzmP9qc2yZ8uyfx0pvvHPO5c9uVn2XFn2e5Hix99odMseL8t2n4/66c2yz07OFQd0ZgAAAAAAAAAAAAAAAAAAAHic9KUi/ixS/O/NlTtj+fP8/309bytvfqtnvv9tblfz/A9U8//v9vpe5v+vniuwvNteAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgoylFEW9Eivkr62m1v3zfUb/cnr11e3x4ZOdqx1JV80hVvvyqP3f23PkvPz90oZsfXP9++0y8Onb1UuOluZvzC9OLi9NTjfHZ9uTc1PSet7Df+tsNVgegcfO1W1PXry82zj57bsvq2wPv9X/s5MDFoadPP9UtOz48MjLWU6bWd897v0vaZfnRKOKvIsUz3/9Z+lF/RBH7PxYf8tk5aMeqTgxWnRgfHqk6MtNuzS6VK0e7B6KIaPRUanaP0QM4F/vSjFgum182eLDs3th8a6F1bWa6MdpaWGovtedmR1OntWV/GlHEhRSxEhFr/Xdvri+KeC1SfPfEevrX/ogj3ePwpStjXztzdvd2FAfYxz0o29noi1gpHoFzdoj1RxH/FCnef/tU/Ft/RC06X/HFiFfK/GHEm9E536n8YJyPeHeHzxGPploUR8t8/+J6eru/vB50ryuXv9746uz1uZ6y3evKI39/eJAO+bWpHkX8uLrir6d/9981AAAAAAAAAAAAAAAAwCFSxK9HihfeOZWq8cF3xhS3Z280rrauzXSG9XXH/nXHTG9sbGw0UiebOSdyLudcybmacy1nFLl+zmaZ9Y2Nifx+OedKztWcaznjSK6fs5lzIudyzpWcqznXckYt18/ZzDmRcznnSs7VnGs545CM3QMAAAAAAAAAAAAAAAAAAD5aiuqfFN/55nra6O/MLz0RnVw1H+hH3v8HAAD///8K+As=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 1.520455104s ago: executing program 8 (id=3690): socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7fff, "b5787e7373bd4da285c6c779e772cc7c"}}}]}, 0x48}}, 0x0) 1.392706669s ago: executing program 8 (id=3691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000002c0)={0x1, 0x102, 0x4, {0x4a4, 0x4, 0x780000, 0xfcad}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x401b0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.376204142s ago: executing program 5 (id=3692): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) 1.235088553s ago: executing program 4 (id=3693): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(0x3) syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000000380)=""/153, 0x99) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 225.792849ms ago: executing program 3 (id=3694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 225.545975ms ago: executing program 8 (id=3695): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x3, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 5 (id=3696): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2}, 0x80}], 0x2, 0x10002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) kernel console output (not intermixed with test programs): unting filesystem 00000000-0000-0000-0000-000000000000. [ 975.621426][T16091] loop5: detected capacity change from 0 to 512 [ 975.730084][T16091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.781685][T16091] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 975.878258][T16096] syzkaller0: entered promiscuous mode [ 975.914643][T16096] syzkaller0: entered allmulticast mode [ 976.268260][T16109] loop6: detected capacity change from 0 to 1024 [ 976.275945][T16109] EXT4-fs: Ignoring removed orlov option [ 976.322326][T16109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 976.400837][T16113] loop7: detected capacity change from 0 to 512 [ 976.413068][T16113] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 976.437704][T15447] Process accounting resumed [ 976.453954][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.579901][ T8836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.601537][T16113] syz.7.2140: attempt to access beyond end of device [ 976.601537][T16113] loop7: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 976.758285][T16113] syz.7.2140: attempt to access beyond end of device [ 976.758285][T16113] loop7: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 976.879979][ T31] audit: type=1800 audit(1778148299.119:117): pid=16113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2140" name="file2" dev="loop7" ino=1048632 res=0 errno=0 [ 978.939892][T16167] syzkaller0: entered promiscuous mode [ 978.955919][T16167] syzkaller0: entered allmulticast mode [ 979.084194][T16177] netlink: 'syz.8.2165': attribute type 1 has an invalid length. [ 979.325783][T16177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 979.341924][ T31] audit: type=1326 audit(1778148301.579:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.2.2167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa1d9cdd9 code=0x7ffc0000 [ 979.367192][ T31] audit: type=1326 audit(1778148301.579:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.2.2167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa1d9cdd9 code=0x7ffc0000 [ 979.430403][ T31] audit: type=1326 audit(1778148301.609:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.2.2167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fcfa1d9cdd9 code=0x7ffc0000 [ 979.478787][ T31] audit: type=1326 audit(1778148301.609:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.2.2167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa1d9cdd9 code=0x7ffc0000 [ 979.507179][ T31] audit: type=1326 audit(1778148301.619:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.2.2167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fcfa1d9cdd9 code=0x7ffc0000 [ 979.645852][ T31] audit: type=1326 audit(1778148301.759:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.2.2167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa1d9cdd9 code=0x7ffc0000 [ 979.742493][ T31] audit: type=1326 audit(1778148301.759:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.2.2167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa1d9cdd9 code=0x7ffc0000 [ 979.855562][T16191] loop7: detected capacity change from 0 to 512 [ 979.979562][T16191] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 980.038927][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2175'. [ 980.060831][T16200] loop2: detected capacity change from 0 to 1024 [ 980.109478][T16191] EXT4-fs (loop7): orphan cleanup on readonly fs [ 980.117670][T16199] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2175'. [ 980.159216][T16191] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 980.192604][T16200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.275757][T16191] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 980.376329][T16191] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.2168: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 980.470488][T16191] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 980.471064][T16191] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2168: couldn't read orphan inode 13 (err -117) [ 980.480375][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 980.480405][ C0] EXT4-fs (loop7): last error at time 1778148302: ext4_ext_check_inode:521: inode 13 [ 980.629304][T16191] loop7: lost filesystem error report for type 5 error -117 [ 980.629416][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.633788][T16191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 980.815583][T16217] loop6: detected capacity change from 0 to 1024 [ 980.849186][T16217] EXT4-fs: Ignoring removed orlov option [ 980.863365][ T5780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 980.900474][T16217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.936564][ T5780] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 981.020313][T16191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 981.069881][ T5780] Process accounting resumed [ 981.386982][T16191] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 981.417841][ T8836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.457163][T16191] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2856c09c, mo2=0002] [ 981.534182][T16191] System zones: 0-2, 18-18, 34-34 [ 981.577447][T16191] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 981.957553][T16245] loop0: detected capacity change from 0 to 256 [ 982.048169][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.669085][T16263] loop0: detected capacity change from 0 to 1024 [ 982.703601][T16263] EXT4-fs: Ignoring removed orlov option [ 982.774403][T16263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.644318][T16263] Process accounting resumed [ 983.901441][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.459482][ T5780] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 984.501084][T16296] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2205'. [ 984.549138][ T5780] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 984.824036][T16299] fido_id[16299]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 985.332706][T16315] loop5: detected capacity change from 0 to 1024 [ 985.363271][T16315] EXT4-fs: Ignoring removed orlov option [ 985.435001][T16315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.551805][T16315] Process accounting resumed [ 985.740015][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.320090][T16325] syzkaller0: entered promiscuous mode [ 986.364282][T16325] syzkaller0: entered allmulticast mode [ 986.579151][T16359] netlink: 'syz.0.2223': attribute type 1 has an invalid length. [ 986.667386][T16363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2224'. [ 986.913642][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807cf5d400: rx timeout, send abort [ 987.413403][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807cf5c800: rx timeout, send abort [ 987.422021][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807cf5d400: abort rx timeout. Force session deactivation [ 987.921763][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807cf5c800: abort rx timeout. Force session deactivation [ 989.741172][T16390] loop8: detected capacity change from 0 to 1024 [ 989.963266][ T5780] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 989.991508][ T5780] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 990.017509][T16392] loop8: detected capacity change from 0 to 4096 [ 990.031565][T16392] EXT4-fs: Ignoring removed mblk_io_submit option [ 990.056044][T16392] EXT4-fs: Ignoring removed orlov option [ 990.148219][T16393] fido_id[16393]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 990.409629][T16395] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2234'. [ 991.294499][T16359] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 991.302974][T16361] vlan2: entered allmulticast mode [ 991.316447][T16361] veth0_to_bond: entered allmulticast mode [ 991.544844][T16396] vlan0: entered allmulticast mode [ 991.573555][T16396] bond0: entered allmulticast mode [ 991.588285][T16396] bond_slave_0: entered allmulticast mode [ 991.608340][T16396] bond_slave_1: entered allmulticast mode [ 991.743391][T16395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.791318][T16395] bond_slave_0: left allmulticast mode [ 991.844523][T16395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.878769][T16395] bond_slave_1: left allmulticast mode [ 991.915116][T16395] bond0 (unregistering): Released all slaves [ 991.956140][T16403] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2236'. [ 992.238994][T16427] netlink: 'syz.0.2247': attribute type 1 has an invalid length. [ 992.252074][ T31] audit: type=1326 audit(1778148314.489:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.8.2246" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2939cdd9 code=0x7ffc0000 [ 992.283992][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.292677][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.303663][ T31] audit: type=1326 audit(1778148314.489:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.8.2246" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2939cdd9 code=0x7ffc0000 [ 992.330742][ T31] audit: type=1326 audit(1778148314.499:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.8.2246" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2939cdd9 code=0x7ffc0000 [ 992.387120][ T31] audit: type=1326 audit(1778148314.509:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.8.2246" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a2935d60e code=0x7ffc0000 [ 992.413193][ T31] audit: type=1326 audit(1778148314.509:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.8.2246" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a2935d60e code=0x7ffc0000 [ 992.439617][ T31] audit: type=1326 audit(1778148314.509:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.8.2246" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2939cdd9 code=0x7ffc0000 [ 992.464706][ T31] audit: type=1326 audit(1778148314.509:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.8.2246" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2939cdd9 code=0x7ffc0000 [ 992.516475][ T31] audit: type=1326 audit(1778148314.509:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.8.2246" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2939cdd9 code=0x7ffc0000 [ 992.519762][ T31] audit: type=1326 audit(1778148314.509:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.8.2246" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2939cdd9 code=0x7ffc0000 [ 992.519819][ T31] audit: type=1326 audit(1778148314.519:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.8.2246" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f4a2939cdd9 code=0x7ffc0000 [ 992.560144][T16427] 8021q: adding VLAN 0 to HW filter on device bond2 [ 992.641864][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2249'. [ 993.204553][T16465] loop8: detected capacity change from 0 to 512 [ 993.243940][T16469] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2260'. [ 993.531283][T16480] loop0: detected capacity change from 0 to 512 [ 993.596437][T16480] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 993.634266][T16480] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 993.670091][T16480] System zones: 0-1, 15-15, 18-18, 34-34 [ 993.677372][T16480] EXT4-fs (loop0): orphan cleanup on readonly fs [ 993.686685][T16480] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 993.704400][T16480] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 993.722577][T16480] EXT4-fs (loop0): 1 truncate cleaned up [ 993.743547][T16480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 993.768787][T16480] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 993.882217][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.299216][T16504] bridge_slave_0: left allmulticast mode [ 994.313849][T16504] bridge_slave_0: left promiscuous mode [ 994.322128][T16504] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.368257][T16504] bridge_slave_1: left allmulticast mode [ 994.384231][T16504] bridge_slave_1: left promiscuous mode [ 