last executing test programs: 5m41.982932434s ago: executing program 32 (id=240): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000004b000/0x10000)=nil, 0x10000, 0xb635773f06ebbeea, 0x80010, r0, 0xf87b4000) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000fdff2dbd70f9ffffffffffff", @ANYRES32=0x0, @ANYBLOB="0008000023020000280012800b00010062726964676500001800028006000900000000000a0014"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x8000013, 0x20000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x92, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, &(0x7f0000001100), 0x0, &(0x7f0000001140)) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) unshare(0x480) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="10000000161411060000000000000000532013e2154d995d5b8d745a8440c49072c0aa26c687cbb620b35a2e562514724b0abfce553860918f5f3d7b6bb4a54f3251480f694479762112a6020aad608a03bcaaf1761c2975264806895a5f7ff813ef4c5682703c83"], 0x10}}, 0x0) unshare(0x6e000000) 3m51.661019224s ago: executing program 0 (id=397): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r3, &(0x7f00000008c0)="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", 0xb97) 3m46.040012587s ago: executing program 33 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="380100"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) chdir(&(0x7f00000000c0)='./file0\x00') getcwd(0x0, 0x0) 3m41.100962844s ago: executing program 0 (id=410): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x11000aa, 0x0, 0x1, 0x0, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x6000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) 3m39.010600744s ago: executing program 0 (id=414): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e", 0x7) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x3, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0xe, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0x7, 0x5, 0x2, 0x207, 0x5, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0xd4c, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x3, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0x0, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7fc, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="490000001400050925bd7000ebdbdf250a0604004e2e4e2300000000000000010600408003000000feffffff070000000200000003000080f5d035110b0135afec333f1f1ec423b935f110522efe", @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc810) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 3m33.606731281s ago: executing program 0 (id=418): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000500)="1fd4787488b1f24058b8199d33a8178ba1174e104ae1b3abb3faffaeb1a08aaeb8993c5fefff92daa06a331e595157761f72d282866c198c75e5f4c1f114555440e2c923df89b8a29cf82b51cddfc9f6855b9358722868848277b2ffaa380219e2103ad94a5c527d277624d6e0957baa3bbba59334916fb41475e5e891320186c1ee0e2a48e51a93311a4d776025dafd266c7cff569c60e008e76b2c734411ad8c57", 0xa2}, {&(0x7f00000005c0)="a2e1f75a5acb51fba68f72d473a1438b2fa6aee9bc10efc70b7f16e654f340c9fd9b40fcd7c2f55583cf7a2ca7be4c18b181cd1ccf007f5650ff7e01c64ccd85f8d4ed226e4ca0399034a0a45619339ff79f9c8ced0dfced5782fa0ce482417b8e9343ed19679dda57256a0078754e47388b9b107af79c32c54fc29793a2d05dd1f732e60edeb9", 0x87}, {&(0x7f0000000780)="395b7b9931074d3e26deed94dab0ab3d30a80a8806029d7a7f1e0367db29c9eac20789979cad7071d6bf4e4f222296281cfaf2c95f85adcf76cf8be4345a9bf66ad6baac6c502e0894d518279c8c310b355c34da938cdab36a66f17bfa8986708fb9fc296c5a48e8ed5f67758de22b2ae9c2f6bdb5fe832560470db8c522cfccf093eff1eb8f12ee44ac52a236b3cc2c068f94fd39e24151f6f3ee9cb32efb", 0x9f}, {&(0x7f0000001040)="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", 0x2fd}], 0x4, &(0x7f0000000840)=[@ip_retopts={{0x38, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x24, 0xdf, 0x1, 0x8, [{@rand_addr=0x64010102, 0x3}, {@local, 0x9}, {@local, 0xfffffff8}, {@remote, 0x7}]}]}}}], 0x38}}], 0x1, 0x0) 3m33.02699282s ago: executing program 0 (id=420): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 3m24.699161505s ago: executing program 0 (id=423): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff00000800000000000000010000840600040000"], 0x0, 0x42}, 0x28) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x15052, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) gettimeofday(&(0x7f0000000000), 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000280)=0x8001) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) 3m8.551845165s ago: executing program 34 (id=423): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff00000800000000000000010000840600040000"], 0x0, 0x42}, 0x28) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x15052, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) gettimeofday(&(0x7f0000000000), 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000280)=0x8001) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) 2m56.270115679s ago: executing program 4 (id=451): write(0xffffffffffffffff, &(0x7f00000008c0)="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", 0xb97) 2m55.623399805s ago: executing program 4 (id=453): openat$ptmx(0xffffffffffffff9c, 0x0, 0x400000, 0x0) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) unshare(0x2a020400) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) 2m55.089393335s ago: executing program 4 (id=454): capset(0x0, 0x0) syz_usb_connect(0x2, 0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c010203010902"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0xd2, &(0x7f00000003c0)=@string={0xd2, 0x3, "f3fa69c70d618373abe6db52ff0100b822342dfb2884b3d4eb5f144139d17357c79f77d09a13ad48df494a1ca9e8c4406092b215fd8aa79d0ef4ac413e280e2faeba25afa0ef4ccaa26c11c2b471416e52081829fc6431d128c5a718b11916931e359c85147ba8f3fa6dcb7e23995568a0f76827868d608d22aa1c664185a3a1f97bfb5c551edead67a8f95785980c593ea6e159ac52368d32e3608b5c7f1a1f048f621087685e94c8a0de6aebae22108c789540d44aaae53df0020888de7c6b50ae61e20f888a7e163cdeadcfd9a6df"}}]}) 2m52.85109176s ago: executing program 4 (id=456): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==") mount$bind(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x8, 0x0) 2m51.432468626s ago: executing program 4 (id=458): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)=""/298, 0x12a}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/197, 0xc5}, {&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f0000000ac0)=""/239, 0xef}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f00000002c0)=""/68, 0x44}], 0x8}, 0x1005}], 0x1, 0x0, 0x0) 2m50.786213831s ago: executing program 4 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) getgroups(0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x1, 0xfffffff7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0, [0x0, 0x0, 0x0, 0xff000000], [0xff, 0x0, 0xff], 'erspan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xf1be, 0x1, 0x2, 'pptp\x00', 'syz0\x00', {0x7fc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x39d) getrlimit(0x5, 0x0) syz_open_procfs(0x0, 0x0) r3 = fsopen(0x0, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002100210100000000000000000a0000000000000100000000", @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x400d0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180), 0x1, 0xbda, &(0x7f0000001140)="$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") fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x4) fchdir(r5) connect$unix(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) 2m35.117367441s ago: executing program 35 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) getgroups(0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x1, 0xfffffff7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0, [0x0, 0x0, 0x0, 0xff000000], [0xff, 0x0, 0xff], 'erspan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xf1be, 0x1, 0x2, 'pptp\x00', 'syz0\x00', {0x7fc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x39d) getrlimit(0x5, 0x0) syz_open_procfs(0x0, 0x0) r3 = fsopen(0x0, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002100210100000000000000000a0000000000000100000000", @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x400d0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180), 0x1, 0xbda, &(0x7f0000001140)="$eJzs3M9rHNcdAPDvjFZryVa9ciml7qUqpdhQupZcZGpTqF1ceumh0F4LFvLKCK1/IKm4knVYtf9AaXsu9BJIYhJyiM++JCTXXBL7mpBDwATFSiCERGH2hyRrdyXZ3vUo9ucDb+e9ebP7vt8dduc92J0AXlhj2UMacTwiLiURpeb+NCKK9dpQRK1x3PrayvQXayvTSWxs/PnTJJKIeLi2Mt16raS5PdJsDEXEe79L4vv/bB93YWl5bqparcw326cWr944tbC0/MvZq1NXKlcq1ybO/Hry9OSZ8bOTPcv1yw/P3/n8p3/4uPbVK1/f/uw/LyVxPkaafdvz6JWxGNt8T7YrRMRUrwfLyUAzn+15JoU9npT2OSgAALpKt83hfhilGIityVsp3np/x6EAAADAd9DGQMQGAAAA8JxLrP8BAADgOdf6HcDDtZXpVsn3FwnP1oMLETHayH+9WRo9hajVt0MxGBGHHyax/W+tSeNpT20sIj66f/b1rESf/oe8m9pqRPyo0/lP6vmP1v/F3Z5/GhHjPRh/bEd7j/wHejDkI54m//M9GP8x8weAnrh7oXEha7/+pZvzn+hw/St0uHY9iQ7Xv55f43fTmv+tt83/tvIf6DL/+9M+x7j18v9uduvL8v/Nnd+/1irZ+Nl2zxfd8yYr+/NgNeLHhU75J5v5J13yv9RqDO8+Rumbm5VufU+cf49s/D/iRHTOvyXZ/f5Ep2Zmq5XxxmPHMVbfnXy12/h555+d/8Nd8m/d/6nb+b+xzzH+evHiG207729Vd88//aSY/KVeKzb3/H1qcXF+IqKY/LF9/+ndY2kd03qNLP+TP9v9898p/+w7odZ8H7K1wGpzm7X/sWPM396+9Wa3eFrrvzzP/+Uu5397/u8U2s//v/Y5xs/f/vfJZrXtHgLb179ZycZvrYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCWNiJFI0vJmPU3L5YgjEfGDOJxWry8s/mLm+t+uXc76IkZjMJ2ZrVbGI6LUaCdZe6Je32qf3tH+VUQci4j/lobr7fL09erlvJMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg05GIGIkkLUdEGhHrpTQtl/OOCgAAAOi5o3kHAAAAAPTdaN4BAAAAAH1n/Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECfHfvJ3XtJRNTODddLptjsG8w1MqDf0rwDAHIzkHcAQG4KeQcA5OYx1/imC/AcSvboH+rac6jnsQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwcJ04fvdeEhG1c8P1kik2+wZzjQzotzTvAIDcDHTrGIqIwrONBXi2fMThxWWNDyR79A9tHVN7tOdQ32ICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OAZqZckLUdEsbmvXI74XkSMxmAyM1utjEfE0Yj4oDR4KGtP5BwzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvbewtDw3Va1W5rNKGs3K5h6VrUrSeMdqByUelaesFONAhHFAK3l/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIeFpeW5qWq1Mr+QdyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3haWluemqtXKfB8reecIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+vg0AAP//AtcKLw==") fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x4) fchdir(r5) connect$unix(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) 2m15.870754819s ago: executing program 7 (id=437): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6ee, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syncfs(0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) pwrite64(r0, 0x0, 0x0, 0xe7c) openat(0xffffffffffffff9c, 0x0, 0x46942, 0x0) 2m0.590537388s ago: executing program 36 (id=437): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6ee, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syncfs(0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) pwrite64(r0, 0x0, 0x0, 0xe7c) openat(0xffffffffffffff9c, 0x0, 0x46942, 0x0) 1m34.853339361s ago: executing program 2 (id=512): socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) pread64(r0, &(0x7f0000000240)=""/164, 0x131, 0x131) 1m32.543741594s ago: executing program 2 (id=516): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(r0, &(0x7f0000000cc0), 0xfd45) 1m30.759555262s ago: executing program 2 (id=521): socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x1eb1, &(0x7f0000000480)={0x0, 0x100000, 0x1, 0x1, 0x29}, &(0x7f0000000080)=0x0, &(0x7f0000000440)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x1328, 0xeb71, 0x8, 0x0, 0x0) syz_io_uring_complete(r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 1m29.361398907s ago: executing program 2 (id=525): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) close(0x3) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m24.529262049s ago: executing program 2 (id=529): creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100208e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) write$binfmt_misc(r3, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x16) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m20.486713243s ago: executing program 5 (id=534): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) syz_emit_ethernet(0x4a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000100)={r1, r2}) 1m20.185998405s ago: executing program 2 (id=535): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xea5bc50b6199d77e) sendto$inet_nvme_pdu(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file1'}, 0x237) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) 1m19.569789054s ago: executing program 5 (id=536): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x0, 0xff, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x6724, 0x9, 0x400, 0x5}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c840}, 0x0) 1m18.953137274s ago: executing program 5 (id=537): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x903, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) 1m18.452700312s ago: executing program 5 (id=538): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) 1m16.966901875s ago: executing program 5 (id=541): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x5], [{0x0, 0x3ff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x8}, {0xffefffff, 0xffffffff}, {0xfffffffc, 0x10001}, {0x3}, {0x0, 0xfff}, {0xffffffff}, {}, {}, {}, {0x3}], 0x2}) 1m16.20264883s ago: executing program 5 (id=544): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet(r1, 0x0, 0x0, 0x8c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x20, r2, 0x10ada85e65c25349, 0x70bd27, 0x0, {{0x67}, {@void, @val={0xfffffffffffffe80, 0x99, {0x8, 0x4}}}}}, 0x20}}, 0x6048004) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4040081) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xa}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x60}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xa}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x92}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) read$msr(r0, &(0x7f00000003c0)=""/89, 0x59) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000340)=0x0) timer_settime(r6, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0, 0x132}) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x2, &(0x7f0000000700)=0x91, 0x4) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 1m4.364889718s ago: executing program 37 (id=535): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xea5bc50b6199d77e) sendto$inet_nvme_pdu(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file1'}, 0x237) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) 1m0.066664198s ago: executing program 38 (id=544): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet(r1, 0x0, 0x0, 0x8c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x20, r2, 0x10ada85e65c25349, 0x70bd27, 0x0, {{0x67}, {@void, @val={0xfffffffffffffe80, 0x99, {0x8, 0x4}}}}}, 0x20}}, 0x6048004) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4040081) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xa}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x60}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xa}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x92}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) read$msr(r0, &(0x7f00000003c0)=""/89, 0x59) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000340)=0x0) timer_settime(r6, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0, 0x132}) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x2, &(0x7f0000000700)=0x91, 0x4) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 17.238386498s ago: executing program 6 (id=600): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x3f00, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, @empty, @local}}}}}}, 0x0) 16.509349834s ago: executing program 6 (id=602): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0x10}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x0) 14.458458374s ago: executing program 6 (id=605): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) 12.864040614s ago: executing program 6 (id=607): r0 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 12.122178625s ago: executing program 6 (id=609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x34, 0x8, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 11.883224826s ago: executing program 9 (id=610): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) 11.538116367s ago: executing program 6 (id=611): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x27, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f903000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x44004) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0xc000) 10.619165065s ago: executing program 9 (id=614): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x26f, 0x0, 0x8eb}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x56}) 7.495203076s ago: executing program 9 (id=620): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 5.663294699s ago: executing program 9 (id=626): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x13f, 0x0, &(0x7f00000004c0)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.323132115s