last executing test programs: 11m24.409598323s ago: executing program 3 (id=446): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/cgroup\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) 11m18.396839662s ago: executing program 3 (id=457): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCAX25ADDUID(r0, 0x89e1, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000140)='&\x00', 0x8000, &(0x7f0000000180)={@align=0x5, {0x2, 0x9b, 0xfffffff9, 0x9}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x8}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 11m17.390079909s ago: executing program 3 (id=460): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) 11m12.23503453s ago: executing program 3 (id=469): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1080) r0 = socket(0x10, 0x80002, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000003c0)="dc8daf8d760c0b5d5c8caa98fa19c6a35a188a3775d272c579ff33a6effc0c49320ff86badc0d7f8b91fbc6ce4baa16de55d0ee6203b6db86008599c5d2f19dda7e34e3693cbb469728ec4005e4f00000000000053c282394f9f31d9210d4e736b769be32865f7dc70c5bdd6cdd0e82ac0e85e8ae59456bcda96de64e44f", 0x7e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4", @ANYBLOB="40a9384824eabf84d30861196d24a3403ff04a", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x3, 0x3, 0xff) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="15010000812000001c0012800d0000000003000947ba4e37643ab2f1e5da16bbba7f2900"], 0x3c}}, 0x28000000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11m11.249172667s ago: executing program 3 (id=472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000011c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 11m10.17150383s ago: executing program 3 (id=476): r0 = socket(0x1d, 0x2, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@private2, @empty, 0x13, 0x1}}) r6 = syz_io_uring_setup(0x18d7, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x2, &(0x7f0000000180), 0xfe) syz_open_procfs(0xffffffffffffffff, 0x0) 10m55.043207917s ago: executing program 32 (id=476): r0 = socket(0x1d, 0x2, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@private2, @empty, 0x13, 0x1}}) r6 = syz_io_uring_setup(0x18d7, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x2, &(0x7f0000000180), 0xfe) syz_open_procfs(0xffffffffffffffff, 0x0) 11.332506832s ago: executing program 4 (id=2243): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmsg(0xffffffffffffffff, &(0x7f00000054c0)={&(0x7f00000002c0)=@tipc, 0x80, &(0x7f0000005380)=[{0x0}, {&(0x7f0000005180)=""/127, 0x7f}, {&(0x7f0000005200)=""/168, 0xa8}, {&(0x7f00000052c0)=""/150, 0x96}], 0x4, &(0x7f0000005400)=""/188, 0xbc}, 0x60) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xf, r4, 0x0, &(0x7f00000003c0)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x690, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x6f0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 11.098584938s ago: executing program 1 (id=2245): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) rmdir(&(0x7f0000000100)='./control\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@delsa={0x3c, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {@in=@rand_addr=0x64010100, 0x4d5, 0x2}, [@srcaddr={0x14, 0xd, @in6=@empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 9.991490223s ago: executing program 1 (id=2249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.28793161s ago: executing program 5 (id=2251): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x7fff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x17) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x15, 0x0, 0x1}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_mount_image$qnx6(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6d000000002c6d6d695f66730500"], 0x1, 0x9dc3, &(0x7f0000009ec0)="$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") 9.00120283s ago: executing program 1 (id=2253): timer_delete(0x0) eventfd2(0x8, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) 7.545017619s ago: executing program 1 (id=2254): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWINFO(r2, 0x4004480d, 0x0) read$hidraw(r2, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x77) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6d", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x4000000}], 0x1, 0x400c0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 7.284736786s ago: executing program 5 (id=2256): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socket(0x2, 0x3, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$mice(0xffffffffffffff9c, 0x0, 0x41) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000000)) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 6.673485498s ago: executing program 2 (id=2257): syz_init_net_socket$ax25(0x3, 0x2, 0xc5) r0 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x18, 0x2275, 0x42, 0x40, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001fc0)=ANY=[@ANYRES16], 0x1015, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) writev(0xffffffffffffffff, &(0x7f0000000f40)=[{&(0x7f0000000c00)="be", 0x1}], 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0x1ff}, 0x4) gettid() 5.291669881s ago: executing program 0 (id=2258): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@iv={0x38, 0x117, 0x2, 0x23, "99624780197b454ff546f696ef5e06e9c6d28cc4cf1c8eaadba14e058eadd590bac731"}], 0x38}], 0x1, 0x40800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.289670291s