994.412316][T16504] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.477916][T16504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.493530][T16504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.530218][T16504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.558098][T16504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.579057][T16504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 994.608124][T16516] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 994.714708][T16518] loop0: detected capacity change from 0 to 512 [ 994.743580][T16520] loop6: detected capacity change from 0 to 256 [ 994.780950][T16518] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 994.795704][T16518] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 994.815483][T16520] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 994.882206][T16518] System zones: 0-1, 15-15, 18-18, 34-34 [ 994.925088][T16518] EXT4-fs (loop0): orphan cleanup on readonly fs [ 994.942297][T16520] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 994.965858][T16518] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 995.002885][T16520] FAT-fs (loop6): Filesystem has been set read-only [ 995.010505][T16520] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 995.025606][T16518] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 995.049307][T16518] EXT4-fs (loop0): 1 truncate cleaned up [ 995.058093][T16520] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 995.088180][T16520] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 995.101427][T16518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 995.150864][T16520] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 995.177912][T16518] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 995.200102][T16520] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 995.216615][T16520] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 995.253721][T16520] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 995.295766][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.893135][T16552] netlink: 'syz.5.2298': attribute type 3 has an invalid length. [ 995.942685][T16552] netlink: 'syz.5.2298': attribute type 10 has an invalid length. [ 995.982139][T16547] loop6: detected capacity change from 0 to 8192 [ 995.994591][T16552] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.036936][T16552] bond0: (slave team0): Enslaving as an active interface with an up link [ 996.437097][T16568] loop6: detected capacity change from 0 to 512 [ 996.499672][T16568] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 996.513340][T16568] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 996.530781][T16573] loop0: detected capacity change from 0 to 128 [ 996.580060][T16568] System zones: 0-1, 15-15, 18-18, 34-34 [ 996.622708][T16568] EXT4-fs (loop6): orphan cleanup on readonly fs [ 996.630403][T16568] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 996.647015][T16568] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 996.657313][T16568] EXT4-fs (loop6): 1 truncate cleaned up [ 996.666584][T16568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 996.672613][T16573] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 996.695137][T16568] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 996.767777][ T8836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.815265][T16573] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 997.635485][ T5628] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 997.641205][T15448] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 997.722667][T15448] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 997.812443][T16608] netlink: 'syz.2.2322': attribute type 18 has an invalid length. [ 997.838479][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 997.941825][ T452] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.953080][T16608] netlink: 'syz.2.2322': attribute type 18 has an invalid length. [ 998.000438][ T452] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.011879][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 998.060349][ T452] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.124806][ T452] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.174157][T16612] netlink: 'syz.8.2323': attribute type 4 has an invalid length. [ 998.192429][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2323'. [ 998.360980][T16617] loop2: detected capacity change from 0 to 1024 [ 998.396700][T16617] EXT4-fs: Ignoring removed orlov option [ 998.485283][T16617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 999.110147][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.451812][T16639] loop6: detected capacity change from 0 to 1024 [ 999.531864][T16639] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 999.655266][ T13] tipc: Subscription rejected, illegal request [ 999.664962][ T8836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.327689][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2346'. [ 1000.603388][T16676] loop7: detected capacity change from 0 to 1024 [ 1000.655333][T16676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1001.308460][T16701] netlink: 'syz.8.2362': attribute type 1 has an invalid length. [ 1001.479915][T16701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.524479][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.877798][T16708] bond0: (slave ip6gretap1): making interface the new active one [ 1001.899351][T16708] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1002.099653][T16709] veth15: entered promiscuous mode [ 1002.161684][T16709] bond0: (slave veth15): Enslaving as an active interface with a down link [ 1002.908043][T16753] random: crng reseeded on system resumption [ 1003.750350][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2394'. [ 1003.877646][T16776] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2396' sets config #127 [ 1003.970485][T16778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2398'. [ 1004.014296][T16778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2398'. [ 1004.210169][T16786] loop8: detected capacity change from 0 to 128 [ 1004.869717][T16784] loop6: detected capacity change from 0 to 1024 [ 1004.941318][T16784] EXT4-fs: Ignoring removed orlov option [ 1005.070693][T16784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.081847][ T8836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.390354][T15448] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1006.511345][T15448] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1006.844213][T16832] fido_id[16832]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1007.006592][T16848] netlink: 'syz.6.2426': attribute type 1 has an invalid length. [ 1007.249536][T16848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1007.285084][T16855] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2432'. [ 1007.728245][ T5780] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1007.790183][T16882] loop7: detected capacity change from 0 to 512 [ 1007.800422][ T5780] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1007.828587][T16882] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1007.901316][T16882] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.2442: invalid indirect mapped block 32768 (level 2) [ 1008.036783][T16882] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1008.042690][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1008.058318][ C0] EXT4-fs (loop7): initial error at time 1778148330: ext4_free_branches:1023: inode 16 [ 1008.068064][ C0] EXT4-fs (loop7): last error at time 1778148330: ext4_free_branches:1023: inode 16 [ 1008.101780][T16882] EXT4-fs (loop7): Remounting filesystem read-only [ 1008.130576][T16885] fido_id[16885]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1008.160698][T16882] EXT4-fs (loop7): 1 orphan inode deleted [ 1008.171815][T16882] EXT4-fs (loop7): 1 truncate cleaned up [ 1008.208876][T16882] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.425989][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.498220][T16900] team0: No ports can be present during mode change [ 1009.853581][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2458'. [ 1009.910141][T16924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2458'. [ 1009.970417][T16922] loop2: detected capacity change from 0 to 4096 [ 1010.004150][T16922] EXT4-fs: Ignoring removed mblk_io_submit option [ 1010.042772][T16922] EXT4-fs: Ignoring removed orlov option [ 1010.079251][T16922] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1010.127733][T16922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.255315][T16935] loop7: detected capacity change from 0 to 8192 [ 1010.317898][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 1010.317919][ T31] audit: type=1800 audit(1778148332.559:166): pid=16935 uid=60928 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2462" name="bus" dev="loop7" ino=1048640 res=0 errno=0 [ 1010.426420][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.696360][T16941] netlink: 'syz.2.2465': attribute type 3 has an invalid length. [ 1010.753702][T16941] netlink: 'syz.2.2465': attribute type 3 has an invalid length. [ 1010.793967][T16945] netlink: 'syz.2.2465': attribute type 10 has an invalid length. [ 1010.892771][T16945] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.916104][T16945] bond0: (slave team0): Enslaving as an active interface with an up link [ 1011.411354][T16965] loop5: detected capacity change from 0 to 2048 [ 1011.518863][T16965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.613684][T16975] loop7: detected capacity change from 0 to 512 [ 1011.668673][ T31] audit: type=1800 audit(1778148333.909:167): pid=16965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2475" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1011.751538][T16975] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.783719][T16975] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.041762][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.156668][ T7734] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1012.240946][ T7734] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 578 with error 28 [ 1012.290712][ T7734] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1012.290712][ T7734] [ 1012.329497][ T7734] EXT4-fs (loop5): Total free blocks count 0 [ 1012.351699][ T7734] EXT4-fs (loop5): Free/Dirty block details [ 1012.364898][ T7734] EXT4-fs (loop5): free_blocks=4096 [ 1012.404685][ T7734] EXT4-fs (loop5): dirty_blocks=608 [ 1012.436079][ T7734] EXT4-fs (loop5): Block reservation details [ 1012.454108][ T7734] EXT4-fs (loop5): i_reserved_data_blocks=38 [ 1012.566202][ T13] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 1012.626361][ T5625] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1013.968523][T17022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2495'. [ 1014.752031][T15446] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1014.853196][T15446] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1015.344098][T17057] netlink: 'syz.0.2511': attribute type 3 has an invalid length. [ 1015.373149][T17057] netlink: 'syz.0.2511': attribute type 3 has an invalid length. [ 1015.393669][T17057] netlink: 'syz.0.2511': attribute type 10 has an invalid length. [ 1015.442996][T17057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.466047][T17057] bond0: (slave team0): Enslaving as an active interface with an up link [ 1015.615659][T17067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2513'. [ 1017.047598][T17107] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2530'. [ 1017.219449][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2531'. [ 1017.260360][T17114] loop2: detected capacity change from 0 to 512 [ 1017.301673][T17114] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 1017.765341][T17121] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1019.831894][T17141] tipc: Enabling of bearer rejected, failed to enable media [ 1020.348907][T17154] vlan0: entered allmulticast mode [ 1020.367561][T17154] veth0_to_bond: entered allmulticast mode [ 1020.917881][T17170] loop2: detected capacity change from 0 to 4096 [ 1020.918857][T17170] EXT4-fs: Ignoring removed mblk_io_submit option [ 1020.918935][T17170] EXT4-fs: Ignoring removed orlov option [ 1020.928818][T17170] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1020.964564][T17170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.987493][T17176] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2554'. [ 1021.170555][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.339327][T17223] loop8: detected capacity change from 0 to 4096 [ 1023.408030][T17223] EXT4-fs: Ignoring removed mblk_io_submit option [ 1023.472455][T17223] EXT4-fs: Ignoring removed orlov option [ 1023.872039][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2581'. [ 1024.019861][T17248] netlink: 'syz.2.2582': attribute type 3 has an invalid length. [ 1024.060985][T17250] syzkaller0: entered promiscuous mode [ 1024.086006][T17250] syzkaller0: entered allmulticast mode [ 1024.101508][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1024.116944][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1024.128059][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1024.140915][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1024.146184][T17248] netlink: 'syz.2.2582': attribute type 3 has an invalid length. [ 1024.156647][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1024.881826][T17272] loop7: detected capacity change from 0 to 4096 [ 1024.919281][T17272] EXT4-fs: Ignoring removed mblk_io_submit option [ 1024.956223][T17272] EXT4-fs: Ignoring removed orlov option [ 1024.981221][T17272] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1025.103986][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2595'. [ 1025.125932][T17272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.247800][T17286] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1025.256303][T17286] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1025.291917][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.315764][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1025.460066][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.891352][T17302] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2599'. [ 1026.001497][T17314] syzkaller0: entered promiscuous mode [ 1026.029444][T17314] syzkaller0: entered allmulticast mode [ 1026.260839][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.272386][ T5640] Bluetooth: hci0: command tx timeout [ 