ago: executing program 8 (id=627): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000980)="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", 0x584}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 5.225497622s ago: executing program 1 (id=628): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000002500)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x40) 5.105495847s ago: executing program 3 (id=629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xb}]}}]}, 0x3c}}, 0x8000) sendto$packet(r4, &(0x7f0000000240)="bad33075218151db00316f3a277f", 0xe, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 4.731628533s ago: executing program 8 (id=630): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='l_', 0x2}], 0x1}, 0x1) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x2, 0x4000000) 4.509602655s ago: executing program 1 (id=631): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0x3, @mcast1, 0x30}, 0x1c) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 4.013895586s ago: executing program 8 (id=632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 3.737556927s ago: executing program 9 (id=633): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 3.49522327s ago: executing program 3 (id=634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r1, 0xb26e82324748955d, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20080000}, 0x4000) 2.849698058s ago: executing program 1 (id=635): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x60}]}]}, 0x2c}}, 0x0) 2.758076749s ago: executing program 3 (id=636): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)='\'', 0x1}], 0x1) 2.21500319s ago: executing program 1 (id=637): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.10962757s ago: executing program 8 (id=638): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 2.081191684s ago: executing program 3 (id=639): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000011c0)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="7c42f5b0446d7b10bb9d9266b2b554f9533b72631eb0d42bde4da09a4b83eae94123daf7e5f4db4ac02a8d326e238f473251dadfea4f56d28c6f35662bc4fe67", 0x40}, {0x0}, {0x0}], 0x3}}], 0x1, 0x80c0) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) socket$inet(0xa, 0x801, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000d80)=""/151, 0x0, 0x97, 0x0, 0x5}, 0x20) 2.050402758s ago: executing program 9 (id=640): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x3ff, 0x5, 0x6, 0x3, 0x6, 0xfffffffe, 0x4, 0x5, 0x80000001, 0x5, 0x7, 0x8, 0x4, 0x6, 0x300, 0x6, 0x2, 0x3, 0x1ff, 0x3, 0x5, 0x3a7, 0x6, 0x6, 0xeea, 0x4, 0x4, 0x9, 0x9, 0x7, 0x0, 0x3fca, 0x62e6, 0x3, 0x4, 0x8, 0x2e2, 0x400, 0x6, 0x3, 0x9, 0xffffffff, 0x7f, 0xd, 0x1, 0x4, 0x7f, 0x9, 0x0, 0x0, 0x5a4, 0x101, 0x3, 0x3, 0xeb, 0x2, 0x8, 0x7, 0xffff8000, 0x0, 0x5, 0x8, 0x6, 0xb2, 0xca0e, 0x5, 0x200, 0x9, 0x1, 0x6, 0xffffffff, 0x3, 0x80, 0x6, 0x1b0, 0x2, 0x6, 0x8, 0xfffffffc, 0x3ad, 0x47d1, 0x4, 0x1, 0xf, 0x189, 0x9, 0x3, 0x3, 0x5, 0x4, 0x0, 0x2, 0x5, 0x2, 0x1, 0x6b3, 0x3, 0x4, 0x8, 0xffff8001, 0x3, 0x81, 0x7, 0xcb0a, 0xe51, 0x6, 0x8000, 0x5, 0x9, 0x8c73, 0x1, 0x81, 0x800, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0x3, 0x80, 0x6, 0xffffffa5, 0x1, 0x4f23dcfd, 0x0, 0xfd, 0x65, 0x9, 0x1ff, 0x101, 0x3, 0x0, 0xb, 0x80, 0x3, 0x7f, 0x9, 0xfffffff8, 0x1ff, 0x8000, 0xa, 0x8, 0x2, 0x1, 0x5, 0x3, 0x0, 0x1, 0x4, 0x200000, 0x10000000, 0xffffffff, 0xe, 0x2, 0x2bf4, 0x1d50, 0x9, 0x400, 0x4, 0x1, 0x7, 0x1000, 0x5af7, 0x6, 0x40, 0x5, 0x44, 0x15dbc6d1, 0xfd, 0x7fffffff, 0x0, 0x2, 0x6, 0x2, 0x10000, 0x0, 0x6, 0x1000, 0xe314, 0x5, 0x9, 0xffffff45, 0x2, 0x3f, 0xffffffff, 0x5, 0x7, 0x4, 0xd7, 0xe, 0x6, 0x9, 0x0, 0x7, 0x8, 0x9, 0x53e90d17, 0x2, 0x80, 0x8d4, 0x7, 0xf5, 0x8000, 0xbb6, 0x0, 0x10001, 0xd7, 0x4, 0x0, 0x7, 0x0, 0x0, 0x60, 0x0, 0x0, 0x4, 0x3, 0x8, 0xf9a0, 0x0, 0xd48, 0xf24, 0x1, 0x1, 0x6, 0x8, 0x2, 0x7, 0x22e, 0x6f4, 0x5, 0xfffffff9, 0x9, 0x3ff, 0xd91, 0x5, 0x1, 0x40, 0x9, 0xcd, 0xfffffffa, 0x2, 0x6, 0x6, 0x10, 0x2, 0x4, 0xffffff00, 0x6223, 0x7, 0x100, 0x9, 0x0, 0x6, 0x2, 0x3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.326031802s ago: executing program 8 (id=641): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=[{0x10}, {0x10, 0x114, 0x2}], 0x20}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @bcast, @bpq0, 0x9, 'syz0\x00', @default, 0x1, 0x1, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) r4 = socket(0x25, 0x1, 0x0) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="0219ba4571fa947260da5e698d5a100079c59fab21c58f511d70f2bcf7ba333617be8c24e285fb90fe9fef6c4c0990f2c9270fd24f5119c37da710d391986fb091ef8c3cf073ac5abada38ce98cdf1fe9588680b077e45949923124da5567838b8675f37c80ee6a69bac3274b5de580905326c890f21da9d60e92aad6cfba6ef8a33e50000"], 0x10}}, 0x34000) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES16=r6, @ANYRES8=r5], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000080)) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f00000001c0)=0x200, &(0x7f0000000280)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="562397314bb7dee2cd11bc000000000018150000000000000000009de70002ddd7564b2c6d5a6308cbd105b891acab85a3ddc19eb6a6a158586f20ad9abd3d682d162a80266fc2fa004a24c01b00"/103], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4c000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x25}, 0x7f, r10}) socket$netlink(0x10, 0x3, 0x8) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1.320295976s ago: executing program 1 (id=642): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(r0, &(0x7f0000000cc0), 0xfd45) 719.746646ms ago: executing program 3 (id=643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r0, 0x1) 460.452245ms ago: executing program 1 (id=644): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 97.520254ms ago: executing program 8 (id=645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x8, 0xca, 0x0, 0x1000, {[@generic={0x5, 0x2}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "2d81beae8e1b8eb60abcdc4551439c70"}]}}}}}}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 0s ago: executing program 3 (id=646): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2b, 0x25dfdbfd, {0x3c}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) kernel console output (not intermixed with test programs): e #15: comm syz.4.252: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 386.852332][ T7106] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 386.915266][ T7106] System zones: 0-1, 3-36 [ 387.773066][ T7106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.804665][ T5777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.374803][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.381601][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.263504][ T7121] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.253: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 391.484530][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.116954][ T7126] loop4: detected capacity change from 0 to 1024 [ 392.177022][ T7126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 392.267727][ T7126] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 392.292973][ T7126] System zones: 0-1, 3-36 [ 392.311332][ T7128] loop2: detected capacity change from 0 to 1024 [ 392.328166][ T7128] EXT4-fs: Ignoring removed nomblk_io_submit option [ 392.367100][ T7126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.529710][ T7128] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 392.636907][ T7128] System zones: 0-1, 3-36 [ 392.707043][ T7128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.550417][ T7137] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.256: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 396.999747][ T7140] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.258: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 398.014743][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.118912][ T5777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.002943][ T5070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.017143][ T5070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.029397][ T5070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 400.042748][ T5070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 400.054015][ T5070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 402.471452][ T5070] Bluetooth: hci5: command tx timeout [ 402.666027][ T7166] loop0: detected capacity change from 0 to 1024 [ 402.676232][ T7166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.853022][ T7166] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 402.915127][ T7166] System zones: 0-1, 3-36 [ 402.955235][ T7166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.300629][ T7176] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.269: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 405.234360][ T5070] Bluetooth: hci5: command tx timeout [ 407.249584][ T7172] loop4: detected capacity change from 0 to 1024 [ 407.313682][ T5070] Bluetooth: hci5: command tx timeout [ 407.977541][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.171607][ T7183] loop1: detected capacity change from 0 to 1024 [ 408.181396][ T7183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 408.261063][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 408.330402][ T7183] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 408.362977][ T7183] System zones: 0-1, 3-36 [ 408.453908][ T7183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.618348][ T86] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.148395][ T86] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.395648][ T5070] Bluetooth: hci5: command tx timeout [ 409.781937][ T7195] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.273: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 411.978390][ T86] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.564093][ T7204] loop0: detected capacity change from 0 to 1024 [ 412.745220][ T7204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 412.801374][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.848137][ T86] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.949396][ T7204] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 413.010117][ T7159] chnl_net:caif_netlink_parms(): no params data found [ 413.062449][ T7204] System zones: 0-1, 3-36 [ 413.124153][ T7204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.214072][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.556897][ T7233] loop1: detected capacity change from 0 to 1024 [ 420.607920][ T7233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.718408][ T7237] loop4: detected capacity change from 0 to 1024 [ 420.760619][ T7237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.791508][ T86] bridge_slave_1: left allmulticast mode [ 420.801348][ T7237] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 420.819474][ T86] bridge_slave_1: left promiscuous mode [ 420.838524][ T86] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.862703][ T7237] System zones: 0-1, 3-36 [ 420.888278][ T7233] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 420.901329][ T86] bridge_slave_0: left allmulticast mode [ 420.913670][ T7233] System zones: 0-1, 3-36 [ 420.935726][ T86] bridge_slave_0: left promiscuous mode [ 420.942873][ T86] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.968839][ T7233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.024439][ T7237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.028904][ T7246] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.286: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 424.896620][ T5777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.538729][ T86] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.593830][ T86] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.630650][ T86] bond0 (unregistering): Released all slaves [ 426.173292][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.253708][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.272349][ T7159] bridge_slave_0: entered allmulticast mode [ 426.305048][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.353456][ T7159] bridge_slave_0: entered promiscuous mode [ 426.628035][ T7264] loop4: detected capacity change from 0 to 1024 [ 426.642305][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.705297][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.753078][ T7264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 426.802485][ T7159] bridge_slave_1: entered allmulticast mode [ 426.867034][ T7159] bridge_slave_1: entered promiscuous mode [ 426.949020][ T7264] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 427.049137][ T7264] System zones: 0-1, 3-36 [ 427.200647][ T7264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.575503][ T5777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.614850][ T7159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.826497][ T7159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.189707][ T7286] loop1: detected capacity change from 0 to 1024 [ 431.215766][ T7285] loop4: detected capacity change from 0 to 1024 [ 431.267644][ T7159] team0: Port device team_slave_0 added [ 431.274287][ T7285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 431.275336][ T7286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 431.345710][ T7286] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 431.382324][ T7286] System zones: 0-1, 3-36 [ 431.382659][ T7285] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 431.415778][ T7286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.450711][ T7285] System zones: 0-1, 3-36 [ 431.482931][ T7285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.510818][ T86] hsr_slave_0: left promiscuous mode [ 431.613283][ T86] hsr_slave_1: left promiscuous mode [ 431.646193][ T86] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.836604][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.933428][ T86] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.123070][ T86] veth1_macvtap: left promiscuous mode [ 432.202294][ T86] veth0_macvtap: left promiscuous mode [ 432.208157][ T86] veth1_vlan: left promiscuous mode [ 432.290339][ T86] veth0_vlan: left promiscuous mode [ 432.610571][ T7299] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.299: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 434.293118][ T7305] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.297: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 436.705076][ T86] team0 (unregistering): Port device team_slave_1 removed [ 436.787034][ T7316] loop2: detected capacity change from 0 to 2048 [ 436.838849][ T86] team0 (unregistering): Port device team_slave_0 removed [ 436.895493][ T7316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.169004][ T7322] loop0: detected capacity change from 0 to 1024 [ 437.205208][ T7322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 437.231369][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.273943][ T7322] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 437.306368][ T7322] System zones: 0-1, 3-36 [ 437.394609][ T7322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.553336][ T7159] team0: Port device team_slave_1 added [ 437.591891][ T7325] loop2: detected capacity change from 0 to 1024 [ 437.624564][ T7325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 438.260631][ T7325] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 438.298671][ T5777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.333632][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.413133][ T7325] System zones: 0-1, 3-36 [ 438.546992][ T7325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.951848][ T7327] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.305: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 439.904127][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.079883][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.312780][ T7159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.722704][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.806959][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.087763][ T7341] loop1: detected capacity change from 0 to 1024 [ 441.119863][ T7341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 441.265149][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.272179][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.300521][ T7341] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 441.301021][ T7341] System zones: 0-1, 3-36 [ 441.315158][ T7341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.421985][ T7159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.472811][ T7351] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.307: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 446.160699][ T7159] hsr_slave_0: entered promiscuous mode [ 446.254639][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.330828][ T7159] hsr_slave_1: entered promiscuous mode [ 447.524146][ T7369] loop2: detected capacity change from 0 to 1024 [ 447.559573][ T7369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 449.343168][ T7369] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 449.362580][ T7369] System zones: 0-1, 3-36 [ 449.448296][ T7369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.045265][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.054797][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.354055][ T7384] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.314: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 451.466118][ T7386] loop1: detected capacity change from 0 to 1024 [ 451.515341][ T7386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 451.671692][ T7386] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 451.725217][ T7389] Zero length message leads to an empty skb [ 451.741497][ T7386] System zones: 0-1, 3-36 [ 451.804491][ T7386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.674507][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.890916][ T7397] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.317: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 453.651629][ T7159] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 453.929123][ T7159] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 454.226032][ T7159] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 454.543075][ T7159] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 455.125822][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.836721][ T7159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.035109][ T7159] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.206594][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.214148][ T7334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.376044][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.383670][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.030341][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.044336][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.080831][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.100162][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.125394][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.940848][ T7457] loop0: detected capacity change from 0 to 1024 [ 461.005255][ T7457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 461.342260][ T7457] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 461.350925][ T7457] System zones: 0-1, 3-36 [ 461.634974][ T7457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.671226][ T7465] loop1: detected capacity change from 0 to 1024 [ 461.853509][ T7465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 462.195979][ T5787] Bluetooth: hci1: command tx timeout [ 462.628694][ T7474] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.332: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 463.687924][ T7465] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 464.272346][ T5787] Bluetooth: hci1: command tx timeout [ 464.275478][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.385010][ T7465] System zones: 0-1, 3-36 [ 464.474960][ T7465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.590285][ T7450] chnl_net:caif_netlink_parms(): no params data found [ 465.103222][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.211473][ T7483] loop0: detected capacity change from 0 to 1024 [ 465.270136][ T7486] loop2: detected capacity change from 0 to 1024 [ 465.310490][ T7483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 465.333006][ T7486] EXT4-fs: Ignoring removed nomblk_io_submit option [ 466.141085][ T7486] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 466.286037][ T7486] System zones: 0-1, 3-36 [ 466.352344][ T5787] Bluetooth: hci1: command tx timeout [ 466.389707][ T7483] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 466.409081][ T7486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.462288][ T7483] System zones: 0-1, 3-36 [ 466.670077][ T7483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.895550][ T7505] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.338: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 468.633233][ T5787] Bluetooth: hci1: command tx timeout [ 470.723376][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.261186][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.149194][ T7450] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.242434][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.250155][ T7450] bridge_slave_0: entered allmulticast mode [ 472.405150][ T7450] bridge_slave_0: entered promiscuous mode [ 472.490299][ T7450] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.541299][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.585389][ T7450] bridge_slave_1: entered allmulticast mode [ 472.654764][ T7450] bridge_slave_1: entered promiscuous mode [ 473.175447][ T7450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.305830][ T7450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.641244][ T7534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.349'. [ 473.717837][ T53] bridge_slave_1: left allmulticast mode [ 473.724993][ T53] bridge_slave_1: left promiscuous mode [ 473.757292][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.829094][ T53] bridge_slave_0: left allmulticast mode [ 473.899522][ T53] bridge_slave_0: left promiscuous mode [ 473.981168][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.760561][ T7546] loop1: detected capacity change from 0 to 1024 [ 475.825474][ T7546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.016828][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.087147][ T7546] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 476.126915][ T7550] loop0: detected capacity change from 0 to 1024 [ 476.143990][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.153970][ T7546] System zones: 0-1, 3-36 [ 476.190197][ T7550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.223503][ T7546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.312931][ T53] bond0 (unregistering): Released all slaves [ 476.351611][ T7550] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 476.431439][ T7550] System zones: 0-1, 3-36 [ 476.449455][ T7450] team0: Port device team_slave_0 added [ 476.470910][ T7550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.528660][ T7557] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.353: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 478.351523][ T7450] team0: Port device team_slave_1 added [ 480.427848][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.841364][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.886587][ T7450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.894142][ T7450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.947253][ T7450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.036137][ T53] hsr_slave_0: left promiscuous mode [ 481.072540][ T53] hsr_slave_1: left promiscuous mode [ 481.090857][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.167772][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.287265][ T7575] loop0: detected capacity change from 0 to 1024 [ 482.347297][ T7575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 482.518111][ T7575] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 482.575578][ T7575] System zones: 0-1, 3-36 [ 482.639916][ T7575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.721614][ T53] team0 (unregistering): Port device team_slave_1 removed [ 483.823712][ T7583] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.361: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 483.970576][ T53] team0 (unregistering): Port device team_slave_0 removed [ 484.220300][ T7588] loop4: detected capacity change from 0 to 1024 [ 484.259702][ T7588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 484.350161][ T7588] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 484.425383][ T7588] System zones: 0-1, 3-36 [ 484.580154][ T7588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.657789][ T7450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.671690][ T7450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.953291][ T7597] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.364: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 486.712440][ T7450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.916342][ T7602] loop1: detected capacity change from 0 to 1024 [ 487.516551][ T7602] EXT4-fs: Ignoring removed nomblk_io_submit option [ 487.539504][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.916883][ T7602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 487.999164][ T7602] System zones: 0-1, 3-36 [ 488.191663][ T7450] hsr_slave_0: entered promiscuous mode [ 488.201492][ T7450] hsr_slave_1: entered promiscuous mode [ 488.246818][ T5777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.263751][ T7602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.433370][ T7616] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.366: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 490.310877][ T7614] loop4: detected capacity change from 0 to 1024 [ 490.513486][ T7614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 490.682033][ T7614] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 490.762581][ T7614] System zones: 0-1, 3-36 [ 490.861629][ T7614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.731283][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.329515][ T7632] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.369: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 494.792696][ T7644] loop0: detected capacity change from 0 to 1024 [ 494.823495][ T5777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.914970][ T7644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 495.145764][ T7644] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 495.242448][ T7644] System zones: 0-1, 3-36 [ 495.376487][ T7644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.186220][ T7655] loop1: detected capacity change from 0 to 1024 [ 496.315712][ T7655] EXT4-fs: Ignoring removed nomblk_io_submit option [ 496.968567][ T7660] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.375: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 499.223772][ T7655] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 499.282968][ T7655] System zones: 0-1, 3-36 [ 499.850364][ T7655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.024485][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.424292][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.693478][ T7450] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 500.826445][ T7450] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 500.969696][ T7672] loop0: detected capacity change from 0 to 1024 [ 501.026497][ T7450] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 501.063973][ T7672] EXT4-fs: Ignoring removed nomblk_io_submit option [ 501.138410][ T7672] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 501.147978][ T7672] System zones: 0-1, 3-36 [ 501.184619][ T7672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.502373][ T7450] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 502.276283][ T7684] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.379: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 502.516037][ T7686] loop4: detected capacity change from 0 to 512 [ 502.677084][ T7686] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 502.848428][ T7686] UDF-fs: Scanning with blocksize 512 failed [ 502.973264][ T7686] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 503.062752][ T7686] UDF-fs: Scanning with blocksize 1024 failed [ 503.083413][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.145751][ T7686] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 503.216072][ T7686] UDF-fs: Scanning with blocksize 2048 failed [ 503.324538][ T7686] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 503.400239][ T7686] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 503.898998][ T7450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.170950][ T7703] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 504.410163][ T7450] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.528914][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.536336][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.583187][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.590794][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.743709][ T7711] loop4: detected capacity change from 0 to 2048 [ 504.911036][ T7711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 506.831566][ T7736] loop1: detected capacity change from 0 to 512 [ 506.867933][ T7736] ======================================================= [ 506.867933][ T7736] WARNING: The mand mount option has been deprecated and [ 506.867933][ T7736] and is ignored by this kernel. Remove the mand [ 506.867933][ T7736] option from the mount to silence this warning. [ 506.867933][ T7736] ======================================================= [ 507.214415][ T7736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.347072][ T7736] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 507.449969][ T7450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.893831][ T5774] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 507.972483][ T5774] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 509.427915][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.509012][ T5977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.817776][ T5977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.119863][ T5977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.398401][ T5977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.175791][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.182977][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.527465][ T7450] veth0_vlan: entered promiscuous mode [ 511.561217][ T5977] bridge_slave_1: left allmulticast mode [ 511.575288][ T5977] bridge_slave_1: left promiscuous mode [ 511.595651][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.743308][ T5977] bridge_slave_0: left allmulticast mode [ 511.749146][ T5977] bridge_slave_0: left promiscuous mode [ 511.779752][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.029708][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.125092][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.179650][ T5977] bond0 (unregistering): Released all slaves [ 513.352294][ T7450] veth1_vlan: entered promiscuous mode [ 514.031000][ T7450] veth0_macvtap: entered promiscuous mode [ 514.363500][ T5070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 514.380252][ T5070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 514.389675][ T5070] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 514.410987][ T5070] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 514.437258][ T5070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 514.557277][ T7450] veth1_macvtap: entered promiscuous mode [ 515.147190][ T5977] hsr_slave_0: left promiscuous mode [ 515.193390][ T5977] hsr_slave_1: left promiscuous mode [ 515.201413][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.251007][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.270033][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.387697][ T5977] veth1_macvtap: left promiscuous mode [ 515.403106][ T5977] veth0_macvtap: left promiscuous mode [ 515.422889][ T5977] veth1_vlan: left promiscuous mode [ 515.442539][ T5977] veth0_vlan: left promiscuous mode [ 516.512133][ T5070] Bluetooth: hci2: command tx timeout [ 517.392790][ T5977] team0 (unregistering): Port device team_slave_1 removed [ 517.495041][ T5977] team0 (unregistering): Port device team_slave_0 removed [ 518.591971][ T5070] Bluetooth: hci2: command tx timeout [ 518.674844][ T7450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.044320][ T7824] loop0: detected capacity change from 0 to 256 [ 519.280975][ T7824] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 519.427137][ T7824] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff) [ 520.194419][ T5787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 520.206190][ T5787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 520.215718][ T5787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 520.273029][ T5787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 520.284080][ T5787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 520.358301][ T7788] chnl_net:caif_netlink_parms(): no params data found [ 520.677635][ T5070] Bluetooth: hci2: command tx timeout [ 522.232070][ T7788] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.272754][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.280434][ T7788] bridge_slave_0: entered allmulticast mode [ 522.339561][ T7788] bridge_slave_0: entered promiscuous mode [ 522.361951][ T5070] Bluetooth: hci5: command tx timeout [ 522.414163][ T7788] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.447510][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.456524][ T7788] bridge_slave_1: entered allmulticast mode [ 522.533167][ T7788] bridge_slave_1: entered promiscuous mode [ 522.752448][ T5070] Bluetooth: hci2: command tx timeout [ 522.850554][ T7788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.932200][ T5834] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 523.196146][ T7788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.216019][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 523.283792][ T5834] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 523.322564][ T5834] usb 5-1: config 179 has no interface number 0 [ 523.329052][ T5834] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 523.420657][ T5834] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 523.459526][ T5834] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 523.552147][ T5834] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 523.592139][ T5834] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 523.606502][ T5834] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 523.621216][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.646422][ T7856] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 523.666602][ T5834] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 524.104850][ T5834] usb 5-1: USB disconnect, device number 2 [ 524.430293][ T7788] team0: Port device team_slave_0 added [ 524.432118][ T5070] Bluetooth: hci5: command tx timeout [ 524.585207][ T7788] team0: Port device team_slave_1 added [ 525.274617][ T7835] chnl_net:caif_netlink_parms(): no params data found [ 525.654452][ T7788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.661562][ T7788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.812916][ T7788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.893559][ T7788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.936251][ T7788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.992427][ T7788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.467525][ T5070] Bluetooth: hci5: command tx timeout [ 531.472001][ T5070] Bluetooth: hci5: command tx timeout [ 534.181261][ T7788] hsr_slave_0: entered promiscuous mode [ 534.212395][ T7788] hsr_slave_1: entered promiscuous mode [ 534.259389][ T7788] debugfs: 'hsr0' already exists in 'hsr' [ 534.322015][ T7788] Cannot create hsr debugfs directory [ 534.766744][ T7835] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.858090][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.884517][ T7835] bridge_slave_0: entered allmulticast mode [ 534.931574][ T7835] bridge_slave_0: entered promiscuous mode [ 535.007591][ T53] bridge_slave_1: left allmulticast mode [ 535.044136][ T53] bridge_slave_1: left promiscuous mode [ 535.071477][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.165748][ T53] bridge_slave_0: left allmulticast mode [ 535.236874][ T53] bridge_slave_0: left promiscuous mode [ 535.258344][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.872132][ T5834] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 536.092706][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.145221][ T5834] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 536.191316][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.225094][ T5834] usb 3-1: config 0 descriptor?? [ 536.942961][ T5834] microsoft 0003:045E:009D.0001: hidraw0: USB HID v10.00 Device [HID 045e:009d] on usb-dummy_hcd.2-1/input0 [ 536.988203][ T5834] microsoft 0003:045E:009D.0001: no inputs found [ 537.063303][ T5834] microsoft 0003:045E:009D.0001: could not initialize ff, continuing anyway [ 537.132475][ T5834] usb 3-1: USB disconnect, device number 2 [ 537.181325][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.274645][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.354835][ T53] bond0 (unregistering): Released all slaves [ 537.511170][ T7835] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.570082][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.612483][ T7835] bridge_slave_1: entered allmulticast mode [ 537.764543][ T7903] fido_id[7903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 537.824497][ T7835] bridge_slave_1: entered promiscuous mode [ 538.228822][ T7899] loop4: detected capacity change from 0 to 8192 [ 538.439709][ T53] hsr_slave_0: left promiscuous mode [ 538.470804][ T53] hsr_slave_1: left promiscuous mode [ 538.504058][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.511607][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.543290][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.630842][ T7899] syz.4.425: attempt to access beyond end of device [ 538.630842][ T7899] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 538.657295][ T53] veth1_macvtap: left promiscuous mode [ 538.672394][ T53] veth0_macvtap: left promiscuous mode [ 538.702519][ T53] veth1_vlan: left promiscuous mode [ 538.726304][ T53] veth0_vlan: left promiscuous mode [ 538.752469][ T7899] Buffer I/O error on dev loop4, logical block 57847, async page read [ 538.870314][ T29] audit: type=1800 audit(1771541346.905:2): pid=7899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.425" name="file2" dev="loop4" ino=1048609 res=0 errno=0 [ 540.540126][ T7915] loop4: detected capacity change from 0 to 512 [ 540.612681][ T7915] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 540.732156][ T7915] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 540.853144][ T7915] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 540.867599][ T7915] EXT4-fs (loop4): 1 truncate cleaned up [ 540.877361][ T7915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.173868][ T53] team0 (unregistering): Port device team_slave_1 removed [ 541.273424][ T53] team0 (unregistering): Port device team_slave_0 removed [ 542.003818][ T7921] IPv6: NLM_F_CREATE should be specified when creating new route [ 542.225448][ T7835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.494442][ T7835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.993791][ T7927] loop2: detected capacity change from 0 to 512 [ 543.142716][ T7927] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 543.224688][ T7927] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.431: bad orphan inode 131083 [ 543.312427][ T7927] loop2: lost filesystem error report for type 5 error -117 [ 543.321855][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 543.335858][ C0] EXT4-fs (loop2): initial error at time 1771541351: ext4_orphan_get:1417 [ 543.344537][ C0] EXT4-fs (loop2): last error at time 1771541351: ext4_orphan_get:1417 [ 543.394338][ T7927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.673064][ T7835] team0: Port device team_slave_0 added [ 543.989629][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.048173][ T7835] team0: Port device team_slave_1 added [ 544.335853][ T7835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.343606][ T7835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.435485][ T7835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.692527][ T7835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.699632][ T7835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.756945][ T7835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.249282][ T7835] hsr_slave_0: entered promiscuous mode [ 545.278528][ T7835] hsr_slave_1: entered promiscuous mode [ 545.823583][ T5777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.902056][ T7788] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 546.007465][ T7788] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 546.304161][ T7788] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 546.536868][ T7788] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 547.942704][ T7953] loop4: detected capacity change from 0 to 512 [ 548.024567][ T7953] EXT4-fs: Ignoring removed nobh option [ 548.117926][ T7953] ext4: Unknown parameter 'nouser_xattr' [ 548.889969][ T7788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.986307][ T7835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 549.066334][ T7835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 549.149577][ T7835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 549.281425][ T7788] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.335087][ T7835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 549.478018][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.486154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.686043][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.693569][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.354704][ T7961] loop4: detected capacity change from 0 to 16 [ 550.563166][ T7961] erofs (device loop4): mounted with root inode @ nid 36. [ 550.852803][ T7961] erofs (device loop4): unsupported i_format 1796 of nid 86 [ 550.934048][ T7966] capability: warning: `syz.4.436' uses deprecated v2 capabilities in a way that may be insecure [ 551.092342][ T7961] erofs (device loop4): unsupported i_format 1796 of nid 86 [ 551.931291][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 551.973142][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 552.012854][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 552.040015][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 552.051181][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 552.420194][ T7835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.822660][ T7835] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.125812][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.133330][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.272005][ T795] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 553.512188][ T795] usb 5-1: Using ep0 maxpacket: 16 [ 553.605234][ T795] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 553.682287][ T795] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 553.735731][ T7788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.743116][ T795] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 553.774023][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.781375][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.796191][ T795] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 553.806580][ T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 553.822284][ T795] usb 5-1: SerialNumber: syz [ 553.869262][ T7981] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 554.008060][ T7981] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 554.129622][ T5787] Bluetooth: hci1: command tx timeout [ 554.500234][ T795] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 554.676933][ T795] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 554.814778][ T795] usb 5-1: USB disconnect, device number 3 [ 555.406947][ T7835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 555.811312][ T7972] chnl_net:caif_netlink_parms(): no params data found [ 556.204438][ T5787] Bluetooth: hci1: command tx timeout [ 557.559184][ T8016] loop2: detected capacity change from 0 to 128 [ 557.665408][ T7788] veth0_vlan: entered promiscuous mode [ 558.216725][ T6007] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.272878][ T5787] Bluetooth: hci1: command tx timeout [ 558.343728][ T7788] veth1_vlan: entered promiscuous mode [ 558.549779][ T29] audit: type=1326 audit(1771541366.585:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.4.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 558.657928][ T7835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.682064][ T29] audit: type=1326 audit(1771541366.705:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.4.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 558.784185][ T29] audit: type=1326 audit(1771541366.775:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.4.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=82 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 558.819731][ T6007] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.877790][ T29] audit: type=1326 audit(1771541366.775:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.4.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 558.903348][ T7972] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.910802][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.960733][ T29] audit: type=1326 audit(1771541366.775:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.4.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 558.978538][ T7972] bridge_slave_0: entered allmulticast mode [ 559.049748][ T29] audit: type=1326 audit(1771541366.775:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.4.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 559.103931][ T7972] bridge_slave_0: entered promiscuous mode [ 559.122113][ T29] audit: type=1326 audit(1771541366.775:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.4.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 559.287078][ T6007] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.400063][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.425372][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.442483][ T7972] bridge_slave_1: entered allmulticast mode [ 559.451628][ T7972] bridge_slave_1: entered promiscuous mode [ 559.598498][ T6007] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.767386][ T8029] loop4: detected capacity change from 0 to 2048 [ 559.952120][ T8029] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 560.137466][ T7972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.209660][ T7972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.362823][ T5787] Bluetooth: hci1: command tx timeout [ 560.495935][ T7972] team0: Port device team_slave_0 added [ 560.580447][ T7972] team0: Port device team_slave_1 added [ 560.907433][ T7788] veth0_macvtap: entered promiscuous mode [ 561.245045][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.263008][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.325161][ T7972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.363472][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.390098][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.472027][ T7972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.512726][ T7788] veth1_macvtap: entered promiscuous mode [ 561.842678][ T6007] bridge_slave_1: left allmulticast mode [ 561.848517][ T6007] bridge_slave_1: left promiscuous mode [ 561.873618][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.942793][ T6007] bridge_slave_0: left allmulticast mode [ 561.972284][ T6007] bridge_slave_0: left promiscuous mode [ 561.978898][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.209648][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.283731][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.341583][ T6007] bond0 (unregistering): Released all slaves [ 563.838786][ T7972] hsr_slave_0: entered promiscuous mode [ 563.854733][ T7972] hsr_slave_1: entered promiscuous mode [ 563.870035][ T7972] debugfs: 'hsr0' already exists in 'hsr' [ 563.887978][ T7972] Cannot create hsr debugfs directory [ 564.133810][ T7788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.546908][ T7835] veth0_vlan: entered promiscuous mode [ 564.594334][ T795] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 564.778998][ T7788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.800298][ T795] usb 5-1: unable to get BOS descriptor or descriptor too short [ 564.865804][ T795] usb 5-1: not running at top speed; connect to a high speed hub [ 564.935890][ T795] usb 5-1: config 0 has no interfaces? [ 564.953142][ T795] usb 5-1: language id specifier not provided by device, defaulting to English [ 564.983107][ T795] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 564.997373][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.012787][ T795] usb 5-1: Product: syz [ 565.017130][ T795] usb 5-1: Manufacturer: 﫳읩愍玃勛ǿ렀㐢שּׂ萨풳快䄔턹坳鿇큷᎚䢭䧟᱊䃄鉠ᖲ諽鶧䆬⠾⼎몮꼥쩌沢숑熴湁ࡒ⤘擼턱씨ᢧᦱ錖㔞薜笔淺绋餣桕❨趆赠ꨢ昜蕁ꆣ篹峻ṕ귞ꡧ培颅夌꘾姡劬贶譠罜Ἒ輄ၢ梇鑞ꃈ櫞껫ဢ碌䂕䫔ࠂ歼깐蠏纊㰖귞򃾦 [ 565.077694][ T795] usb 5-1: SerialNumber: syz [ 565.100148][ T795] usb 5-1: config 0 descriptor?? [ 565.177335][ T6007] hsr_slave_0: left promiscuous mode [ 565.196932][ T6007] hsr_slave_1: left promiscuous mode [ 565.234893][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.252767][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.280404][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.301923][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.331237][ T795] usb 5-1: USB disconnect, device number 4 [ 565.383300][ T6007] veth1_macvtap: left promiscuous mode [ 565.389769][ T6007] veth0_macvtap: left promiscuous mode [ 565.418982][ T6007] veth1_vlan: left promiscuous mode [ 565.443124][ T6007] veth0_vlan: left promiscuous mode [ 566.714027][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 566.715204][ T8072] loop4: detected capacity change from 0 to 512 [ 566.805164][ T8072] EXT4-fs (loop4): orphan cleanup on readonly fs [ 566.824321][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 566.856313][ T8072] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 566.902482][ T8072] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 566.941540][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 566.948263][ C0] EXT4-fs (loop4): initial error at time 1771541374: ext4_mb_generate_buddy:1315 [ 566.957757][ C0] EXT4-fs (loop4): last error at time 1771541374: ext4_mb_generate_buddy:1315 [ 566.998010][ T8072] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.456: attempt to clear invalid blocks 2 len 1 [ 567.029670][ T8072] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 567.031070][ T8072] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.456: invalid indirect mapped block 1819239214 (level 0) [ 567.122326][ T8072] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 567.123489][ T8072] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.456: invalid indirect mapped block 1819239214 (level 1) [ 567.167644][ T8072] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 567.183000][ T8072] EXT4-fs (loop4): 1 truncate cleaned up [ 567.218209][ T8072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 567.335411][ T8072] EXT4-fs error (device loop4): ext4_lookup:1782: inode #2: comm syz.4.456: 'file1' linked to parent dir [ 567.351177][ T8075] loop2: detected capacity change from 0 to 1024 [ 567.666579][ T5777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.711869][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.755921][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.798557][ T7835] veth1_vlan: entered promiscuous mode [ 568.020653][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.053505][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.663927][ T164] hfsplus: b-tree write err: -5, ino 3 [ 568.839779][ T7835] veth0_macvtap: entered promiscuous mode [ 569.046277][ T7835] veth1_macvtap: entered promiscuous mode [ 569.087352][ T7972] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 569.237622][ T7972] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 569.376181][ T7972] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 569.515626][ T7972] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 569.936533][ T7835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.076576][ T7835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.325343][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.390065][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.514372][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.554820][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.052816][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 571.518697][ T7972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.938989][ T7972] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.330682][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.338219][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.625579][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.644625][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.654396][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.661920][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.397647][ T7972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.202351][ T5070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 576.242869][ T5070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 576.264803][ T5070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 576.292715][ T5070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 576.307012][ T5070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 577.803121][ T6007] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.158211][ T6007] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.355424][ T5787] Bluetooth: hci0: command tx timeout [ 578.448138][ T6007] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.678282][ T6007] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.859594][ T8157] chnl_net:caif_netlink_parms(): no params data found [ 579.208131][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.241140][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.935381][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.970510][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.152675][ T6007] bridge_slave_1: left allmulticast mode [ 580.158511][ T6007] bridge_slave_1: left promiscuous mode [ 580.209526][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.343836][ T6007] bridge_slave_0: left allmulticast mode [ 580.367664][ T6007] bridge_slave_0: left promiscuous mode [ 580.378747][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.433281][ T5787] Bluetooth: hci0: command tx timeout [ 580.797963][ T5070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 580.808880][ T5070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 580.827068][ T5070] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 580.841427][ T5070] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 580.855270][ T5070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 582.258662][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.261942][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 582.370619][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.403590][ T6007] bond0 (unregistering): Released all slaves [ 582.435122][ T7972] veth0_vlan: entered promiscuous mode [ 582.509139][ T9] usb 3-1: config 8 has an invalid interface number: 3 but max is 0 [ 582.517979][ T5787] Bluetooth: hci0: command tx timeout [ 582.532269][ T9] usb 3-1: config 8 has no interface number 0 [ 582.543573][ T9] usb 3-1: config 8 interface 3 altsetting 9 endpoint 0x8F has invalid maxpacket 512, setting to 64 [ 582.569775][ T9] usb 3-1: config 8 interface 3 has no altsetting 0 [ 582.616823][ T9] usb 3-1: New USB device found, idVendor=1410, idProduct=a006, bcdDevice=48.91 [ 582.660654][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.790682][ T7972] veth1_vlan: entered promiscuous mode [ 582.912135][ T5787] Bluetooth: hci2: command tx timeout [ 582.960505][ T9] usb 3-1: string descriptor 0 read error: -71 [ 582.975754][ T9] hub 3-1:8.3: bad descriptor, ignoring hub [ 582.992255][ T9] hub 3-1:8.3: probe with driver hub failed with error -5 [ 583.075899][ T9] usb 3-1: USB disconnect, device number 3 [ 583.129577][ T6007] hsr_slave_0: left promiscuous mode [ 583.150306][ T6007] hsr_slave_1: left promiscuous mode [ 583.183255][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.205005][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.244642][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.260972][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.385815][ T6007] veth1_macvtap: left promiscuous mode [ 583.393186][ T6007] veth0_macvtap: left promiscuous mode [ 583.398917][ T6007] veth1_vlan: left promiscuous mode [ 583.423503][ T6007] veth0_vlan: left promiscuous mode [ 584.592644][ T5787] Bluetooth: hci0: command tx timeout [ 584.775462][ T8190] loop2: detected capacity change from 0 to 4096 [ 584.790819][ T5070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 584.832396][ T5070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 584.841360][ T5070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 584.860948][ T5070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 584.873028][ T5070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 584.992331][ T5070] Bluetooth: hci2: command tx timeout [ 585.069429][ T8190] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c018, mo2=0003] [ 585.096675][ T8190] System zones: 0-5 [ 585.215576][ T8190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.391737][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 585.477589][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 586.070826][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.333159][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.363907][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.390465][ T8157] bridge_slave_0: entered allmulticast mode [ 586.417930][ T8157] bridge_slave_0: entered promiscuous mode [ 586.566863][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.580995][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.603036][ T8157] bridge_slave_1: entered allmulticast mode [ 586.627122][ T8157] bridge_slave_1: entered promiscuous mode [ 586.912228][ T5070] Bluetooth: hci5: command tx timeout [ 586.957499][ T8157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.028337][ T8157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.076612][ T5070] Bluetooth: hci2: command tx timeout [ 587.496109][ T8157] team0: Port device team_slave_0 added [ 587.544899][ T8157] team0: Port device team_slave_1 added [ 587.656500][ T7972] veth0_macvtap: entered promiscuous mode [ 587.996948][ T6007] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.145428][ T7972] veth1_macvtap: entered promiscuous mode [ 588.184687][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.239510][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.326166][ T8157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.494360][ T6007] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.590948][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.631892][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.762217][ T8157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.992385][ T5070] Bluetooth: hci5: command tx timeout [ 589.155398][ T5070] Bluetooth: hci2: command tx timeout [ 589.165940][ T6007] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.648243][ T6007] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.840729][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.017779][ T8157] hsr_slave_0: entered promiscuous mode [ 590.053193][ T8157] hsr_slave_1: entered promiscuous mode [ 590.061574][ T8157] debugfs: 'hsr0' already exists in 'hsr' [ 590.091892][ T8157] Cannot create hsr debugfs directory [ 590.253915][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.613912][ T53] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.661596][ T53] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.978328][ T8181] chnl_net:caif_netlink_parms(): no params data found [ 591.072185][ T5070] Bluetooth: hci5: command tx timeout [ 591.152892][ T53] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.182053][ T53] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.824843][ T8191] chnl_net:caif_netlink_parms(): no params data found [ 592.003512][ T6007] bridge_slave_1: left allmulticast mode [ 592.009350][ T6007] bridge_slave_1: left promiscuous mode [ 592.036930][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.066324][ T6007] bridge_slave_0: left allmulticast mode [ 592.072639][ T6007] bridge_slave_0: left promiscuous mode [ 592.079105][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.592067][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.622196][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.651970][ T6007] bond0 (unregistering): Released all slaves [ 593.152370][ T5070] Bluetooth: hci5: command tx timeout [ 593.612213][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.619676][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.672370][ T8181] bridge_slave_0: entered allmulticast mode [ 593.703159][ T8181] bridge_slave_0: entered promiscuous mode [ 593.907321][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.927095][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.941219][ T8181] bridge_slave_1: entered allmulticast mode [ 593.956940][ T8181] bridge_slave_1: entered promiscuous mode [ 594.380353][ T6007] hsr_slave_0: left promiscuous mode [ 594.395118][ T6007] hsr_slave_1: left promiscuous mode [ 594.408605][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.417452][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.441011][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.461428][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.491483][ T6007] veth1_macvtap: left promiscuous mode [ 594.501365][ T6007] veth0_macvtap: left promiscuous mode [ 594.512966][ T6007] veth1_vlan: left promiscuous mode [ 594.518516][ T6007] veth0_vlan: left promiscuous mode [ 594.848468][ T8244] loop2: detected capacity change from 0 to 128 [ 594.897780][ T8244] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 594.930094][ T8244] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 594.992723][ T29] audit: type=1800 audit(1771541403.025:10): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.473" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=12 res=0 errno=0 [ 595.286776][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 595.715225][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 595.753557][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 596.326846][ T8181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.388677][ T8181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.433164][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.440636][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.457530][ T8191] bridge_slave_0: entered allmulticast mode [ 596.484250][ T8191] bridge_slave_0: entered promiscuous mode [ 596.669355][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.684620][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.702551][ T8191] bridge_slave_1: entered allmulticast mode [ 596.722486][ T8191] bridge_slave_1: entered promiscuous mode [ 596.765638][ T8254] loop2: detected capacity change from 0 to 2048 [ 596.799415][ T8181] team0: Port device team_slave_0 added [ 596.850466][ T8181] team0: Port device team_slave_1 added [ 597.003814][ T8254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.221219][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.234077][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.289546][ T8181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.301067][ T8181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.339689][ T8181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.367167][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.593932][ T8181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.601037][ T8181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.656632][ T8181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.774769][ T8191] team0: Port device team_slave_0 added [ 597.850868][ T8191] team0: Port device team_slave_1 added [ 597.878024][ T6007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.884371][ T8262] loop2: detected capacity change from 0 to 256 [ 598.209912][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.217501][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.245623][ T8191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.298396][ T6007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.403118][ T8181] hsr_slave_0: entered promiscuous mode [ 598.426919][ T8181] hsr_slave_1: entered promiscuous mode [ 598.445185][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.454053][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.512690][ T8191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.601001][ T8157] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 598.665539][ T8157] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 598.710372][ T8157] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 598.754619][ T8265] loop2: detected capacity change from 0 to 1024 [ 598.766494][ T6007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.913068][ T7359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.921066][ T7359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.969046][ T8157] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 599.724234][ T6007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.592828][ T8191] hsr_slave_0: entered promiscuous mode [ 601.621109][ T8191] hsr_slave_1: entered promiscuous mode [ 601.643823][ T8191] debugfs: 'hsr0' already exists in 'hsr' [ 601.664710][ T8191] Cannot create hsr debugfs directory [ 601.861487][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.892206][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.352874][ T8277] loop2: detected capacity change from 0 to 8 [ 602.399462][ T8277] unable to read fragment index table [ 603.560553][ T8287] loop7: detected capacity change from 0 to 256 [ 603.614739][ T6007] bridge_slave_1: left allmulticast mode [ 603.620765][ T6007] bridge_slave_1: left promiscuous mode [ 603.647452][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.688378][ T6007] bridge_slave_0: left allmulticast mode [ 603.689339][ T8287] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 603.709549][ T6007] bridge_slave_0: left promiscuous mode [ 603.748230][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.763902][ T8287] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 603.903176][ T8287] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 604.342092][ T29] audit: type=1800 audit(1771541412.325:11): pid=8287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.437" name="file1" dev="loop7" ino=1048628 res=0 errno=0 [ 604.843654][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.873493][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.891026][ T6007] bond0 (unregistering): Released all slaves [ 605.962332][ T6007] hsr_slave_0: left promiscuous mode [ 605.986582][ T6007] hsr_slave_1: left promiscuous mode [ 606.010950][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.046583][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.083492][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.122084][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.261101][ T6007] veth1_macvtap: left promiscuous mode [ 606.271151][ T6007] veth0_macvtap: left promiscuous mode [ 606.279239][ T6007] veth1_vlan: left promiscuous mode [ 606.291537][ T6007] veth0_vlan: left promiscuous mode [ 608.007089][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 608.061185][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 609.392161][ T8181] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 609.556065][ T8181] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 609.696325][ T8181] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 609.767670][ T8181] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 610.080001][ T8191] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 610.178690][ T8157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.217609][ T8191] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 610.311598][ T8191] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 610.394465][ T8191] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 610.548718][ T8157] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.616177][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.623697][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.846943][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.854455][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.495224][ T8157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 612.408496][ T8181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.720223][ T8157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.880256][ T8181] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.165696][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.173208][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.326297][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.333721][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.504493][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.778011][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.921354][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.928731][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.108678][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.116150][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.095470][ T8157] veth0_vlan: entered promiscuous mode [ 616.233422][ T8157] veth1_vlan: entered promiscuous mode [ 616.416592][ T8181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.878965][ T8157] veth0_macvtap: entered promiscuous mode [ 617.120582][ T8157] veth1_macvtap: entered promiscuous mode [ 617.270385][ T8365] loop2: detected capacity change from 0 to 256 [ 617.671204][ T8365] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 617.747970][ T8157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.894059][ T8365] exFAT-fs (loop2): valid_size(562949953421322) is greater than size(10) [ 617.898248][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.057435][ T8157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.286247][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.353909][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.596219][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.656759][ T34] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.984953][ T5834] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 619.195434][ T5834] usb 3-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 619.231607][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.299411][ T5834] usb 3-1: config 0 descriptor?? [ 619.861284][ T5834] usbhid 3-1:0.0: can't add hid device: -71 [ 619.896642][ T5834] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 619.932851][ T5834] usb 3-1: USB disconnect, device number 4 [ 620.050084][ T8390] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 620.065343][ T8390] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 620.084949][ T8390] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 620.120946][ T8390] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 620.136344][ T8390] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 620.308335][ T8181] veth0_vlan: entered promiscuous mode [ 620.573076][ T8181] veth1_vlan: entered promiscuous mode [ 621.555965][ T8402] loop2: detected capacity change from 0 to 1024 [ 621.979028][ T8181] veth0_macvtap: entered promiscuous mode [ 622.192273][ T5070] Bluetooth: hci4: command tx timeout [ 622.293036][ T8181] veth1_macvtap: entered promiscuous mode [ 622.804412][ T8389] chnl_net:caif_netlink_parms(): no params data found [ 622.958511][ T8181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.010028][ T8191] veth0_vlan: entered promiscuous mode [ 623.346268][ T8181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.527358][ T8191] veth1_vlan: entered promiscuous mode [ 623.622541][ T86] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.648481][ T86] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.702128][ T86] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.750012][ T6007] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.792203][ T8287] syz.7.437 (8287) used greatest stack depth: 3192 bytes left [ 623.987241][ T53] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.195471][ T53] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.273196][ T5070] Bluetooth: hci4: command tx timeout [ 624.418304][ T53] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.620054][ T53] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.784399][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.812463][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.820185][ T8389] bridge_slave_0: entered allmulticast mode [ 624.845515][ T8389] bridge_slave_0: entered promiscuous mode [ 624.900753][ T8191] veth0_macvtap: entered promiscuous mode [ 624.983130][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.990575][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.036444][ T8389] bridge_slave_1: entered allmulticast mode [ 625.059049][ T8389] bridge_slave_1: entered promiscuous mode [ 625.269018][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.327182][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.389597][ T8191] veth1_macvtap: entered promiscuous mode [ 625.708319][ T8389] team0: Port device team_slave_0 added [ 625.889486][ T8389] team0: Port device team_slave_1 added [ 626.049829][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.308774][ T53] bridge_slave_1: left allmulticast mode [ 626.333177][ T53] bridge_slave_1: left promiscuous mode [ 626.357651][ T5070] Bluetooth: hci4: command tx timeout [ 626.367878][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.396548][ T53] bridge_slave_0: left allmulticast mode [ 626.406889][ T53] bridge_slave_0: left promiscuous mode [ 626.415175][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.987393][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.052796][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.077785][ T53] bond0 (unregistering): Released all slaves [ 627.112251][ T8438] loop2: detected capacity change from 0 to 512 [ 627.129417][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.142143][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.177146][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.210314][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.250921][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.269781][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.278091][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.301050][ T8438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.307484][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.394346][ T8438] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.394659][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.477939][ T8438] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 627.720742][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.942867][ T6287] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.993483][ T34] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.058759][ T8389] hsr_slave_0: entered promiscuous mode [ 628.098886][ T8389] hsr_slave_1: entered promiscuous mode [ 628.124243][ T8389] debugfs: 'hsr0' already exists in 'hsr' [ 628.130207][ T8389] Cannot create hsr debugfs directory [ 628.217932][ T6287] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.229995][ T4352] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.265389][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.312466][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.334864][ T53] hsr_slave_0: left promiscuous mode [ 628.353195][ T53] hsr_slave_1: left promiscuous mode [ 628.366010][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.377100][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.387852][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.400209][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.428577][ T53] veth1_macvtap: left promiscuous mode [ 628.432353][ T5070] Bluetooth: hci4: command tx timeout [ 628.435615][ T53] veth0_macvtap: left promiscuous mode [ 628.456299][ T53] veth1_vlan: left promiscuous mode [ 628.463003][ T53] veth0_vlan: left promiscuous mode [ 629.188495][ T53] team0 (unregistering): Port device team_slave_1 removed [ 629.240132][ T53] team0 (unregistering): Port device team_slave_0 removed [ 629.485673][ T8458] loop2: detected capacity change from 0 to 512 [ 629.495314][ T8458] EXT4-fs: Ignoring removed orlov option [ 629.608307][ T8458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.869282][ T8468] loop6: detected capacity change from 0 to 512 [ 630.952632][ T8468] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 631.512008][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.548384][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.939909][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.989031][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.156367][ T8389] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 632.326424][ T8389] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 632.465434][ T8389] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 632.742556][ T8389] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 633.456063][ T8487] netlink: 40 bytes leftover after parsing attributes in process `syz.5.261'. [ 634.062143][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.068756][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.137624][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.420049][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.636298][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.780540][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.788357][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.006810][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.014364][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.660463][ T8501] loop2: detected capacity change from 0 to 1024 [ 635.694372][ T8501] EXT4-fs: Ignoring removed mblk_io_submit option [ 635.832073][ T8501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 635.913361][ T8501] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.265817][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 637.107536][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.144962][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.446520][ T6287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.503541][ T6287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.334166][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.800548][ T8530] loop5: detected capacity change from 0 to 2048 [ 639.015787][ T8530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.632299][ T8504] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 641.463380][ T8552] loop8: detected capacity change from 0 to 256 [ 641.495346][ T8389] veth0_vlan: entered promiscuous mode [ 641.528776][ T8552] exfat: Deprecated parameter 'namecase' [ 641.556354][ T8552] exfat: Deprecated parameter 'namecase' [ 641.648461][ T8389] veth1_vlan: entered promiscuous mode [ 641.834331][ T8552] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 642.049053][ T8389] veth0_macvtap: entered promiscuous mode [ 642.141526][ T8389] veth1_macvtap: entered promiscuous mode [ 642.410010][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.642924][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.774294][ T53] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.808364][ T8558] loop6: detected capacity change from 0 to 256 [ 642.830442][ T8554] loop2: detected capacity change from 0 to 1024 [ 642.853841][ T53] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.882310][ T8558] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 642.886106][ T53] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.951932][ T8558] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 643.045417][ T53] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.140222][ T8558] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 643.261902][ T8558] exFAT-fs (loop6): failed to load alloc-bitmap [ 643.306881][ T8558] exFAT-fs (loop6): failed to recognize exfat type [ 643.484156][ T8181] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.369575][ T8569] loop6: detected capacity change from 0 to 128 [ 644.578199][ T8569] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 644.705694][ T8569] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 645.433324][ T8157] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 647.297299][ T8602] loop5: detected capacity change from 0 to 512 [ 649.598749][ T6287] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.838993][ T6287] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.988365][ T8622] loop8: detected capacity change from 0 to 2048 [ 650.162993][ T6287] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.275968][ T8622] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.806882][ T6287] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.933874][ T8191] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.962085][ T5829] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 651.219665][ T5829] usb 3-1: config 0 has an invalid interface number: 121 but max is 0 [ 651.251984][ T5829] usb 3-1: config 0 has no interface number 0 [ 651.272162][ T5829] usb 3-1: too many endpoints for config 0 interface 121 altsetting 108: 70, using maximum allowed: 30 [ 651.363276][ T5829] usb 3-1: config 0 interface 121 altsetting 108 has 0 endpoint descriptors, different from the interface descriptor's value: 70 [ 651.461106][ T5829] usb 3-1: config 0 interface 121 has no altsetting 0 [ 651.587481][ T5829] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 651.622068][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.630301][ T5829] usb 3-1: Product: syz [ 651.722553][ T5829] usb 3-1: Manufacturer: syz [ 651.742183][ T5829] usb 3-1: SerialNumber: syz [ 651.774546][ T5829] usb 3-1: config 0 descriptor?? [ 651.780668][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.844398][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.184282][ T5829] hub 3-1:0.121: bad descriptor, ignoring hub [ 652.199177][ T5829] hub 3-1:0.121: probe with driver hub failed with error -5 [ 652.304109][ T5829] f81232 3-1:0.121: f81534a converter detected [ 652.352692][ T6287] bridge_slave_1: left allmulticast mode [ 652.358531][ T6287] bridge_slave_1: left promiscuous mode [ 652.367398][ T5829] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 652.379137][ T5829] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 652.420194][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.506153][ T6287] bridge_slave_0: left allmulticast mode [ 652.529832][ T6287] bridge_slave_0: left promiscuous mode [ 652.568911][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.644083][ T5829] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 653.627384][ T5829] usb 3-1: USB disconnect, device number 5 [ 653.647220][ T5829] f81232 3-1:0.121: device disconnected [ 653.727113][ T8650] netlink: 64 bytes leftover after parsing attributes in process `syz.8.527'. [ 654.226775][ T8390] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 654.237874][ T8390] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 654.251874][ T8390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 654.281332][ T8390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 654.293780][ T8390] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 654.306855][ T6287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.426029][ T6287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.481394][ T6287] bond0 (unregistering): Released all slaves [ 654.673524][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.742085][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.285802][ T8662] loop8: detected capacity change from 0 to 8 [ 655.494680][ T8662] SQUASHFS error: Failed to read block 0x4de: -5 [ 655.570402][ T8662] SQUASHFS error: Failed to read block 0x4de: -5 [ 655.678544][ T29] audit: type=1800 audit(1771541463.715:12): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.530" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 656.352026][ T8390] Bluetooth: hci0: command tx timeout [ 656.630292][ T6287] hsr_slave_0: left promiscuous mode [ 656.782282][ T6287] hsr_slave_1: left promiscuous mode [ 656.790002][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.862458][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.914660][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.946685][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.947023][ T8680] netlink: 40 bytes leftover after parsing attributes in process `syz.9.532'. [ 657.013136][ T6287] veth1_macvtap: left promiscuous mode [ 657.027563][ T6287] veth0_macvtap: left promiscuous mode [ 657.052425][ T6287] veth1_vlan: left promiscuous mode [ 657.077850][ T6287] veth0_vlan: left promiscuous mode [ 658.441831][ T8390] Bluetooth: hci0: command tx timeout [ 659.327167][ T6287] team0 (unregistering): Port device team_slave_1 removed [ 659.392683][ T6287] team0 (unregistering): Port device team_slave_0 removed [ 660.513857][ T8390] Bluetooth: hci0: command tx timeout [ 661.996677][ T8655] chnl_net:caif_netlink_parms(): no params data found [ 662.592355][ T8390] Bluetooth: hci0: command tx timeout [ 662.919653][ T8738] loop8: detected capacity change from 0 to 512 [ 663.709940][ T8744] loop9: detected capacity change from 0 to 512 [ 665.195118][ T8744] EXT4-fs (loop9): Test dummy encryption mode enabled [ 665.371259][ T8744] EXT4-fs (loop9): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.403178][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.544'. [ 665.572920][ T8744] EXT4-fs (loop9): shut down requested (1) [ 666.136017][ T8389] EXT4-fs (loop9): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 666.171929][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.172383][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.172886][ T8655] bridge_slave_0: entered allmulticast mode [ 666.175878][ T8655] bridge_slave_0: entered promiscuous mode [ 666.254790][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.255182][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.255944][ T8655] bridge_slave_1: entered allmulticast mode [ 666.265754][ T8655] bridge_slave_1: entered promiscuous mode [ 666.651407][ T8655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.723523][ T8655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.150171][ T8655] team0: Port device team_slave_0 added [ 667.291869][ T8655] team0: Port device team_slave_1 added [ 667.703414][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.710452][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.866074][ T8655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.903401][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.910513][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.992837][ T8655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.760040][ T8655] hsr_slave_0: entered promiscuous mode [ 668.837924][ T8655] hsr_slave_1: entered promiscuous mode [ 668.918676][ T8655] debugfs: 'hsr0' already exists in 'hsr' [ 668.962600][ T8655] Cannot create hsr debugfs directory [ 671.565358][ T8791] loop8: detected capacity change from 0 to 2048 [ 671.660644][ T8383] loop8: p1 < > [ 671.786722][ T8655] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 671.845866][ T8791] loop8: p1 < > [ 671.911401][ T8655] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 672.072622][ T8655] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 672.183921][ T8655] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 673.055440][ T8384] udevd[8384]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 674.053235][ T8655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.278828][ T8655] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.389908][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.397457][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.490809][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.498283][ T7359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.547501][ T5070] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 676.563981][ T5070] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 676.613409][ T5070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 676.641196][ T5070] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 676.658800][ T5070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 677.262134][ T8822] loop8: detected capacity change from 0 to 256 [ 677.880105][ T8822] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 677.994221][ T8822] exFAT-fs (loop8): failed to load alloc-bitmap [ 678.084280][ T8822] exFAT-fs (loop8): failed to recognize exfat type [ 678.526078][ T8655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.764714][ T5070] Bluetooth: hci1: command tx timeout [ 679.516657][ T8817] chnl_net:caif_netlink_parms(): no params data found [ 679.765512][ T8834] loop8: detected capacity change from 0 to 512 [ 680.332121][ T5834] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 680.444280][ T8834] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.557: bg 0: block 248: padding at end of block bitmap is not set [ 680.489539][ T8834] loop8: lost filesystem error report for type 5 error -117 [ 680.511726][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 680.525653][ C1] EXT4-fs (loop8): last error at time 1771541488: ext4_validate_block_bitmap:441 [ 680.594020][ T5834] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 680.637875][ T5834] usb 10-1: config 0 has no interface number 0 [ 680.674755][ T8834] Quota error (device loop8): write_blk: dquota write failed [ 680.722450][ T5834] usb 10-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 680.775354][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.796353][ T5834] usb 10-1: Product: syz [ 680.817920][ T5834] usb 10-1: Manufacturer: syz [ 680.827053][ T8834] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 680.832019][ T5834] usb 10-1: SerialNumber: syz [ 680.842399][ T5070] Bluetooth: hci1: command tx timeout [ 680.925038][ T8834] EXT4-fs error (device loop8): ext4_acquire_dquot:7003: comm syz.8.557: Failed to acquire dquot type 1 [ 680.963967][ T5834] usb 10-1: config 0 descriptor?? [ 680.976205][ T8390] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 680.985881][ T5834] hub 10-1:0.132: bad descriptor, ignoring hub [ 681.009315][ T5834] hub 10-1:0.132: probe with driver hub failed with error -5 [ 681.023307][ T8390] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 681.033050][ T8834] loop8: lost filesystem error report for type 5 error -117 [ 681.048721][ T5834] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.132/input/input6 [ 681.086084][ T8390] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 681.133794][ T8390] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 681.164939][ T8390] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 681.300422][ T5834] usb 10-1: USB disconnect, device number 2 [ 681.310710][ T8834] EXT4-fs (loop8): 1 truncate cleaned up [ 681.342909][ T8834] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.358326][ T8834] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.483303][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.501592][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.618923][ T8817] bridge_slave_0: entered allmulticast mode [ 682.651147][ T8817] bridge_slave_0: entered promiscuous mode [ 682.736668][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.778016][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.787742][ T8817] bridge_slave_1: entered allmulticast mode [ 682.809887][ T8817] bridge_slave_1: entered promiscuous mode [ 682.911892][ T5070] Bluetooth: hci1: command tx timeout [ 683.051872][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.094596][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.232509][ T5070] Bluetooth: hci6: command tx timeout [ 683.554755][ T8191] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.578804][ T8860] loop9: detected capacity change from 0 to 8 [ 683.654800][ T8860] unable to read fragment index table [ 684.061215][ T8817] team0: Port device team_slave_0 added [ 684.164685][ T8817] team0: Port device team_slave_1 added [ 684.992401][ T5070] Bluetooth: hci1: command tx timeout [ 685.276169][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.312037][ T5070] Bluetooth: hci6: command tx timeout [ 685.342101][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.475079][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.546144][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.567714][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.672274][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.686065][ T8817] hsr_slave_0: entered promiscuous mode [ 686.728018][ T8817] hsr_slave_1: entered promiscuous mode [ 686.854637][ T8817] debugfs: 'hsr0' already exists in 'hsr' [ 686.860533][ T8817] Cannot create hsr debugfs directory [ 687.054285][ T8655] veth0_vlan: entered promiscuous mode [ 687.392114][ T5070] Bluetooth: hci6: command tx timeout [ 687.501424][ T8844] chnl_net:caif_netlink_parms(): no params data found [ 688.343802][ T8655] veth1_vlan: entered promiscuous mode [ 688.742022][ T8879] syz.9.562 (8879) used greatest stack depth: 2776 bytes left [ 689.473530][ T5070] Bluetooth: hci6: command tx timeout [ 690.020999][ T8899] Bluetooth: MGMT ver 1.23 [ 691.529558][ T8655] veth0_macvtap: entered promiscuous mode [ 691.936344][ T4352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.033074][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.040551][ T8844] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.117935][ T8844] bridge_slave_0: entered allmulticast mode [ 692.152815][ T8844] bridge_slave_0: entered promiscuous mode [ 692.178612][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.233630][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.241363][ T8844] bridge_slave_1: entered allmulticast mode [ 692.276967][ T8844] bridge_slave_1: entered promiscuous mode [ 692.313126][ T8655] veth1_macvtap: entered promiscuous mode [ 692.540551][ T4352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.003883][ T4352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.065328][ T8844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.137596][ T8844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.147646][ T8914] loop9: detected capacity change from 0 to 1024 [ 693.317014][ T4352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.785591][ T8844] team0: Port device team_slave_0 added [ 693.814399][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.950840][ T8844] team0: Port device team_slave_1 added [ 694.133599][ T6287] hfsplus: b-tree write err: -5, ino 25 [ 694.187967][ T6287] hfsplus: b-tree write err: -5, ino 4 [ 694.229342][ T6287] hfsplus: b-tree write err: -5, ino 2 [ 694.330996][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.574106][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.581248][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.701913][ T8844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.860540][ T8817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 694.913803][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.920910][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.004310][ T8844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.083492][ T6287] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.103580][ T6287] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.144904][ T8817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 695.236803][ T8817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 695.361956][ T6287] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.404215][ T6287] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.462097][ T8817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 695.500058][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.518221][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.565939][ T4352] bridge_slave_1: left allmulticast mode [ 695.581919][ T4352] bridge_slave_1: left promiscuous mode [ 695.588869][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.720877][ T4352] bridge_slave_0: left allmulticast mode [ 695.760553][ T4352] bridge_slave_0: left promiscuous mode [ 695.792621][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.679195][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.719165][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.747365][ T4352] bond0 (unregistering): Released all slaves [ 697.758030][ T8844] hsr_slave_0: entered promiscuous mode [ 697.786836][ T8844] hsr_slave_1: entered promiscuous mode [ 697.824784][ T8844] debugfs: 'hsr0' already exists in 'hsr' [ 697.830706][ T8844] Cannot create hsr debugfs directory [ 698.082419][ T8945] input: syz0 as /devices/virtual/input/input7 [ 698.652119][ T4352] hsr_slave_0: left promiscuous mode [ 698.696819][ T4352] hsr_slave_1: left promiscuous mode [ 698.707850][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.749880][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.775943][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.882633][ T4352] veth1_macvtap: left promiscuous mode [ 698.888323][ T4352] veth0_macvtap: left promiscuous mode [ 698.902022][ T4352] veth1_vlan: left promiscuous mode [ 698.907541][ T4352] veth0_vlan: left promiscuous mode [ 699.587067][ T8953] loop9: detected capacity change from 0 to 16 [ 699.678511][ T8953] erofs (device loop9): mounted with root inode @ nid 36. [ 699.807572][ T8953] syz.9.574: attempt to access beyond end of device [ 699.807572][ T8953] loop9: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 699.873842][ T8953] syz.9.574: attempt to access beyond end of device [ 699.873842][ T8953] loop9: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 700.047397][ T29] audit: type=1800 audit(1771541508.065:13): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.574" name="file1" dev="loop9" ino=86 res=0 errno=0 [ 700.243988][ T4352] team0 (unregistering): Port device team_slave_1 removed [ 700.311204][ T4352] team0 (unregistering): Port device team_slave_0 removed [ 700.832018][ T5070] Bluetooth: hci4: command tx timeout [ 702.435137][ T8972] loop8: detected capacity change from 0 to 512 [ 702.520163][ T86] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.548511][ T8972] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 702.700112][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.736028][ T8972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 702.833997][ T8972] System zones: 1-12 [ 702.942279][ T8972] EXT4-fs (loop8): 1 truncate cleaned up [ 702.965832][ T8972] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.077701][ T86] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.318926][ T86] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.531869][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.631755][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.639225][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.767146][ T8191] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.799040][ T86] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.028623][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.036149][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.489281][ T8844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 704.701389][ T8988] loop9: detected capacity change from 0 to 256 [ 704.727694][ T8844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 704.851281][ T8988] exfat: Deprecated parameter 'namecase' [ 705.042982][ T8988] exfat: Deprecated parameter 'namecase' [ 705.086410][ T8844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 705.423785][ T8844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 705.659510][ T86] bridge_slave_1: left allmulticast mode [ 705.686064][ T8988] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 705.728313][ T86] bridge_slave_1: left promiscuous mode [ 705.758163][ T86] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.870475][ T86] bridge_slave_0: left allmulticast mode [ 705.906180][ T86] bridge_slave_0: left promiscuous mode [ 705.942556][ T86] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.643099][ T86] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.701484][ T86] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.748413][ T86] bond0 (unregistering): Released all slaves [ 707.132367][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.141362][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.752029][ T6287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.760042][ T6287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.383645][ T86] hsr_slave_0: left promiscuous mode [ 708.411955][ T86] hsr_slave_1: left promiscuous mode [ 708.427073][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.450613][ T86] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.509005][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.531768][ T86] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.845034][ T86] veth1_macvtap: left promiscuous mode [ 708.850728][ T86] veth0_macvtap: left promiscuous mode [ 708.890649][ T86] veth1_vlan: left promiscuous mode [ 708.896596][ T86] veth0_vlan: left promiscuous mode [ 709.057108][ T9027] loop6: detected capacity change from 0 to 1024 [ 712.939502][ T86] team0 (unregistering): Port device team_slave_1 removed [ 712.995793][ T86] team0 (unregistering): Port device team_slave_0 removed [ 714.445316][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.010555][ T8844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.155368][ T5829] page_pool_release_retry() stalled pool shutdown: id 71, 1 inflight 60 sec [ 715.280677][ T8844] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.340505][ T8817] veth0_vlan: entered promiscuous mode [ 715.441456][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.448986][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.624284][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.631883][ T7334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.759366][ T9075] syz.6.593 uses obsolete (PF_INET,SOCK_PACKET) [ 715.788760][ T8817] veth1_vlan: entered promiscuous mode [ 716.798512][ T8817] veth0_macvtap: entered promiscuous mode [ 716.998320][ T8817] veth1_macvtap: entered promiscuous mode [ 717.389810][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.524003][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.750602][ T9087] loop6: detected capacity change from 0 to 1024 [ 717.771800][ T6287] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.886322][ T6287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.936265][ T6287] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.059829][ T6287] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.730934][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.9.594'. [ 720.864323][ T8844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.790780][ T8844] veth0_vlan: entered promiscuous mode [ 721.936158][ T8844] veth1_vlan: entered promiscuous mode [ 722.338933][ T8844] veth0_macvtap: entered promiscuous mode [ 722.440384][ T8844] veth1_macvtap: entered promiscuous mode [ 722.732245][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.809976][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.982253][ T7334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.029773][ T7334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.170610][ T86] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.216653][ T86] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.523660][ T9129] syzkaller0: entered promiscuous mode [ 723.564299][ T9129] syzkaller0: entered allmulticast mode [ 727.336532][ T9181] syz_tun: entered allmulticast mode [ 727.436153][ T9176] syz_tun: left allmulticast mode [ 727.520546][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.601801][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.836316][ T7334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.913136][ T7334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.458473][ T9188] ip6_vti0 speed is unknown, defaulting to 1000 [ 728.538329][ T9188] ip6_vti0 speed is unknown, defaulting to 1000 [ 728.570756][ T9188] ip6_vti0 speed is unknown, defaulting to 1000 [ 728.789126][ T9] IPVS: starting estimator thread 0... [ 728.802548][ T9194] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 728.902436][ T9197] IPVS: using max 240 ests per chain, 12000 per kthread [ 729.411050][ T9199] loop3: detected capacity change from 0 to 2048 [ 729.418807][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.439497][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.484610][ T9199] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 729.912847][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.949435][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.228611][ T795] ip6_vti0 speed is unknown, defaulting to 1000 [ 731.291828][ T9188] infiniband syz2: set down [ 731.296537][ T9188] infiniband syz2: added ip6_vti0 [ 731.381563][ T9188] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 731.383651][ T9216] netlink: 'syz.3.618': attribute type 8 has an invalid length. [ 731.407262][ T9188] infiniband syz2: Couldn't open port 1 [ 731.476887][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 731.610956][ T9188] RDS/IB: syz2: added [ 731.627480][ T9188] smc: adding ib device syz2 with port count 1 [ 731.679519][ T9188] smc: ib device syz2 port 1 has no pnetid [ 731.697968][ T9216] bond0: entered promiscuous mode [ 731.733714][ T9216] bond_slave_0: entered promiscuous mode [ 731.740529][ T9216] bond_slave_1: entered promiscuous mode [ 731.810812][ T9216] gretap0: entered promiscuous mode [ 731.917172][ T9216] veth0_to_team: entered promiscuous mode [ 731.975741][ T9216] hsr1: entered promiscuous mode [ 732.041925][ T795] ip6_vti0 speed is unknown, defaulting to 1000 [ 732.058404][ T9188] ip6_vti0 speed is unknown, defaulting to 1000 [ 732.137561][ T9221] netlink: 68 bytes leftover after parsing attributes in process `syz.8.621'. [ 732.702729][ T9227] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 733.297474][ T9235] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 733.427921][ T9235] bond1: (slave lo): Enslaving as an active interface with an up link [ 733.504994][ T9235] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 734.507901][ T9250] syzkaller0: entered promiscuous mode [ 734.548067][ T9250] syzkaller0: entered allmulticast mode [ 734.612478][ T9188] ip6_vti0 speed is unknown, defaulting to 1000 [ 736.908534][ T9188] ip6_vti0 speed is unknown, defaulting to 1000 [ 738.240700][ T5070] Bluetooth: hci6: link tx timeout [ 738.253161][ T5070] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 739.104250][ T9307] ===================================================== [ 739.111470][ T9307] BUG: KMSAN: uninit-value in __fl_lookup+0x6ce/0x940 [ 739.118662][ T9307] __fl_lookup+0x6ce/0x940 [ 739.123378][ T9307] fl_mask_lookup+0x305/0xd60 [ 739.128198][ T9307] fl_classify+0x36b/0x780 [ 739.132835][ T9307] tcf_classify+0x855/0x1ca0 [ 739.137588][ T9307] multiq_enqueue+0x82/0x5a0 [ 739.142500][ T9307] __dev_queue_xmit+0x257f/0x5a50 [ 739.147702][ T9307] packet_xmit+0x8f/0x710 [ 739.152303][ T9307] packet_sendmsg+0x91d9/0xa320 [ 739.157442][ T9307] ____sys_sendmsg+0xfe7/0x1080 [ 739.162568][ T9307] ___sys_sendmsg+0x271/0x3b0 [ 739.167424][ T9307] __sys_sendmsg+0x1aa/0x300 [ 739.172366][ T9307] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 739.178118][ T9307] ia32_sys_call+0x1e4a/0x4360 [ 739.183103][ T9307] __do_fast_syscall_32+0x17f/0x3f0 [ 739.188439][ T9307] do_fast_syscall_32+0x37/0x80 [ 739.193503][ T9307] do_SYSENTER_32+0x1f/0x30 [ 739.198126][ T9307] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.204734][ T9307] [ 739.207120][ T9307] Uninit was stored to memory at: [ 739.212431][ T9307] fl_mask_lookup+0x254/0xd60 [ 739.217256][ T9307] fl_classify+0x36b/0x780 [ 739.221899][ T9307] tcf_classify+0x855/0x1ca0 [ 739.226639][ T9307] multiq_enqueue+0x82/0x5a0 [ 739.231404][ T9307] __dev_queue_xmit+0x257f/0x5a50 [ 739.236713][ T9307] packet_xmit+0x8f/0x710 [ 739.241210][ T9307] packet_sendmsg+0x91d9/0xa320 [ 739.246288][ T9307] ____sys_sendmsg+0xfe7/0x1080 [ 739.251306][ T9307] ___sys_sendmsg+0x271/0x3b0 [ 739.256245][ T9307] __sys_sendmsg+0x1aa/0x300 [ 739.261010][ T9307] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 739.266830][ T9307] ia32_sys_call+0x1e4a/0x4360 [ 739.271810][ T9307] __do_fast_syscall_32+0x17f/0x3f0 [ 739.277149][ T9307] do_fast_syscall_32+0x37/0x80 [ 739.282222][ T9307] do_SYSENTER_32+0x1f/0x30 [ 739.286850][ T9307] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.293438][ T9307] [ 739.295827][ T9307] Uninit was stored to memory at: [ 739.301105][ T9307] __skb_flow_dissect+0xfe4/0xa1f0 [ 739.306472][ T9307] fl_classify+0x349/0x780 [ 739.311030][ T9307] tcf_classify+0x855/0x1ca0 [ 739.315862][ T9307] multiq_enqueue+0x82/0x5a0 [ 739.317674][ T9188] ip6_vti0 speed is unknown, defaulting to 1000 [ 739.320613][ T9307] __dev_queue_xmit+0x257f/0x5a50 [ 739.332149][ T9307] packet_xmit+0x8f/0x710 [ 739.336633][ T9307] packet_sendmsg+0x91d9/0xa320 [ 739.341725][ T9307] ____sys_sendmsg+0xfe7/0x1080 [ 739.346754][ T9307] ___sys_sendmsg+0x271/0x3b0 [ 739.351710][ T9307] __sys_sendmsg+0x1aa/0x300 [ 739.356468][ T9307] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 739.362290][ T9307] ia32_sys_call+0x1e4a/0x4360 [ 739.367180][ T9307] __do_fast_syscall_32+0x17f/0x3f0 [ 739.372636][ T9307] do_fast_syscall_32+0x37/0x80 [ 739.377621][ T9307] do_SYSENTER_32+0x1f/0x30 [ 739.382338][ T9307] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.388845][ T9307] [ 739.391241][ T9307] Uninit was created at: [ 739.395835][ T9307] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 739.402112][ T9307] __alloc_skb+0x855/0x1190 [ 739.406781][ T9307] alloc_skb_with_frags+0xc5/0xa60 [ 739.412164][ T9307] sock_alloc_send_pskb+0xacb/0xc60 [ 739.417553][ T9307] packet_sendmsg+0x7477/0xa320 [ 739.422655][ T9307] ____sys_sendmsg+0xfe7/0x1080 [ 739.427696][ T9307] ___sys_sendmsg+0x271/0x3b0 [ 739.432663][ T9307] __sys_sendmsg+0x1aa/0x300 [ 739.437436][ T9307] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 739.443262][ T9307] ia32_sys_call+0x1e4a/0x4360 [ 739.448161][ T9307] __do_fast_syscall_32+0x17f/0x3f0 [ 739.453613][ T9307] do_fast_syscall_32+0x37/0x80 [ 739.458597][ T9307] do_SYSENTER_32+0x1f/0x30 [ 739.463304][ T9307] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.470232][ T9307] [ 739.472767][ T9307] CPU: 1 UID: 0 PID: 9307 Comm: syz.1.644 Not tainted syzkaller #0 PREEMPT(full) [ 739.482224][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.492509][ T9307] ===================================================== [ 739.499535][ T9307] Disabling lock debugging due to kernel taint [ 739.505907][ T9307] Kernel panic - not syncing: kmsan.panic set ... [ 739.512457][ T9307] CPU: 1 UID: 0 PID: 9307 Comm: syz.1.644 Tainted: G B syzkaller #0 PREEMPT(full) [ 739.523412][ T9307] Tainted: [B]=BAD_PAGE [ 739.527654][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.537837][ T9307] Call Trace: [ 739.541206][ T9307] [ 739.544219][ T9307] __dump_stack+0x26/0x30 [ 739.548714][ T9307] dump_stack_lvl+0x50/0x1c0 [ 739.553461][ T9307] ? dump_stack+0x12/0x25 [ 739.557951][ T9307] dump_stack+0x1e/0x25 [ 739.562263][ T9307] vpanic+0x7b4/0x1430 [ 739.566524][ T9307] panic+0x15d/0x160 [ 739.570637][ T9307] kmsan_report+0x31a/0x320 [ 739.575319][ T9307] ? __msan_warning+0x1b/0x30 [ 739.580164][ T9307] ? __fl_lookup+0x6ce/0x940 [ 739.584894][ T9307] ? fl_mask_lookup+0x305/0xd60 [ 739.589895][ T9307] ? fl_classify+0x36b/0x780 [ 739.594630][ T9307] ? tcf_classify+0x855/0x1ca0 [ 739.599560][ T9307] ? multiq_enqueue+0x82/0x5a0 [ 739.604516][ T9307] ? __dev_queue_xmit+0x257f/0x5a50 [ 739.609927][ T9307] ? packet_xmit+0x8f/0x710 [ 739.614612][ T9307] ? packet_sendmsg+0x91d9/0xa320 [ 739.619793][ T9307] ? ____sys_sendmsg+0xfe7/0x1080 [ 739.625003][ T9307] ? ___sys_sendmsg+0x271/0x3b0 [ 739.630042][ T9307] ? __sys_sendmsg+0x1aa/0x300 [ 739.634984][ T9307] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 739.640893][ T9307] ? ia32_sys_call+0x1e4a/0x4360 [ 739.645968][ T9307] ? __do_fast_syscall_32+0x17f/0x3f0 [ 739.651484][ T9307] ? do_fast_syscall_32+0x37/0x80 [ 739.656662][ T9307] ? do_SYSENTER_32+0x1f/0x30 [ 739.661475][ T9307] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.668169][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 739.673478][ T9307] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 739.680005][ T9307] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 739.686249][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 739.691547][ T9307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 739.697559][ T9307] ? jhash2+0x318/0x420 [ 739.701898][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 739.707193][ T9307] __msan_warning+0x1b/0x30 [ 739.711852][ T9307] __fl_lookup+0x6ce/0x940 [ 739.716417][ T9307] ? stack_depot_save_flags+0x610/0x790 [ 739.722187][ T9307] fl_mask_lookup+0x305/0xd60 [ 739.727046][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 739.732327][ T9307] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 739.738820][ T9307] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 739.745102][ T9307] fl_classify+0x36b/0x780 [ 739.749649][ T9307] ? stack_depot_save_flags+0x35/0x790 [ 739.755281][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 739.760557][ T9307] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 739.767052][ T9307] ? kmsan_internal_poison_memory+0x78/0x90 [ 739.773099][ T9307] ? kmsan_internal_poison_memory+0x4a/0x90 [ 739.779141][ T9307] ? kmsan_slab_alloc+0xdc/0x160 [ 739.784229][ T9307] ? kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 739.790575][ T9307] ? __alloc_skb+0x855/0x1190 [ 739.795394][ T9307] ? alloc_skb_with_frags+0xc5/0xa60 [ 739.800835][ T9307] ? sock_alloc_send_pskb+0xacb/0xc60 [ 739.806382][ T9307] ? packet_sendmsg+0x7477/0xa320 [ 739.811552][ T9307] ? ____sys_sendmsg+0xfe7/0x1080 [ 739.816744][ T9307] ? ___sys_sendmsg+0x271/0x3b0 [ 739.821757][ T9307] ? __sys_sendmsg+0x1aa/0x300 [ 739.826684][ T9307] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 739.832581][ T9307] ? ia32_sys_call+0x1e4a/0x4360 [ 739.837639][ T9307] ? __do_fast_syscall_32+0x17f/0x3f0 [ 739.843133][ T9307] ? do_fast_syscall_32+0x37/0x80 [ 739.848276][ T9307] ? do_SYSENTER_32+0x1f/0x30 [ 739.853065][ T9307] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.859728][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 739.865010][ T9307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 739.870992][ T9307] ? __skb_flow_dissect+0x41/0xa1f0 [ 739.876345][ T9307] ? filter_irq_stacks+0x49/0x190 [ 739.881528][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 739.886843][ T9307] ? __pfx_fl_classify+0x10/0x10 [ 739.891929][ T9307] tcf_classify+0x855/0x1ca0 [ 739.896713][ T9307] multiq_enqueue+0x82/0x5a0 [ 739.901477][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 739.906763][ T9307] ? __pfx_multiq_enqueue+0x10/0x10 [ 739.912140][ T9307] __dev_queue_xmit+0x257f/0x5a50 [ 739.917351][ T9307] ? __msan_warning+0x1b/0x30 [ 739.922189][ T9307] ? __dev_queue_xmit+0x280/0x5a50 [ 739.927500][ T9307] packet_xmit+0x8f/0x710 [ 739.931977][ T9307] ? packet_parse_headers+0x92b/0xa20 [ 739.937536][ T9307] packet_sendmsg+0x91d9/0xa320 [ 739.942524][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 739.947808][ T9307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 739.953802][ T9307] ? aa_label_sk_perm+0x759/0x810 [ 739.958986][ T9307] ? __msan_warning+0x1b/0x30 [ 739.963812][ T9307] ? filter_irq_stacks+0x13f/0x190 [ 739.969097][ T9307] ? dim_turn+0x60/0xf0 [ 739.973397][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 739.978678][ T9307] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 739.985195][ T9307] ? aa_sk_perm+0x841/0xda0 [ 739.989907][ T9307] ? __pfx_packet_sendmsg+0x10/0x10 [ 739.995253][ T9307] ? __pfx_packet_sendmsg+0x10/0x10 [ 740.000588][ T9307] ____sys_sendmsg+0xfe7/0x1080 [ 740.005641][ T9307] ___sys_sendmsg+0x271/0x3b0 [ 740.010478][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 740.015764][ T9307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 740.021787][ T9307] ? kmsan_get_metadata+0xf1/0x160 [ 740.027069][ T9307] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 740.033052][ T9307] __sys_sendmsg+0x1aa/0x300 [ 740.037845][ T9307] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 740.043581][ T9307] ia32_sys_call+0x1e4a/0x4360 [ 740.048473][ T9307] __do_fast_syscall_32+0x17f/0x3f0 [ 740.053811][ T9307] do_fast_syscall_32+0x37/0x80 [ 740.058787][ T9307] do_SYSENTER_32+0x1f/0x30 [ 740.063414][ T9307] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 740.069915][ T9307] RIP: 0023:0xf7f74f6c [ 740.074080][ T9307] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 740.093824][ T9307] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 740.102388][ T9307] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0 [ 740.110467][ T9307] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 740.118532][ T9307] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 740.126595][ T9307] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 740.134662][ T9307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 740.142765][ T9307] [ 740.146213][ T9307] Kernel Offset: disabled [ 740.150579][ T9307] Rebooting in 86400 seconds..