1026.283473][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.346362][T17319] tipc: Started in network mode [ 1026.376469][T17319] tipc: Node identity 82dc793b26a1, cluster identity 4711 [ 1026.400592][T17319] tipc: Enabled bearer , priority 0 [ 1026.417458][T17313] tipc: Resetting bearer [ 1026.496297][T17313] tipc: Disabling bearer [ 1026.755065][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.799970][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.942345][T17346] loop8: detected capacity change from 0 to 4096 [ 1026.956222][T17346] EXT4-fs: Ignoring removed mblk_io_submit option [ 1026.992367][T17346] EXT4-fs: Ignoring removed orlov option [ 1027.081547][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.115739][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.174489][T17352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'. [ 1027.590347][T17354] loop7: detected capacity change from 0 to 8192 [ 1028.342692][ T5640] Bluetooth: hci0: command tx timeout [ 1028.430309][T17377] syzkaller0: entered promiscuous mode [ 1028.580520][T17377] syzkaller0: entered allmulticast mode [ 1028.664731][T17395] loop7: detected capacity change from 0 to 128 [ 1029.310260][ T13] bridge_slave_1: left allmulticast mode [ 1029.331704][ T13] bridge_slave_1: left promiscuous mode [ 1029.355771][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.373775][T17398] loop0: detected capacity change from 0 to 4096 [ 1029.387698][ T13] bridge_slave_0: left allmulticast mode [ 1029.394090][T17398] EXT4-fs: Ignoring removed mblk_io_submit option [ 1029.403192][ T13] bridge_slave_0: left promiscuous mode [ 1029.409745][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.422443][T17398] EXT4-fs: Ignoring removed orlov option [ 1029.450411][T17398] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1029.479794][T17398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.655213][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.120839][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1030.154390][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1030.193643][ T13] bond0 (unregistering): Released all slaves [ 1030.228858][ T13] bond1 (unregistering): Released all slaves [ 1030.422944][ T5640] Bluetooth: hci0: command tx timeout [ 1030.578220][ T5283] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1031.345962][T17442] loop7: detected capacity change from 0 to 4096 [ 1031.399769][T17442] EXT4-fs: Ignoring removed mblk_io_submit option [ 1031.425923][T17442] EXT4-fs: Ignoring removed orlov option [ 1031.449995][T17442] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1031.524575][T17442] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.673579][T17447] loop2: detected capacity change from 0 to 8192 [ 1031.714354][ T31] audit: type=1800 audit(1778148353.959:168): pid=17447 uid=60928 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2640" name="bus" dev="loop2" ino=1048643 res=0 errno=0 [ 1031.794312][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.879812][T17447] Trying to write to read-only block-device loop2 [ 1032.137748][ T13] hsr_slave_0: left promiscuous mode [ 1032.190979][ T13] hsr_slave_1: left promiscuous mode [ 1032.219378][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.259468][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.318247][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.362190][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.496765][ T13] veth1_macvtap: left promiscuous mode [ 1032.502501][ T5640] Bluetooth: hci0: command tx timeout [ 1032.523674][ T13] veth0_macvtap: left promiscuous mode [ 1032.537916][ T13] veth1_vlan: left promiscuous mode [ 1032.552707][ T13] veth0_vlan: left promiscuous mode [ 1033.385648][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1033.409677][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1033.610547][ T13] lo (unregistering): left allmulticast mode [ 1033.632625][T17252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.652414][T17252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.672520][T17252] bridge_slave_0: entered allmulticast mode [ 1033.680832][T17252] bridge_slave_0: entered promiscuous mode [ 1033.758628][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1033.923256][T17252] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.951107][T17252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.015499][T17252] bridge_slave_1: entered allmulticast mode [ 1034.039628][T17252] bridge_slave_1: entered promiscuous mode [ 1034.061338][T17500] loop5: detected capacity change from 0 to 4096 [ 1034.088933][T17500] EXT4-fs: Ignoring removed mblk_io_submit option [ 1034.148137][T17500] EXT4-fs: Ignoring removed orlov option [ 1034.181099][T17500] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1034.204239][T12757] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.236629][T12757] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.262159][T17500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.435865][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.493303][T12757] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.523973][T17513] 9p: Bad value for 'rfdno' [ 1034.531011][T12757] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.639379][T17252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.833661][T17252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.017278][T17527] loop5: detected capacity change from 0 to 256 [ 1035.029498][T17252] team0: Port device team_slave_0 added [ 1035.327578][T17252] team0: Port device team_slave_1 added [ 1035.371113][T17532] loop8: detected capacity change from 0 to 2048 [ 1035.425584][T17532] ext4: Unknown parameter 'nouser_xattr' [ 1035.773737][T17252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.780756][T17252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.882395][T17543] loop8: detected capacity change from 0 to 512 [ 1035.895234][T17543] EXT4-fs: Ignoring removed nobh option [ 1036.247700][T17252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.418306][T17252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.431685][T17543] EXT4-fs (loop8): write access unavailable, skipping orphan cleanup [ 1036.442119][T17543] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1036.457316][T17543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.594106][T17252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.625232][T17252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.139372][T17252] hsr_slave_0: entered promiscuous mode [ 1037.189705][T17252] hsr_slave_1: entered promiscuous mode [ 1037.236965][T17252] debugfs: 'hsr0' already exists in 'hsr' [ 1037.277742][T17252] Cannot create hsr debugfs directory [ 1037.794642][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2682'. [ 1038.133370][T17590] loop5: detected capacity change from 0 to 2048 [ 1038.179045][T17595] loop0: detected capacity change from 0 to 512 [ 1038.226535][T17590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.397653][T17595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.419277][ T5283] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1038.524990][T17595] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.681335][T15445] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1038.830871][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.857692][T15445] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1038.902177][T17619] loop7: detected capacity change from 0 to 164 [ 1038.931220][ T31] audit: type=1804 audit(1778148361.159:169): pid=17607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2683" name="/newroot/522/file1/file1" dev="loop5" ino=15 res=1 errno=0 [ 1039.217856][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.591115][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2696'. [ 1039.984383][T17641] syzkaller0: entered promiscuous mode [ 1039.996640][T17641] syzkaller0: entered allmulticast mode [ 1040.027969][T17644] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2699'. [ 1040.578842][T17668] loop8: detected capacity change from 0 to 512 [ 1040.608790][T17672] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2707'. [ 1040.672416][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2707'. [ 1040.724840][T17675] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2707'. [ 1040.769789][T17675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2707'. [ 1040.847873][T17681] netlink: 'syz.7.2709': attribute type 3 has an invalid length. [ 1040.928446][T17686] netlink: 'syz.7.2709': attribute type 10 has an invalid length. [ 1044.797561][ T5283] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1044.839678][T17686] team0: left allmulticast mode [ 1044.860694][T17686] team_slave_0: left allmulticast mode [ 1044.871810][T17686] team_slave_1: left allmulticast mode [ 1044.919637][T17686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.956337][T17686] bond0: (slave team0): Enslaving as an active interface with an up link [ 1045.014485][T17252] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1045.043258][T17252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1045.061465][T17703] loop0: detected capacity change from 0 to 512 [ 1045.071735][T17252] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1045.139544][T17703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.163016][T17252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1045.226344][T17252] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1045.244952][T17703] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.275748][T17700] loop5: detected capacity change from 0 to 4096 [ 1045.323254][T17700] EXT4-fs: Ignoring removed mblk_io_submit option [ 1045.331129][T17252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1045.362538][T17700] EXT4-fs: Ignoring removed orlov option [ 1045.369306][T17252] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1045.405468][T17252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1045.419205][T17700] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1045.504301][T17700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.522992][T17703] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1045.553432][T17252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.569028][T17703] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 1045.584073][T17703] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1045.584073][T17703] [ 1045.631562][T17703] EXT4-fs (loop0): Total free blocks count 0 [ 1045.655305][T17703] EXT4-fs (loop0): Free/Dirty block details [ 1045.706520][T17252] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.734739][T17703] EXT4-fs (loop0): free_blocks=65280 [ 1045.756372][T17703] EXT4-fs (loop0): dirty_blocks=16 [ 1045.767341][T12757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.774623][T12757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.778660][T17703] EXT4-fs (loop0): Block reservation details [ 1045.785258][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.806522][T17703] EXT4-fs (loop0): i_reserved_data_blocks=16 [ 1045.834337][T12757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.841532][T12757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.016709][ T5628] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1046.129691][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.446191][T17745] loop7: detected capacity change from 0 to 512 [ 1046.524389][T17745] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.597662][T17745] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.710980][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.733540][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2722'. [ 1046.866485][T17763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1046.876586][T17763] IPv6: NLM_F_CREATE should be set when creating new route [ 1046.883901][T17763] IPv6: NLM_F_CREATE should be set when creating new route [ 1046.930232][T17763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1047.029264][T17755] bond3: entered promiscuous mode [ 1047.045336][T17755] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1047.133949][T17760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1047.145076][T17760] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1047.189535][T17770] netlink: 'syz.2.2725': attribute type 3 has an invalid length. [ 1047.190094][T17760] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 1047.235431][T17763] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1047.249127][T17763] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 1047.249958][T17772] netlink: 'syz.2.2725': attribute type 10 has an invalid length. [ 1048.032885][T17785] loop2: detected capacity change from 0 to 4096 [ 1048.040265][T17785] EXT4-fs: Ignoring removed mblk_io_submit option [ 1048.086003][T17785] EXT4-fs: Ignoring removed orlov option [ 1048.705233][T17252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.821251][T17813] loop5: detected capacity change from 0 to 2048 [ 1048.900502][T17813] loop5: p2 < > p4 [ 1048.926811][T17813] loop5: p4 size 262144 extends beyond EOD, truncated [ 1049.047797][T17820] tipc: Enabled bearer , priority 0 [ 1049.078406][T17820] syzkaller0: entered promiscuous mode [ 1049.097867][T17820] syzkaller0: entered allmulticast mode [ 1049.237320][T17820] tipc: Resetting bearer [ 1049.280963][T17818] tipc: Resetting bearer [ 1049.370879][T17818] tipc: Disabling bearer [ 1049.701412][T17252] veth0_vlan: entered promiscuous mode [ 1049.767363][T17252] veth1_vlan: entered promiscuous mode [ 1049.866738][T17834] loop0: detected capacity change from 0 to 4096 [ 1049.899496][T17834] EXT4-fs: Ignoring removed mblk_io_submit option [ 1049.928054][T17834] EXT4-fs: Ignoring removed orlov option [ 1049.950545][T17252] veth0_macvtap: entered promiscuous mode [ 1049.970598][T17834] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1050.001277][T17252] veth1_macvtap: entered promiscuous mode [ 1050.057812][T17834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.140421][T17252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.201708][T17252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.288197][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.359068][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.436916][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.474021][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.546530][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.196481][ T7734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.252361][ T7734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.481494][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.512402][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.950070][T17890] loop5: detected capacity change from 0 to 4096 [ 1051.979581][T17890] EXT4-fs: Ignoring removed mblk_io_submit option [ 1052.011446][T17890] EXT4-fs: Ignoring removed orlov option [ 1052.044049][T17890] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1052.090535][T17890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.400317][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.634083][T15447] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1052.675064][T15447] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1052.968482][T17914] fido_id[17914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1052.983372][T17916] tipc: Started in network mode [ 1053.012414][T17916] tipc: Node identity 7e1ef1764009, cluster identity 4711 [ 1053.027870][T17916] tipc: Enabled bearer , priority 0 [ 1053.169192][T17915] tipc: Disabling bearer [ 1053.708966][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.722486][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.827312][T17943] loop5: detected capacity change from 0 to 4096 [ 1053.844288][T17943] EXT4-fs: Ignoring removed mblk_io_submit option [ 1053.851195][T17943] EXT4-fs: Ignoring removed orlov option [ 1053.863563][T17943] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1053.975179][T17943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1054.117170][T17965] netlink: 'syz.7.2790': attribute type 1 has an invalid length. [ 1054.274682][T17965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1054.294464][T17969] vlan0: entered allmulticast mode [ 1054.300132][T17969] veth0_to_bond: entered allmulticast mode [ 1054.385469][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.652495][T17979] loop7: detected capacity change from 0 to 256 [ 1054.906854][T17980] tipc: Enabled bearer , priority 0 [ 1055.179772][T17978] tipc: Disabling bearer [ 1056.921768][T18017] loop9: detected capacity change from 0 to 4096 [ 1056.999179][T18017] EXT4-fs: Ignoring removed mblk_io_submit option [ 1057.077365][T18017] EXT4-fs: Ignoring removed orlov option [ 1057.381992][T18017] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1057.564108][T18017] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.635755][T18034] loop5: detected capacity change from 0 to 512 [ 1057.715879][T18034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.726191][T18022] loop8: detected capacity change from 0 to 8192 [ 1057.745348][T18034] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1057.936878][T17252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.030520][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.101134][T18079] loop5: detected capacity change from 0 to 512 [ 1059.189307][T18074] loop9: detected capacity change from 0 to 4096 [ 1059.201554][T18079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.249143][T18074] EXT4-fs: Ignoring removed mblk_io_submit option [ 1059.295113][T18079] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.324967][T18074] EXT4-fs: Ignoring removed orlov option [ 1059.365896][T18074] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1059.514921][T18074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.579777][T18083] loop2: detected capacity change from 0 to 8192 [ 1059.621498][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.913788][T17252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.208355][T18109] loop0: detected capacity change from 0 to 256 [ 1060.250887][T18109] FAT-fs (loop0): bogus sectors per cluster 0 [ 1060.277920][T18109] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1060.298593][T18111] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 1060.998238][T15419] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1061.039609][T15419] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1061.234213][T18133] loop0: detected capacity change from 0 to 8192 [ 1061.291095][ T31] audit: type=1800 audit(1778148383.529:170): pid=18133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2848" name="bus" dev="loop0" ino=1048656 res=0 errno=0 [ 1061.414875][ T31] audit: type=1804 audit(1778148383.599:171): pid=18133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2848" name="/newroot/519/file0/bus" dev="loop0" ino=1048656 res=1 errno=0 [ 1062.086356][T18162] Illegal XDP return value 4294967274 on prog (id 180) dev syz_tun, expect packet loss! [ 1063.410790][T15447] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1063.527928][T15447] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1065.844689][T18277] loop0: detected capacity change from 0 to 8192 [ 1065.850967][T18290] loop8: detected capacity change from 0 to 512 [ 1065.940666][ T31] audit: type=1800 audit(1778148388.179:172): pid=18277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2881" name="bus" dev="loop0" ino=1048657 res=0 errno=0 [ 1066.029428][ T31] audit: type=1804 audit(1778148388.209:173): pid=18277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2881" name="/newroot/528/file0/bus" dev="loop0" ino=1048657 res=1 errno=0 [ 1066.606258][T18305] tipc: Enabled bearer , priority 0 [ 1066.756046][T18308] syzkaller0: entered promiscuous mode [ 1066.775832][T18308] syzkaller0: entered allmulticast mode [ 1066.996168][T18308] tipc: Resetting bearer [ 1067.090767][T18304] tipc: Resetting bearer [ 1067.198650][T18304] tipc: Disabling bearer [ 1067.299679][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2899'. [ 1067.479501][T18344] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2901'. [ 1067.545455][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880790b8c00: rx timeout, send abort [ 1068.086548][T18351] tipc: Enabling of bearer rejected, failed to enable media [ 1068.220388][T18360] loop5: detected capacity change from 0 to 8192 [ 1068.331448][ T31] audit: type=1800 audit(1778148390.569:174): pid=18360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2904" name="bus" dev="loop5" ino=1048658 res=0 errno=0 [ 1068.446845][ T31] audit: type=1804 audit(1778148390.609:175): pid=18360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2904" name="/newroot/560/file0/bus" dev="loop5" ino=1048658 res=1 errno=0 [ 1069.406187][T18402] netlink: 'syz.9.2916': attribute type 10 has an invalid length. [ 1069.511011][T18402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.559642][T18402] bond0: (slave team0): Enslaving as an active interface with an up link [ 1069.746477][T18411] loop7: detected capacity change from 0 to 512 [ 1069.804596][T18411] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1070.019136][T18411] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1070.166160][T18411] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2919: bg 0: block 248: padding at end of block bitmap is not set [ 1070.235034][T18411] loop7: lost filesystem error report for type 5 error -117 [ 1070.242259][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1070.256119][ C0] EXT4-fs (loop7): last error at time 1778148392: ext4_validate_block_bitmap:441 [ 1070.273379][T18411] Quota error (device loop7): write_blk: dquota write failed [ 1070.309830][T18411] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1070.346583][T18411] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2919: Failed to acquire dquot type 1 [ 1070.410235][T18411] loop7: lost filesystem error report for type 5 error -28 [ 1070.417349][T18411] EXT4-fs (loop7): 1 truncate cleaned up [ 1070.445818][T18432] tipc: Enabling of bearer rejected, failed to enable media [ 1070.464721][T18411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1070.755244][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1070.960659][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2927'. [ 1071.244224][T15431] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1071.276850][T15431] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1071.292049][T18455] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2931'. [ 1071.424555][T18462] syzkaller0: entered promiscuous mode [ 1071.452112][T18462] syzkaller0: entered allmulticast mode [ 1071.580714][T18464] fido_id[18464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1071.588575][T18468] loop2: detected capacity change from 0 to 1024 [ 1071.642584][T18468] EXT4-fs: Ignoring removed bh option [ 1071.729364][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2936'. [ 1071.822677][T18468] loop2: detected capacity change from 1024 to 64 [ 1071.952867][T18473] loop9: detected capacity change from 0 to 8192 [ 1072.221714][T18489] loop5: detected capacity change from 0 to 1024 [ 1072.245605][ C0] I/O error, dev loop9, sector 73 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.251564][T18473] loop9: detected capacity change from 8192 to 0 [ 1072.264783][T18489] EXT4-fs: Ignoring removed nobh option [ 1072.282900][T18489] EXT4-fs: inline encryption not supported [ 1072.295680][T18487] FAT-fs (loop9): Directory bread(block 73) failed [ 1072.321837][T18489] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1072.321837][T18489] [ 1072.338420][T18487] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 1072.369764][T18487] FAT-fs (loop9): Filesystem has been set read-only [ 1072.386313][T18496] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2942'. [ 1072.434408][T18487] FAT-fs (loop9): FAT read failed (blocknr 1) [ 1072.539132][T18491] FAT-fs (loop9): FAT read failed (blocknr 1) [ 1072.547722][T18496] bond2: entered promiscuous mode [ 1072.554547][T18496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1072.601187][T17252] FAT-fs (loop9): Directory bread(block 66) failed [ 1072.630621][T17252] FAT-fs (loop9): Directory bread(block 67) failed [ 1072.645258][T18501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1072.690361][T17252] FAT-fs (loop9): Directory bread(block 68) failed [ 1072.705791][T18501] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1072.735382][T17252] FAT-fs (loop9): Directory bread(block 69) failed [ 1072.784931][T18501] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 1072.797397][T17252] FAT-fs (loop9): Directory bread(block 70) failed [ 1072.801413][T18509] loop2: detected capacity change from 0 to 512 [ 1072.830433][T17252] FAT-fs (loop9): Directory bread(block 71) failed [ 1072.841664][T17252] FAT-fs (loop9): FAT read failed (blocknr 1) [ 1072.940838][T15443] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1073.009309][T15443] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1073.399075][T18518] fido_id[18518]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1073.482592][T18527] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2950'. [ 1073.760874][T18530] syzkaller0: entered promiscuous mode [ 1073.785466][T18530] syzkaller0: entered allmulticast mode [ 1075.451090][T15431] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1075.479000][T15431] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1075.632721][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1075.685069][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1075.704577][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1075.718042][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1075.733540][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1075.963994][T18578] fido_id[18578]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1077.782675][ T5639] Bluetooth: hci0: command tx timeout [ 1079.873889][ T5639] Bluetooth: hci0: command tx timeout [ 1080.647154][ T1014] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.153161][ T1014] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.381521][T18651] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2987'. [ 1081.556173][ T1014] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.778598][T18657] syzkaller0: entered promiscuous mode [ 1081.801703][T18657] syzkaller0: entered allmulticast mode [ 1081.928770][ T1014] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.942448][ T5639] Bluetooth: hci0: command tx timeout [ 1084.025239][ T5639] Bluetooth: hci0: command tx timeout [ 1087.587594][T18743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3023'. [ 1087.608779][ T1014] bridge_slave_1: left allmulticast mode [ 1087.620695][T18743] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3023'. [ 1087.651871][ T1014] bridge_slave_1: left promiscuous mode [ 1087.658521][T15443] IPVS: starting estimator thread 0... [ 1087.679403][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.735060][ T1014] bridge_slave_0: left allmulticast mode [ 1087.758346][ T1014] bridge_slave_0: left promiscuous mode [ 1087.770843][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.779793][T18745] IPVS: using max 25 ests per chain, 60000 per kthread [ 1088.627472][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.692048][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.716345][ T1014] bond0 (unregistering): (slave team0): Releasing backup interface [ 1088.727604][ T1014] bond0 (unregistering): Released all slaves [ 1089.215028][T18789] syzkaller0: entered promiscuous mode [ 1089.236961][T18789] syzkaller0: entered allmulticast mode [ 1090.077332][T18816] netlink: 'syz.0.3045': attribute type 1 has an invalid length. [ 1090.132696][T18816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3045'. [ 1090.243335][ T1014] hsr_slave_0: left promiscuous mode [ 1090.276012][ T1014] hsr_slave_1: left promiscuous mode [ 1090.299523][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.333028][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.389348][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.417882][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.501936][ T1014] veth1_macvtap: left promiscuous mode [ 1090.547628][ T1014] veth0_macvtap: left promiscuous mode [ 1090.565145][ T1014] veth1_vlan: left promiscuous mode [ 1090.580903][ T1014] veth0_vlan: left promiscuous mode [ 1091.356255][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 1091.388244][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 1091.493974][T18863] loop7: detected capacity change from 0 to 512 [ 1091.545666][T18863] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1091.570684][T18863] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1091.616039][T18863] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1091.626347][T18863] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1091.635245][T18863] System zones: 0-2, 18-18, 34-35 [ 1091.656953][T18863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1091.746792][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.918722][T18828] vlan0: entered allmulticast mode [ 1091.926725][T18828] veth0_to_bond: entered allmulticast mode [ 1091.996898][ T5283] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1092.521909][T18579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.554561][T18579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.576441][T18579] bridge_slave_0: entered allmulticast mode [ 1092.582908][T18887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3067'. [ 1092.621899][T18579] bridge_slave_0: entered promiscuous mode [ 1092.671379][T18579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.705519][T18579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.737998][T18579] bridge_slave_1: entered allmulticast mode [ 1092.763589][T18579] bridge_slave_1: entered promiscuous mode [ 1092.774972][T18894] loop8: detected capacity change from 0 to 1024 [ 1092.799666][T18894] EXT4-fs: Ignoring removed bh option [ 1092.971061][T18896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1093.007305][T18896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1093.276037][T18579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.350654][T18579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.568190][T18579] team0: Port device team_slave_0 added [ 1093.672923][T18579] team0: Port device team_slave_1 added [ 1093.882644][T18579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.901619][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.017800][T18579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.075242][T18579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.098363][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.229276][T18579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.577785][T18579] hsr_slave_0: entered promiscuous mode [ 1094.606012][T18579] hsr_slave_1: entered promiscuous mode [ 1094.631629][T18579] debugfs: 'hsr0' already exists in 'hsr' [ 1094.658607][T18579] Cannot create hsr debugfs directory [ 1094.897314][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3084'. [ 1095.467313][ T5283] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1096.355177][T18973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1096.662116][T18999] netlink: 'syz.0.3104': attribute type 1 has an invalid length. [ 1096.673780][T18995] loop5: detected capacity change from 0 to 4096 [ 1096.722657][T18995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.760077][T18995] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=4096, device loop5 blocksize: 4096 [ 1096.785557][T18995] grow_buffers: requested out-of-range block 144115188075855872 for device loop5 [ 1096.797625][T18995] EXT4-fs warning (device loop5): ext4_resize_fs:2018: can't read last block, resize aborted [ 1097.056791][T18999] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1097.084156][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.131601][T19004] erspan0: entered allmulticast mode [ 1097.208152][T19004] bond4: (slave erspan0): making interface the new active one [ 1097.306498][T19004] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 1097.633682][ T5283] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1097.954813][ T13] bond0: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 1098.572651][T19053] Bluetooth: MGMT ver 1.23 [ 1099.604320][T18579] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1099.689781][T18579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1099.737881][T18579] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1099.815261][T18579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1099.918629][T18579] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1100.635214][T18579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1100.689895][T18579] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1100.754257][T18579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1101.041672][T18579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.124752][T18579] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.170031][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.177261][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.251591][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.261095][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.529381][ T5283] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1101.836503][T19117] tipc: Started in network mode [ 1101.867043][T19117] tipc: Node identity 2647e294397a, cluster identity 4711 [ 1101.880395][T19122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3139'. [ 1101.903205][T19117] tipc: Enabled bearer , priority 0 [ 1101.925977][T19124] syzkaller0: entered promiscuous mode [ 1101.946987][T19124] syzkaller0: entered allmulticast mode [ 1102.137751][T19117] tipc: Resetting bearer [ 1102.233846][T19116] tipc: Resetting bearer [ 1102.504461][T19116] tipc: Disabling bearer [ 1103.760491][T18579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.849394][T19164] syzkaller0: entered promiscuous mode [ 1103.869339][T19164] syzkaller0: entered allmulticast mode [ 1104.069481][T19169] syzkaller0: entered promiscuous mode [ 1104.095192][T19169] syzkaller0: entered allmulticast mode [ 1104.126474][T19167] tipc: Enabled bearer , priority 0 [ 1104.292583][T19184] loop5: detected capacity change from 0 to 4096 [ 1104.375910][T19184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1104.633917][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.758427][T19243] loop2: detected capacity change from 0 to 128 [ 1109.731087][T19163] tipc: Resetting bearer [ 1109.777009][T19163] tipc: Disabling bearer [ 1109.789898][ T5860] tipc: Node number set to 2759686459 [ 1110.699203][T19250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.706546][T19250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.750994][T19250] bridge0: left promiscuous mode [ 1110.770341][T19250] bridge0: left allmulticast mode [ 1111.394461][T19250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.414057][T19250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1112.017733][T19250] vlan0: left allmulticast mode [ 1112.032400][T19250] veth0_to_bond: left allmulticast mode [ 1112.180132][T19282] tipc: Enabled bearer , priority 0 [ 1112.192621][T19285] syzkaller0: entered promiscuous mode [ 1112.198164][T19285] syzkaller0: entered allmulticast mode [ 1112.293485][T12757] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.313335][T12757] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.352369][T12757] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.380285][T12757] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.442140][T19285] tipc: Resetting bearer [ 1112.540259][T19285] tipc: Disabling bearer [ 1112.560345][T19333] loop7: detected capacity change from 0 to 2048 [ 1112.600205][T19333] EXT4-fs: Ignoring removed mblk_io_submit option [ 1112.625990][T19333] EXT4-fs: Ignoring removed mblk_io_submit option [ 1112.639917][T12757] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.685689][T12757] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.710971][T19333] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.758039][T12757] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.810325][T12757] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.864538][T19329] syzkaller0: entered promiscuous mode [ 1112.893703][T19329] syzkaller0: entered allmulticast mode [ 1112.907432][T19349] loop0: detected capacity change from 0 to 512 [ 1112.921598][T19320] tipc: Enabled bearer , priority 0 [ 1112.943619][T19349] EXT4-fs: inline encryption not supported [ 1112.977627][T19349] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1113.051103][T19319] tipc: Resetting bearer [ 1113.056429][T19349] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 1113.074636][T19349] System zones: 1-12 [ 1113.079846][T19349] EXT4-fs (loop0): 1 truncate cleaned up [ 1113.096489][T19349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.258426][T19349] EXT4-fs warning (device loop0): verify_group_input:156: Last group not full [ 1113.262125][T19319] tipc: Disabling bearer [ 1113.335005][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.436611][T19365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3189'. [ 1113.521414][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.698499][T18579] veth0_vlan: entered promiscuous mode [ 1113.710971][T19374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3191'. [ 1113.812029][T18579] veth1_vlan: entered promiscuous mode [ 1113.999906][T19380] erspan0: entered allmulticast mode [ 1114.043297][T18579] veth0_macvtap: entered promiscuous mode [ 1114.332817][T18579] veth1_macvtap: entered promiscuous mode [ 1114.369725][T18579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.484991][T18579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.526812][T19393] tipc: Enabled bearer , priority 0 [ 1114.587190][T19396] syzkaller0: entered promiscuous mode [ 1114.610420][T19396] syzkaller0: entered allmulticast mode [ 1114.646461][T12757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.688367][T12757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.721982][T12757] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.802856][T19414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'. [ 1114.884337][T12757] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.047747][T19418] tipc: Resetting bearer [ 1115.075912][T19391] tipc: Resetting bearer [ 1115.154328][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.166848][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.221317][T19391] tipc: Disabling bearer [ 1115.258669][T19426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3206'. [ 1116.203066][T19434] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3208'. [ 1117.181423][T19434] vlan0: entered allmulticast mode [ 1118.190403][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.262162][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.480593][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.514318][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.007715][T19491] netlink: 'syz.4.2958': attribute type 10 has an invalid length. [ 1119.093912][T19491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.156447][T19491] bond0: (slave team0): Enslaving as an active interface with an up link [ 1119.967325][T15458] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1119.988426][T15458] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1120.565481][T19519] tipc: Enabled bearer , priority 0 [ 1120.619930][T19519] syzkaller0: entered promiscuous mode [ 1120.658240][T19519] syzkaller0: entered allmulticast mode [ 1120.863118][T19519] tipc: Resetting bearer [ 1120.884731][T19516] tipc: Resetting bearer [ 1121.143921][T19516] tipc: Disabling bearer [ 1121.954978][T15458] IPVS: starting estimator thread 0... [ 1122.060646][T19540] loop4: detected capacity change from 0 to 512 [ 1122.105742][T19541] IPVS: using max 34 ests per chain, 81600 per kthread [ 1122.129121][T19540] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1122.191576][T19550] tmpfs: Bad value for 'mpol' [ 1122.280062][T19540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.303410][T19540] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1122.409061][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3239'. [ 1122.502148][T19566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3239'. [ 1122.760179][T18579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.861419][T19579] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3248'. [ 1123.287317][ T5640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1123.311433][ T5640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1123.327330][ T5640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1123.341214][ T5640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1123.350152][ T5640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1123.506900][T19588] syzkaller0: entered promiscuous mode [ 1123.557295][T19588] syzkaller0: entered allmulticast mode [ 1123.817849][T19607] tipc: Enabling of bearer rejected, failed to enable media [ 1125.165894][T19643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3261'. [ 1125.462736][ T5640] Bluetooth: hci6: command tx timeout [ 1126.320635][T19682] loop2: detected capacity change from 0 to 128 [ 1126.861633][T19697] loop2: detected capacity change from 0 to 512 [ 1126.874760][T19699] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3277'. [ 1126.976097][T19705] netlink: 'syz.0.3279': attribute type 1 has an invalid length. [ 1127.001768][T19702] tipc: Started in network mode [ 1127.016014][T19702] tipc: Node identity 32db74f2c10b, cluster identity 4711 [ 1127.024653][T19702] tipc: Enabled bearer , priority 0 [ 1127.049724][T19702] syzkaller0: entered promiscuous mode [ 1127.084954][T19702] syzkaller0: entered allmulticast mode [ 1127.186071][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3280'. [ 1127.245264][T19705] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1127.282543][T19706] bond4: (slave erspan0): Releasing active interface [ 1127.400967][T19717] tipc: Resetting bearer [ 1127.547214][ T5640] Bluetooth: hci6: command tx timeout [ 1127.995110][T19700] tipc: Resetting bearer [ 1128.259357][T19700] tipc: Disabling bearer [ 1128.401643][ T802] tipc: Node number set to 4090524914 [ 1128.440710][T19736] loop0: detected capacity change from 0 to 128 [ 1128.976833][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3293'. [ 1129.233452][T19590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.242404][T19590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.257429][T19590] bridge_slave_0: entered allmulticast mode [ 1129.274574][T19590] bridge_slave_0: entered promiscuous mode [ 1129.299791][T19590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.349560][T19590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.385517][T19590] bridge_slave_1: entered allmulticast mode [ 1129.425324][T19590] bridge_slave_1: entered promiscuous mode [ 1129.659415][ T5640] Bluetooth: hci6: command tx timeout [ 1130.259931][T19590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.493246][T19590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.338878][T19590] team0: Port device team_slave_0 added [ 1131.385943][T19590] team0: Port device team_slave_1 added [ 1131.557063][T19745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1131.603541][T19590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.636863][T19590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.703927][ T5640] Bluetooth: hci6: command tx timeout [ 1131.810496][T19590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.864035][T19590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.936752][T19590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.969712][T19590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.034709][T19810] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3306'. [ 1132.346402][T19590] hsr_slave_0: entered promiscuous mode [ 1132.385636][T19590] hsr_slave_1: entered promiscuous mode [ 1132.416688][T19590] debugfs: 'hsr0' already exists in 'hsr' [ 1132.449314][T19590] Cannot create hsr debugfs directory [ 1132.473652][T19824] tipc: Enabled bearer , priority 0 [ 1132.511869][T19821] syzkaller0: entered promiscuous mode [ 1132.528772][T19821] syzkaller0: entered allmulticast mode [ 1132.706294][T19822] tipc: Resetting bearer [ 1132.809100][T19820] tipc: Resetting bearer [ 1132.893294][T19820] tipc: Disabling bearer [ 1133.291708][T19844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1133.572026][T19859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1133.766641][T19865] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3322'. [ 1133.806894][T19863] vlan0: left allmulticast mode [ 1133.837845][T19863] veth0_to_bond: left allmulticast mode [ 1133.885961][ T1014] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.929507][ T1014] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.001608][ T1014] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.050312][ T1014] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.407179][T19590] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.826829][T19892] loop7: detected capacity change from 0 to 1024 [ 1134.870947][T19892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1134.931827][T19892] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1134.965589][T19892] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1134.978162][T19892] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1134.978162][T19892] [ 1134.988492][T19892] EXT4-fs (loop7): Total free blocks count 0 [ 1134.994637][T19892] EXT4-fs (loop7): Free/Dirty block details [ 1135.000766][T19892] EXT4-fs (loop7): free_blocks=20480 [ 1135.006669][T19892] EXT4-fs (loop7): dirty_blocks=80 [ 1135.011992][T19892] EXT4-fs (loop7): Block reservation details [ 1135.029356][T19892] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 1135.067547][ T802] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1135.111757][ T802] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1135.179358][ T452] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 1135.260037][ T8223] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1135.776108][T19590] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.791493][T19918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3336'. [ 1136.264294][T19590] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.499345][T19590] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.384754][T19590] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1137.425059][T19590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1137.453483][T19590] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1137.488346][T19590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1137.521548][T19590] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1137.560494][T19590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1137.585356][T19590] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1137.644530][T19590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1137.858079][T19967] netlink: 'syz.0.3350': attribute type 3 has an invalid length. [ 1137.890099][T19967] netlink: 'syz.0.3350': attribute type 3 has an invalid length. [ 1137.923295][T19967] netlink: 'syz.0.3350': attribute type 10 has an invalid length. [ 1137.954447][T13398] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1138.012071][T13398] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1138.108032][T19590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.285599][T19590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.364140][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.371400][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.438963][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.446264][ T7734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.579074][T19986] loop0: detected capacity change from 0 to 512 [ 1138.620363][T19986] EXT4-fs: inline encryption not supported [ 1138.659262][T19986] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1138.737942][T19986] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 1138.754321][T19986] System zones: 1-12 [ 1138.765680][T19986] EXT4-fs (loop0): 1 truncate cleaned up [ 1138.786370][T19986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1138.806541][T19986] EXT4-fs warning (device loop0): verify_group_input:156: Last group not full [ 1138.885767][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.466340][T19996] syzkaller0: entered promiscuous mode [ 1139.486344][T19996] syzkaller0: entered allmulticast mode [ 1143.826838][T20011] tipc: Enabled bearer , priority 0 [ 1143.833897][T20012] syzkaller0: entered promiscuous mode [ 1143.839395][T20012] syzkaller0: entered allmulticast mode [ 1143.863092][T20026] tipc: Resetting bearer [ 1144.010080][T20008] tipc: Resetting bearer [ 1144.137387][T20008] tipc: Disabling bearer [ 1144.305931][T20049] loop7: detected capacity change from 0 to 128 [ 1144.337947][T20032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.345718][T20032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.484074][ T5779] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1144.518225][ T5779] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1144.722796][T20032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.761203][T20032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.776252][T20055] fido_id[20055]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1144.862576][T20064] loop7: detected capacity change from 0 to 512 [ 1144.968441][ T58] Bluetooth: hci1: Frame reassembly failed (-84) [ 1144.979334][T20064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.326136][ T7734] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.352720][ T7734] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.397227][ T7734] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.439094][ T7734] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.478779][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.853215][T20086] loop2: detected capacity change from 0 to 164 [ 1145.887387][T20087] tipc: Started in network mode [ 1145.916168][T20087] tipc: Node identity 6e1739bd257c, cluster identity 4711 [ 1145.975545][T20087] tipc: Enabled bearer , priority 0 [ 1146.049489][T20090] syzkaller0: entered promiscuous mode [ 1146.093865][T20090] syzkaller0: entered allmulticast mode [ 1146.211933][T20087] tipc: Resetting bearer [ 1146.861780][T20085] tipc: Resetting bearer [ 1147.001557][ T5639] Bluetooth: hci1: command 0x1003 tx timeout [ 1147.012132][ T5640] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1147.013125][T20085] tipc: Disabling bearer [ 1147.208386][ T5779] tipc: Node number set to 1265318333 [ 1147.698140][T19590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1147.762070][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1147.789635][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1148.074140][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1148.108919][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1148.171522][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1149.040434][T20149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3397'. [ 1150.381405][T19590] veth0_vlan: entered promiscuous mode [ 1150.504078][ T5640] Bluetooth: hci1: command tx timeout [ 1150.594094][T19590] veth1_vlan: entered promiscuous mode [ 1150.773745][T19590] veth0_macvtap: entered promiscuous mode [ 1150.827798][T19590] veth1_macvtap: entered promiscuous mode [ 1150.974049][T19590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.061209][T19590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.184125][ T3280] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.276699][ T3280] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.287468][ T3280] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.368036][ T3280] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.061654][T20193] syzkaller0: entered promiscuous mode [ 1152.086259][T20193] syzkaller0: entered allmulticast mode [ 1152.305395][T20202] netlink: 'syz.4.3415': attribute type 1 has an invalid length. [ 1152.582531][ T5640] Bluetooth: hci1: command tx timeout [ 1152.590979][T20202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1152.664345][T20208] erspan0: entered allmulticast mode [ 1152.998899][ T7734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.045378][ T7734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.365218][ T3280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.374126][T20121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.390710][T20121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.396235][ T3280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.417862][T20121] bridge_slave_0: entered allmulticast mode [ 1153.443835][T20121] bridge_slave_0: entered promiscuous mode [ 1153.494247][T20121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.517061][T20121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.545494][T20121] bridge_slave_1: entered allmulticast mode [ 1153.599553][T20121] bridge_slave_1: entered promiscuous mode [ 1153.668779][T20245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3424'. [ 1153.771276][T20252] netlink: 'syz.4.3424': attribute type 10 has an invalid length. [ 1153.812740][T20121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.826643][T20121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.989494][T20121] team0: Port device team_slave_0 added [ 1154.005679][T20121] team0: Port device team_slave_1 added [ 1154.662844][ T5640] Bluetooth: hci1: command tx timeout [ 1154.855155][T20266] syzkaller0: entered promiscuous mode [ 1154.855201][T20266] syzkaller0: entered allmulticast mode [ 1154.955421][T20121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.955448][T20121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.955485][T20121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.969619][T20262] tipc: Enabled bearer , priority 0 [ 1154.975759][T20257] tipc: Resetting bearer [ 1155.131875][T20257] tipc: Disabling bearer [ 1155.151770][T20121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.151795][T20121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.151830][T20121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.368909][T20121] hsr_slave_0: entered promiscuous mode [ 1155.376325][T20121] hsr_slave_1: entered promiscuous mode [ 1155.377151][T20121] debugfs: 'hsr0' already exists in 'hsr' [ 1155.377174][T20121] Cannot create hsr debugfs directory [ 1157.667346][ T5640] Bluetooth: hci1: command tx timeout [ 1160.274653][T20344] syzkaller0: entered promiscuous mode [ 1160.364973][T20344] syzkaller0: entered allmulticast mode [ 1160.621810][T20352] tipc: Started in network mode [ 1160.657792][T20352] tipc: Node identity ce89ee30dbf4, cluster identity 4711 [ 1160.683382][T20352] tipc: Enabled bearer , priority 0 [ 1160.958876][T20333] tipc: Resetting bearer [ 1161.005870][T20372] loop8: detected capacity change from 0 to 1024 [ 1161.015305][T20372] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1161.038089][T20333] tipc: Disabling bearer [ 1161.141517][T20375] loop0: detected capacity change from 0 to 8 [ 1162.115494][T20382] overlayfs: failed to resolve './file0': -2 [ 1162.871213][ T802] tipc: Node number set to 360574512 [ 1163.267233][T20403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3461'. [ 1163.485806][T20409] loop4: detected capacity change from 0 to 128 [ 1163.555681][T20409] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1163.592328][T20407] bond0: (slave team0): Releasing backup interface [ 1163.615473][T20407] bridge_slave_0: left allmulticast mode [ 1163.629680][T20409] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.631706][T20407] bridge_slave_0: left promiscuous mode [ 1163.671291][T20407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.703511][T20407] bridge_slave_1: left allmulticast mode [ 1163.709488][T20407] bridge_slave_1: left promiscuous mode [ 1163.723029][T20407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.734749][T20409] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.4.3462: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 1163.761116][T20409] EXT4-fs (loop4): Remounting filesystem read-only [ 1163.795527][T20407] bond0: (slave bond_slave_0): Releasing backup interface [ 1163.808640][T20407] bond0: (slave bond_slave_1): Releasing backup interface [ 1163.838932][T20407] team0: Port device team_slave_0 removed [ 1163.864944][T20407] team0: Port device team_slave_1 removed [ 1163.873527][T18579] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1163.883015][T20422] loop0: detected capacity change from 0 to 1024 [ 1163.890050][T20407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.905736][T20407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.914239][T20422] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1163.957248][T20422] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1163.974261][T20407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1163.986568][T20422] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1164.005092][T20422] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1164.020598][T20422] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.3465: Inode bitmap for bg 0 marked uninitialized [ 1164.087018][T20422] loop0: lost filesystem error report for type 5 error -117 [ 1164.087351][T20422] EXT4-fs (loop0): Remounting filesystem read-only [ 1164.094728][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1164.094752][ C0] EXT4-fs (loop0): initial error at time 1778148486: ext4_read_inode_bitmap:167 [ 1164.094784][ C0] EXT4-fs (loop0): last error at time 1778148486: ext4_read_inode_bitmap:167 [ 1164.177187][T20422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1164.449724][T20121] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1164.571156][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.591527][T20121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1165.235292][T20121] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1165.346895][T20121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1165.428577][T20121] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1165.437234][T20451] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3472'. [ 1165.501331][T20121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1165.597657][T20121] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1166.205823][T20121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1166.231790][T20466] syzkaller0: entered promiscuous mode [ 1166.252772][T20466] syzkaller0: entered allmulticast mode [ 1166.299109][T20470] tipc: Enabled bearer , priority 0 [ 1166.377926][T20452] tipc: Resetting bearer [ 1166.491430][T20452] tipc: Disabling bearer [ 1166.541990][T20489] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3479'. [ 1166.607570][T20489] netlink: 'syz.8.3479': attribute type 10 has an invalid length. [ 1166.803184][T20500] loop4: detected capacity change from 0 to 2048 [ 1166.831649][T20121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.924846][T20121] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.956531][T20500] Alternate GPT is invalid, using primary GPT. [ 1166.997509][T20500] loop4: p2 p3 p7 [ 1167.063407][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.070680][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.165869][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.173176][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.370213][T20520] loop5: detected capacity change from 0 to 16 [ 1168.410888][T20520] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1168.546267][T20520] cramfs: unsupported filesystem features [ 1171.190332][T20584] loop0: detected capacity change from 0 to 8 [ 1171.720798][T20586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3501'. [ 1172.165227][T20598] loop4: detected capacity change from 0 to 128 [ 1172.242446][T20121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.867390][T20121] veth0_vlan: entered promiscuous mode [ 1173.927096][T20121] veth1_vlan: entered promiscuous mode [ 1173.949522][T20598] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1173.955732][T20598] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1174.056107][T20598] EXT4-fs (loop4): shut down requested (0) [ 1174.126650][T20121] veth0_macvtap: entered promiscuous mode [ 1174.145008][T20609] loop0: detected capacity change from 0 to 1024 [ 1174.220922][T20609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.270075][T20121] veth1_macvtap: entered promiscuous mode [ 1174.272337][T20609] ext4 filesystem being mounted at /661/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1174.402720][T20121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.497927][T20121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.566603][T20609] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.3506: lblock 3 mapped to illegal pblock 3 (length 3) [ 1174.617448][T20609] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1174.656876][ T7734] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.683358][ T7734] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.697407][T20609] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1174.697407][T20609] [ 1174.741125][T18579] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1174.764211][ T7734] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.795378][ T7734] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.886579][T12757] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:16: lblock 8 mapped to illegal pblock 8 (length 8) [ 1174.969820][T12757] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1175.052090][T12757] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1175.052090][T12757] [ 1175.514069][ T5628] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1175.632927][T20629] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1175.645536][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1175.840095][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.893028][ T5639] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1175.899469][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.246056][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.683202][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.951020][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.046687][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.158486][T20645] netlink: 'syz.2.3515': attribute type 1 has an invalid length. [ 1178.189153][ T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1178.208205][T20645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1178.270913][T20654] bond1: (slave geneve2): making interface the new active one [ 1178.282137][T20654] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1178.283998][ T24] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1178.431988][ T3296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.511923][ T3296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.549842][ T3296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.603776][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.746526][T20669] fido_id[20669]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1179.108806][T20681] loop8: detected capacity change from 0 to 128 [ 1179.844646][T20681] loop8: detected capacity change from 0 to 512 [ 1179.874696][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1179.899269][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1179.908566][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1179.916729][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1179.926060][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1179.989947][T20689] loop0: detected capacity change from 0 to 512 [ 1180.024244][T20689] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1180.134596][T20689] EXT4-fs (loop0): 1 truncate cleaned up [ 1180.204465][T20689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1180.418549][T20696] loop8: detected capacity change from 0 to 4096 [ 1180.450158][T20696] ntfs3: Unknown parameter 'm} "ԅ9O~b, priority 0 [ 1182.187966][T20732] tipc: Resetting bearer [ 1182.251759][T20732] tipc: Disabling bearer [ 1182.494469][ T452] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.581351][T20754] loop8: detected capacity change from 0 to 8 [ 1183.218386][T20763] loop4: detected capacity change from 0 to 2048 [ 1183.279226][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.294559][T20772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3540'. [ 1183.340168][T20763] loop4: p2 < > p4 [ 1183.459206][T20763] loop4: p4 size 8192 extends beyond EOD, truncated [ 1184.102907][T20042] udevd[20042]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1184.104153][ T5640] Bluetooth: hci2: command tx timeout [ 1184.121576][T20723] udevd[20723]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1184.807653][T20819] loop3: detected capacity change from 0 to 128 [ 1184.897416][T20819] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1184.916588][T20822] loop0: detected capacity change from 0 to 8 [ 1184.945793][T20819] hpfs: filesystem error: improperly stopped [ 1184.962828][T20819] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1184.974887][T20803] syzkaller0: entered promiscuous mode [ 1184.984653][T20803] syzkaller0: entered allmulticast mode [ 1184.993346][T20819] hpfs: You really don't want any checks? You are crazy... [ 1185.016422][T20819] hpfs: hpfs_map_sector(): read error [ 1185.029654][T20819] hpfs: code page support is disabled [ 1185.053610][T20819] hpfs: hpfs_map_4sectors(): unaligned read [ 1185.064348][T20807] tipc: Enabled bearer , priority 0 [ 1185.081665][T20819] hpfs: hpfs_map_4sectors(): unaligned read [ 1185.114733][T20819] hpfs: filesystem error: unable to find root dir [ 1185.464423][T20802] tipc: Resetting bearer [ 1185.589065][T20836] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.3553'. [ 1185.632702][T20834] loop3: detected capacity change from 0 to 2048 [ 1185.660646][T20802] tipc: Disabling bearer [ 1185.683566][T20834] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1186.096735][T20849] loop3: detected capacity change from 0 to 1024 [ 1186.166425][T20849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1186.187592][ T5640] Bluetooth: hci2: command tx timeout [ 1186.195096][T20849] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.510712][T20121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1186.745812][ T452] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1186.965617][T20874] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3561'. [ 1187.848805][ T452] bond0 (unregistering): Released all slaves [ 1187.906036][ T452] bond1 (unregistering): Released all slaves [ 1188.377695][ T5640] Bluetooth: hci2: command tx timeout [ 1189.093274][ T452] tipc: Left network mode [ 1189.173828][T20686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.181345][T20686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.192032][T20686] bridge_slave_0: entered allmulticast mode [ 1189.201428][T20686] bridge_slave_0: entered promiscuous mode [ 1189.210805][T20686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.337602][T20686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.345647][T20686] bridge_slave_1: entered allmulticast mode [ 1189.354317][T20686] bridge_slave_1: entered promiscuous mode [ 1190.590495][T20933] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3577'. [ 1190.818157][T20686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.885018][T20686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.018344][T20945] loop8: detected capacity change from 0 to 128 [ 1191.244243][T20686] team0: Port device team_slave_0 added [ 1191.281028][T20686] team0: Port device team_slave_1 added [ 1191.524350][T20958] loop0: detected capacity change from 0 to 256 [ 1191.588473][T20686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.639773][T20686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.689174][T20686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.724368][T20958] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 1192.349907][T20959] tipc: Enabled bearer , priority 0 [ 1192.454178][T20686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.496131][T20686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.627400][T20686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.646723][T20967] netlink: 'syz.5.3585': attribute type 20 has an invalid length. [ 1192.680190][T20952] syzkaller0: entered promiscuous mode [ 1192.688735][T20952] syzkaller0: entered allmulticast mode [ 1192.828313][T20951] tipc: Resetting bearer [ 1192.948545][T20951] tipc: Disabling bearer [ 1192.977081][T20943] loop4: detected capacity change from 0 to 32768 [ 1193.111942][T20943] (syz.4.3579,20943,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 1193.205837][T20943] (syz.4.3579,20943,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1193.596727][ T452] hsr_slave_0: left promiscuous mode [ 1193.651214][ T452] hsr_slave_1: left promiscuous mode [ 1193.932570][T21002] loop4: detected capacity change from 0 to 128 [ 1193.948136][T21003] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3591'. [ 1194.052610][T21002] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1194.073154][T21002] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1194.777119][T18579] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1195.576824][T20686] hsr_slave_0: entered promiscuous mode [ 1195.588674][T20686] hsr_slave_1: entered promiscuous mode [ 1195.599308][T20686] debugfs: 'hsr0' already exists in 'hsr' [ 1195.608305][T20686] Cannot create hsr debugfs directory [ 1196.058776][T21038] loop4: detected capacity change from 0 to 16 [ 1196.078284][T21038] erofs (device loop4): mounted with root inode @ nid 36. [ 1196.146761][T21044] netlink: 'syz.0.3601': attribute type 3 has an invalid length. [ 1196.188382][T21044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1196.281954][T21052] netlink: 'syz.0.3601': attribute type 10 has an invalid length. [ 1196.637277][T21044] netlink: 'syz.0.3601': attribute type 3 has an invalid length. [ 1196.652872][T21044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1196.996541][T21045] tipc: Enabled bearer , priority 0 [ 1197.458962][T21046] syzkaller0: entered promiscuous mode [ 1197.499495][T21046] syzkaller0: entered allmulticast mode [ 1197.628742][T21048] syzkaller0: entered promiscuous mode [ 1197.649037][T21048] syzkaller0: entered allmulticast mode [ 1197.965749][T21073] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3608'. [ 1198.901395][T21077] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3609'. [ 1199.006911][T21079] netlink: 'syz.4.3610': attribute type 1 has an invalid length. [ 1199.150143][ T5640] Bluetooth: hci0: command 0x0406 tx timeout [ 1199.257999][T21084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3612'. [ 1199.506641][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888052ec9000: rx timeout, send abort [ 1200.008911][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888052ec9c00: rx timeout, send abort [ 1200.017363][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888052ec9000: abort rx timeout. Force session deactivation [ 1200.530062][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888052ec9c00: abort rx timeout. Force session deactivation [ 1201.491194][T21036] tipc: Resetting bearer [ 1201.526718][T21036] tipc: Disabling bearer [ 1201.559223][T21079] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1201.909026][ T5640] Bluetooth: hci3: sending frame failed (-49) [ 1201.930213][ T5639] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 1202.691671][T21102] netlink: 'syz.8.3616': attribute type 3 has an invalid length. [ 1202.702243][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3616'. [ 1202.738586][T21102] netlink: 'syz.8.3616': attribute type 10 has an invalid length. [ 1203.314373][T21119] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3624'. [ 1203.571990][T21129] netlink: 'syz.4.3625': attribute type 1 has an invalid length. [ 1204.257476][T21129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1204.627322][T21139] tipc: Enabled bearer , priority 0 [ 1204.660202][T21139] syzkaller0: entered promiscuous mode [ 1204.667825][T21143] loop8: detected capacity change from 0 to 256 [ 1204.695271][T21139] syzkaller0: entered allmulticast mode [ 1204.970807][T21142] syzkaller0: entered promiscuous mode [ 1204.992501][T21142] syzkaller0: entered allmulticast mode [ 1205.597662][T21167] netlink: 'syz.8.3635': attribute type 3 has an invalid length. [ 1205.613873][T21167] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3635'. [ 1205.666232][T21169] netlink: 'syz.8.3635': attribute type 10 has an invalid length. [ 1206.034377][T21173] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1207.048018][T21184] netlink: 'syz.5.3640': attribute type 1 has an invalid length. [ 1209.030581][T21137] tipc: Resetting bearer [ 1209.061081][T21137] tipc: Disabling bearer [ 1209.089635][T21178] syz_tun: entered allmulticast mode [ 1209.119465][T21179] dvmrp6: entered allmulticast mode [ 1209.145013][T21184] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1209.158388][T21185] erspan0: entered allmulticast mode [ 1209.218744][T21188] loop0: detected capacity change from 0 to 512 [ 1209.864584][T20686] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1209.952620][T20686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1209.971976][T20686] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1210.140771][T21212] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1210.224222][T21212] overlayfs: overlapping lowerdir path [ 1210.689428][T20686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1210.714713][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1210.873111][T20686] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1210.980599][T20686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1211.036656][T20686] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1211.105853][T20686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1211.378746][T21243] netlink: 'syz.5.3654': attribute type 3 has an invalid length. [ 1211.427874][T21244] netlink: 'syz.5.3654': attribute type 10 has an invalid length. [ 1211.485401][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3654'. [ 1211.586592][T21232] loop8: detected capacity change from 0 to 512 [ 1211.594826][T21244] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.643561][T21244] bond0: (slave team0): Enslaving as an active interface with an up link [ 1211.689475][T21243] netlink: 'syz.5.3654': attribute type 3 has an invalid length. [ 1211.761838][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3654'. [ 1211.899939][T20686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.993336][T20686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.070941][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.078153][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.377167][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.384527][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.520234][T21258] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3657'. [ 1214.641907][T21295] netlink: 'syz.0.3667': attribute type 1 has an invalid length. [ 1214.661316][T21297] netlink: 'syz.3.3668': attribute type 3 has an invalid length. [ 1214.670865][T21297] netlink: 'syz.3.3668': attribute type 3 has an invalid length. [ 1214.684394][T21297] netlink: 'syz.3.3668': attribute type 10 has an invalid length. [ 1214.822716][T21295] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1214.845310][T21301] netlink: 'syz.4.3669': attribute type 3 has an invalid length. [ 1214.877666][T21297] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.918819][T21297] bond0: (slave team0): Enslaving as an active interface with an up link [ 1215.478887][T21313] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3671'. [ 1217.067434][T21322] netlink: 'syz.5.3675': attribute type 1 has an invalid length. [ 1217.213892][T21285] netlink: 'syz.8.3664': attribute type 4 has an invalid length. [ 1217.454098][T21339] loop0: detected capacity change from 0 to 8 [ 1218.429446][T21345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3683'. [ 1219.122575][T21347] netlink: 'syz.0.3684': attribute type 3 has an invalid length. [ 1219.185541][T21350] netlink: 'syz.0.3684': attribute type 10 has an invalid length. [ 1219.226430][T21347] netlink: 'syz.0.3684': attribute type 3 has an invalid length. [ 1219.237629][T20686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.342769][T20686] veth0_vlan: entered promiscuous mode [ 1219.408385][T21356] loop3: detected capacity change from 0 to 512 [ 1219.416249][T20686] veth1_vlan: entered promiscuous mode [ 1219.438604][T21356] EXT4-fs: Ignoring removed i_version option [ 1219.459745][T21356] EXT4-fs: Ignoring removed nobh option [ 1219.485630][T21356] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1219.544942][T21356] EXT4-fs (loop3): 1 truncate cleaned up [ 1219.592969][T20686] veth0_macvtap: entered promiscuous mode [ 1219.617547][T21356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1219.632395][T21367] loop0: detected capacity change from 0 to 2048 [ 1219.640664][T21367] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1219.675368][T21367] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1219.686541][T20686] veth1_macvtap: entered promiscuous mode [ 1219.798170][T20686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.015721][T20686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1220.026486][T21369] netlink: 'syz.5.3692': attribute type 1 has an invalid length. [ 1220.866903][T20121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.984213][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.018939][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.071757][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.110807][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.114920][T21372] ------------[ cut here ]------------ [ 1221.125376][T21372] within_last_ext && elen > ((loff_t)offset + 1) << inode->i_blkbits [ 1221.125397][T21372] WARNING: fs/udf/inode.c:683 at udf_setsize+0xde9/0x10b0, CPU#1: syz.0.3689/21372 [ 1221.143685][T21372] Modules linked in: [ 1221.148359][T21372] CPU: 1 UID: 0 PID: 21372 Comm: syz.0.3689 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.159411][T21372] Tainted: [L]=SOFTLOCKUP [ 1221.163802][T21372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1221.174364][T21372] RIP: 0010:udf_setsize+0xde9/0x10b0 [ 1221.179681][T21372] Code: 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 ee b9 fd cc e8 a5 6c 6f fe 45 89 f4 e9 2a fe ff ff e8 98 6c 6f fe 90 <0f> 0b 90 e9 90 f7 ff ff 44 89 f1 80 e1 07 38 c1 0f 8c ab f2 ff ff [ 1221.199676][T21372] RSP: 0018:ffffc9000d1c7aa0 EFLAGS: 00010287 [ 1221.205901][T21372] RAX: ffffffff835652d8 RBX: ffff88806445dbc8 RCX: 0000000000080000 [ 1221.213998][T21372] RDX: ffffc9000e9b4000 RSI: 000000000000044c RDI: 000000000000044d [ 1221.224372][T21372] RBP: ffffc9000d1c7c00 R08: ffff88806445db8b R09: 1ffff1100c88bb71 [ 1221.232450][T21372] R10: dffffc0000000000 R11: ffffed100c88bb72 R12: 0000000000000001 [ 1221.240860][T21372] R13: 1ffff92001a38f68 R14: 0000000000000200 R15: 0000000000001000 [ 1221.249255][T21372] FS: 00007f6f34ce26c0(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 1221.258291][T21372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1221.264980][T21372] CR2: 00007f27279456b8 CR3: 0000000039ddc000 CR4: 0000000000350ef0 [ 1221.273044][T21372] Call Trace: [ 1221.276337][T21372] [ 1221.279279][T21372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.285086][T21372] ? __pfx_udf_setsize+0x10/0x10 [ 1221.290050][T21372] ? down_write+0x16d/0x200 [ 1221.294657][T21372] ? __pfx_down_write+0x10/0x10 [ 1221.299538][T21372] ? evm_inode_setattr+0x1b6/0x7d0 [ 1221.304782][T21372] udf_setattr+0x3a1/0x5a0 [ 1221.309216][T21372] ? __pfx_udf_setattr+0x10/0x10 [ 1221.314270][T21372] notify_change+0xc1a/0xf40 [ 1221.318939][T21372] do_truncate+0x1c2/0x250 [ 1221.323532][T21372] ? __pfx_do_truncate+0x10/0x10 [ 1221.328532][T21372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.334263][T21372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.340348][T21372] do_ftruncate+0x490/0x540 [ 1221.345302][T21372] ? __pfx_do_ftruncate+0x10/0x10 [ 1221.350364][T21372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.356125][T21372] ? __fget_files+0x2a/0x420 [ 1221.360744][T21372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.366935][T21372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.372676][T21372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.378773][T21372] __x64_sys_ftruncate+0x8f/0xe0 [ 1221.384525][T21372] do_syscall_64+0x15f/0xf80 [ 1221.389271][T21372] ? trace_irq_disable+0x3b/0x140 [ 1221.394442][T21372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.400358][T21372] RIP: 0033:0x7f6f33d9cdd9 [ 1221.404963][T21372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.424704][T21372] RSP: 002b:00007f6f34ce2028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 1221.433217][T21372] RAX: ffffffffffffffda RBX: 00007f6f34016090 RCX: 00007f6f33d9cdd9 [ 1221.441237][T21372] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1221.449677][T21372] RBP: 00007f6f33e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1221.458052][T21372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.466202][T21372] R13: 00007f6f34016128 R14: 00007f6f34016090 R15: 00007fffc56570e8 [ 1221.474325][T21372] [ 1221.477355][T21372] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1221.484621][T21372] CPU: 1 UID: 0 PID: 21372 Comm: syz.0.3689 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.495545][T21372] Tainted: [L]=SOFTLOCKUP [ 1221.499850][T21372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1221.509905][T21372] Call Trace: [ 1221.513180][T21372] [ 1221.516098][T21372] vpanic+0x56c/0xa60 [ 1221.520080][T21372] ? __pfx__printk+0x10/0x10 [ 1221.524672][T21372] ? __pfx_vpanic+0x10/0x10 [ 1221.529167][T21372] ? is_bpf_text_address+0x292/0x2b0 [ 1221.534455][T21372] ? is_bpf_text_address+0x26/0x2b0 [ 1221.539673][T21372] panic+0xc5/0xd0 [ 1221.543410][T21372] ? __pfx_panic+0x10/0x10 [ 1221.547847][T21372] __warn+0x315/0x4c0 [ 1221.551828][T21372] ? udf_setsize+0xde9/0x10b0 [ 1221.556497][T21372] ? udf_setsize+0xde9/0x10b0 [ 1221.561171][T21372] __report_bug+0x29a/0x540 [ 1221.565677][T21372] ? udf_setsize+0xde9/0x10b0 [ 1221.570352][T21372] ? __pfx___report_bug+0x10/0x10 [ 1221.575376][T21372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.581011][T21372] ? udf_current_aext+0x452/0xb30 [ 1221.586050][T21372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.591706][T21372] ? do_raw_spin_lock+0x12b/0x2f0 [ 1221.596749][T21372] ? udf_setsize+0xde9/0x10b0 [ 1221.601425][T21372] report_bug+0x16a/0x220 [ 1221.605762][T21372] ? udf_setsize+0xde9/0x10b0 [ 1221.610436][T21372] ? udf_setsize+0xdeb/0x10b0 [ 1221.615108][T21372] handle_bug+0x9c/0x200 [ 1221.619360][T21372] exc_invalid_op+0x1a/0x50 [ 1221.623871][T21372] asm_exc_invalid_op+0x1a/0x20 [ 1221.628721][T21372] RIP: 0010:udf_setsize+0xde9/0x10b0 [ 1221.634003][T21372] Code: 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 ee b9 fd cc e8 a5 6c 6f fe 45 89 f4 e9 2a fe ff ff e8 98 6c 6f fe 90 <0f> 0b 90 e9 90 f7 ff ff 44 89 f1 80 e1 07 38 c1 0f 8c ab f2 ff ff [ 1221.653610][T21372] RSP: 0018:ffffc9000d1c7aa0 EFLAGS: 00010287 [ 1221.659681][T21372] RAX: ffffffff835652d8 RBX: ffff88806445dbc8 RCX: 0000000000080000 [ 1221.667648][T21372] RDX: ffffc9000e9b4000 RSI: 000000000000044c RDI: 000000000000044d [ 1221.675615][T21372] RBP: ffffc9000d1c7c00 R08: ffff88806445db8b R09: 1ffff1100c88bb71 [ 1221.683581][T21372] R10: dffffc0000000000 R11: ffffed100c88bb72 R12: 0000000000000001 [ 1221.691547][T21372] R13: 1ffff92001a38f68 R14: 0000000000000200 R15: 0000000000001000 [ 1221.699522][T21372] ? udf_setsize+0xde8/0x10b0 [ 1221.704223][T21372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.709885][T21372] ? __pfx_udf_setsize+0x10/0x10 [ 1221.714823][T21372] ? down_write+0x16d/0x200 [ 1221.719336][T21372] ? __pfx_down_write+0x10/0x10 [ 1221.724191][T21372] ? evm_inode_setattr+0x1b6/0x7d0 [ 1221.729321][T21372] udf_setattr+0x3a1/0x5a0 [ 1221.733736][T21372] ? __pfx_udf_setattr+0x10/0x10 [ 1221.738675][T21372] notify_change+0xc1a/0xf40 [ 1221.743288][T21372] do_truncate+0x1c2/0x250 [ 1221.747719][T21372] ? __pfx_do_truncate+0x10/0x10 [ 1221.752674][T21372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.758332][T21372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.763973][T21372] do_ftruncate+0x490/0x540 [ 1221.768488][T21372] ? __pfx_do_ftruncate+0x10/0x10 [ 1221.773603][T21372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.779238][T21372] ? __fget_files+0x2a/0x420 [ 1221.783832][T21372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.789903][T21372] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.795535][T21372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.801597][T21372] __x64_sys_ftruncate+0x8f/0xe0 [ 1221.806547][T21372] do_syscall_64+0x15f/0xf80 [ 1221.811144][T21372] ? trace_irq_disable+0x3b/0x140 [ 1221.816183][T21372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.822075][T21372] RIP: 0033:0x7f6f33d9cdd9 [ 1221.826485][T21372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.846091][T21372] RSP: 002b:00007f6f34ce2028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 1221.854512][T21372] RAX: ffffffffffffffda RBX: 00007f6f34016090 RCX: 00007f6f33d9cdd9 [ 1221.862484][T21372] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1221.870454][T21372] RBP: 00007f6f33e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1221.878420][T21372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.886384][T21372] R13: 00007f6f34016128 R14: 00007f6f34016090 R15: 00007fffc56570e8 [ 1221.894372][T21372] [ 1221.897707][T21372] Kernel Offset: disabled [ 1221.902022][T21372] Rebooting in 86400 seconds..