ago: executing program 2 (id=2259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 5.068817027s ago: executing program 0 (id=2260): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.340503376s ago: executing program 0 (id=2261): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4) ftruncate(r2, 0x2007ffb) close(r2) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) openat(0xffffffffffffff9c, 0x0, 0x88882, 0x0) 4.223949614s ago: executing program 2 (id=2262): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 4.188724426s ago: executing program 0 (id=2263): syz_open_dev$dri(0x0, 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) getpgrp(0x0) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000045e000/0x3000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000200)) unshare(0x28060400) 4.126870201s ago: executing program 1 (id=2264): timer_delete(0x0) eventfd2(0x8, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x2, 0x7fffffffffffffff, 0x7, 0x7fffffffffffffff, 0x2, 0x2, 0x6dd, 0xfffffffffffffff9, 0xb482, 0x9, 0xfffffffffffffffc, 0x7ff, 0xa, 0x0, 0x9], 0x80a0000, 0x148800}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 4.125818981s ago: executing program 4 (id=2265): syz_init_net_socket$ax25(0x3, 0x2, 0xc5) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) 4.125241391s ago: executing program 2 (id=2266): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.380103461s ago: executing program 0 (id=2267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 3.347336843s ago: executing program 2 (id=2268): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) write$sysctl(0xffffffffffffffff, 0x0, 0x0) 3.122456129s ago: executing program 1 (id=2269): truncate(&(0x7f0000000000)='./file0\x00', 0x96f) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000ac0)="e2868f4aefac7a67561422c516dc"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001f00010029bd7000fedbdf25fc000000000000000000000000000001000004d2020032000a0101020000000000000000000000001b090000000000800c0015005b073500f2520000b3d6cded9e62ee1bc81fec117070b98e80e0a320b181ce8d00c174c2376f1fea6d6b073b73a76fb67914798ce622cbefd9a4e7b04d1616c96014a6df257b916e53a848ad10233cfd5ffde3c7aa01bfe75b39f97874fa59a203c2e2a35d427c34beb3ba2e8132ffa6e9bbbe9d981660f02afc26beec7848009c8a820763f138204445d36eabd6c87eaabfbe90c8ad0293b80f"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_rdma(0x10, 0x3, 0x14) 2.452613184s ago: executing program 5 (id=2270): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@iv={0x38, 0x117, 0x2, 0x23, "99624780197b454ff546f696ef5e06e9c6d28cc4cf1c8eaadba14e058eadd590bac731"}], 0x38}], 0x1, 0x40800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.389827238s ago: executing program 2 (id=2271): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) 2.315072184s ago: executing program 4 (id=2272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 2.248709318s ago: executing program 5 (id=2273): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4) ftruncate(r2, 0x2007ffb) close(r2) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) openat(0xffffffffffffff9c, 0x0, 0x88882, 0x0) 2.095055428s ago: executing program 5 (id=2274): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWINFO(r2, 0x4004480d, 0x0) read$hidraw(r2, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x77) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6d", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x4000000}], 0x1, 0x400c0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.199654289s ago: executing program 4 (id=2275): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x10) 1.140536803s ago: executing program 0 (id=2276): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmsg(0xffffffffffffffff, &(0x7f00000054c0)={&(0x7f00000002c0)=@tipc, 0x80, &(0x7f0000005380)=[{0x0}, {&(0x7f0000005180)=""/127, 0x7f}, {&(0x7f0000005200)=""/168, 0xa8}, {&(0x7f00000052c0)=""/150, 0x96}], 0x4, &(0x7f0000005400)=""/188, 0xbc}, 0x60) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xf, r4, 0x0, &(0x7f00000003c0)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x690, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x6f0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 1.04075583s ago: executing program 4 (id=2277): timer_create(0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 414.475402ms ago: executing program 5 (id=2278): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 0s ago: executing program 4 (id=2279): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) kernel console output (not intermixed with test programs): N 0 to HW filter on device macvlan3 [ 273.446716][ T7435] device bond3 left promiscuous mode [ 277.551960][ T5670] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 277.696172][ T7504] loop4: detected capacity change from 0 to 512 [ 277.757245][ T7504] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 277.897955][ T7504] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 277.946673][ T5670] usb 1-1: Using ep0 maxpacket: 32 [ 278.496950][ T5670] usb 1-1: config 0 has an invalid interface number: 162 but max is 0 [ 278.515542][ T5670] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.536231][ T5670] usb 1-1: config 0 has no interface number 0 [ 278.626699][ T5670] usb 1-1: string descriptor 0 read error: -71 [ 278.633204][ T5670] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 278.688064][ T7515] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 278.706642][ T5670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.754657][ T5670] usb 1-1: config 0 descriptor?? [ 278.782695][ T5670] usb 1-1: can't set config #0, error -71 [ 278.799737][ T5670] usb 1-1: USB disconnect, device number 6 [ 278.805761][ T7519] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 278.889986][ T7519] bond4: (slave vxcan3): Error -22 calling dev_set_mtu [ 279.957186][ T7515] netlink: 60 bytes leftover after parsing attributes in process `syz.0.752'. [ 280.737297][ T7549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.759'. [ 281.578606][ T7566] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.310420][ T7582] loop5: detected capacity change from 0 to 512 [ 282.540963][ T7582] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 282.682702][ T7582] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 285.040099][ T7612] netlink: 'syz.5.769': attribute type 1 has an invalid length. [ 285.154089][ T7616] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 285.242677][ T7616] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 285.349570][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.769'. [ 285.399351][ T7612] netlink: 24 bytes leftover after parsing attributes in process `syz.5.769'. [ 285.455065][ T7621] device macvlan2 entered promiscuous mode [ 285.463551][ T7621] device bond1 entered promiscuous mode [ 285.469746][ T7621] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 285.502352][ T7621] device bond1 left promiscuous mode [ 286.558504][ T7638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.775'. [ 286.641491][ T7642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.540633][ T7710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.788'. [ 292.788330][ T7735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.835606][ T7734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.904398][ T7754] loop5: detected capacity change from 0 to 16 [ 293.958986][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.800'. [ 294.025749][ T7754] erofs: (device loop5): mounted with root inode @ nid 36. [ 295.536059][ T7762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.804'. [ 295.769967][ T7762] netlink: 60 bytes leftover after parsing attributes in process `syz.2.804'. [ 296.679803][ T7781] netlink: 'syz.2.808': attribute type 1 has an invalid length. [ 297.573765][ T7785] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 297.607750][ T7785] bond4: (slave vxcan3): Error -22 calling dev_set_mtu [ 298.038993][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 298.241836][ T7787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.808'. [ 298.671892][ T7804] tipc: Started in network mode [ 298.696171][ T7804] tipc: Node identity 7aa4cad232f2, cluster identity 4711 [ 298.712322][ T7804] tipc: Enabled bearer , priority 0 [ 298.730600][ T7805] device syzkaller0 entered promiscuous mode [ 298.753775][ T7803] tipc: Started in network mode [ 298.758919][ T7803] tipc: Node identity a2d903d15f39, cluster identity 4711 [ 298.766151][ T7803] tipc: Enabled bearer , priority 0 [ 298.825338][ T7804] tipc: Resetting bearer [ 298.847872][ T7806] device syzkaller0 entered promiscuous mode [ 298.894616][ T7803] tipc: Resetting bearer [ 298.914470][ T7802] tipc: Resetting bearer [ 298.933332][ T7802] tipc: Disabling bearer [ 298.962092][ T7801] tipc: Resetting bearer [ 299.002557][ T7801] tipc: Disabling bearer [ 301.668714][ T7834] netlink: 20 bytes leftover after parsing attributes in process `syz.5.820'. [ 301.877692][ T7834] netlink: 60 bytes leftover after parsing attributes in process `syz.5.820'. [ 302.248792][ T7842] netlink: 'syz.1.822': attribute type 1 has an invalid length. [ 302.312784][ T7842] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 302.330735][ T7842] bond4: (slave vxcan3): Error -22 calling dev_set_mtu [ 303.115297][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 303.146921][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 303.341426][ T7851] device macvlan3 entered promiscuous mode [ 303.357834][ T7851] device bond4 entered promiscuous mode [ 303.526960][ T7851] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 304.211866][ T7851] device bond4 left promiscuous mode [ 309.133338][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.842'. [ 309.169520][ T7916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.842'. [ 310.772437][ T7933] netlink: 20 bytes leftover after parsing attributes in process `syz.5.846'. [ 311.942605][ T7933] netlink: 60 bytes leftover after parsing attributes in process `syz.5.846'. [ 312.294429][ T7944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.918506][ T7979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.859'. [ 317.561355][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.568042][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.590640][ T7979] netlink: 60 bytes leftover after parsing attributes in process `syz.0.859'. [ 324.609708][ T4230] Bluetooth: hci5: command 0x0406 tx timeout [ 327.333436][ T8068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.191863][ T5477] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 329.276814][ T5477] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.567380][ T8097] loop5: detected capacity change from 0 to 512 [ 331.082631][ T8097] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.888: invalid indirect mapped block 256 (level 2) [ 331.170193][ T8097] EXT4-fs (loop5): 2 truncates cleaned up [ 331.176005][ T8097] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 332.341329][ T26] kauditd_printk_skb: 916 callbacks suppressed [ 332.341354][ T26] audit: type=1800 audit(1775736803.453:929): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.889" name="bus" dev="ramfs" ino=43698 res=0 errno=0 [ 332.741070][ T8116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.945568][ T8133] device syzkaller0 entered promiscuous mode [ 335.182506][ T8145] loop5: detected capacity change from 0 to 512 [ 335.256055][ T8145] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 335.440672][ T8145] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 335.849133][ T8157] loop4: detected capacity change from 0 to 128 [ 337.887647][ T8157] qnx6: invalid mount options. [ 339.317524][ T26] audit: type=1800 audit(1775736810.283:930): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.905" name="bus" dev="ramfs" ino=43763 res=0 errno=0 [ 339.440307][ T4229] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 339.497335][ T4229] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 343.045624][ T8231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.925'. [ 343.173838][ T8228] tipc: Started in network mode [ 343.200412][ T8228] tipc: Node identity f2a6a03f9f48, cluster identity 4711 [ 343.221973][ T8228] tipc: Enabled bearer , priority 0 [ 343.289884][ T26] audit: type=1800 audit(1775736814.403:931): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.919" name="bus" dev="ramfs" ino=42705 res=0 errno=0 [ 343.328580][ T8227] tipc: Disabling bearer [ 344.759502][ T8267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.938'. [ 346.250757][ T8286] hub 8-0:1.0: USB hub found [ 346.257848][ T8286] hub 8-0:1.0: 1 port detected [ 347.213832][ T26] audit: type=1800 audit(1775736818.323:932): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.936" name="bus" dev="ramfs" ino=43946 res=0 errno=0 [ 347.470022][ T26] audit: type=1800 audit(1775736818.363:933): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.937" name="bus" dev="ramfs" ino=43960 res=0 errno=0 [ 348.186277][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.5.949'. [ 349.374554][ T8314] hub 8-0:1.0: USB hub found [ 349.380532][ T8314] hub 8-0:1.0: 1 port detected [ 357.176584][ T26] audit: type=1800 audit(1775736828.283:934): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.962" name="bus" dev="ramfs" ino=44100 res=0 errno=0 [ 357.457551][ T8397] loop5: detected capacity change from 0 to 512 [ 357.667691][ T8397] EXT4-fs (loop5): Ignoring removed nobh option [ 357.916106][ T8406] hub 8-0:1.0: USB hub found [ 357.929067][ T8406] hub 8-0:1.0: 1 port detected [ 358.915719][ T8397] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.976: iget: bad i_size value: 38620345925642 [ 359.227632][ T8397] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.976: couldn't read orphan inode 15 (err -117) [ 359.464566][ T8397] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 361.720875][ T8449] hub 8-0:1.0: USB hub found [ 361.726418][ T8449] hub 8-0:1.0: 1 port detected [ 362.468963][ T8454] device syzkaller0 entered promiscuous mode [ 362.898890][ T8465] hub 8-0:1.0: USB hub found [ 362.903729][ T8465] hub 8-0:1.0: 1 port detected [ 363.817951][ T8468] loop5: detected capacity change from 0 to 1024 [ 363.877521][ T8468] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 363.884891][ T8468] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 363.970999][ T8468] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.996: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 363.995914][ T8468] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.996: couldn't read orphan inode 11 (err -117) [ 364.010191][ T8468] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 364.116837][ T8468] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.996: Invalid block bitmap block 0 in block_group 0 [ 364.135986][ T8468] Quota error (device loop5): write_blk: dquota write failed [ 364.144958][ T8468] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 364.155671][ T8468] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.996: Failed to acquire dquot type 0 [ 364.624514][ T8478] hub 8-0:1.0: USB hub found [ 364.629474][ T8478] hub 8-0:1.0: 1 port detected [ 365.338292][ T8483] hub 8-0:1.0: USB hub found [ 365.343147][ T8483] hub 8-0:1.0: 1 port detected [ 366.263717][ T8500] loop0: detected capacity change from 0 to 1024 [ 367.274483][ T8500] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 367.439766][ T8500] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 369.323541][ T8500] EXT4-fs: failed to create workqueue [ 369.348800][ T8500] EXT4-fs (loop0): mount failed [ 369.413631][ T8531] hub 8-0:1.0: USB hub found [ 369.454285][ T8528] device syzkaller0 entered promiscuous mode [ 369.754492][ T8531] hub 8-0:1.0: 1 port detected [ 372.381440][ T8559] loop4: detected capacity change from 0 to 16 [ 372.539711][ T8559] erofs: (device loop4): mounted with root inode @ nid 36. [ 372.657562][ T8566] loop5: detected capacity change from 0 to 1024 [ 373.199687][ T8566] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 373.207649][ T8566] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 373.319598][ T8566] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.1022: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 373.341041][ T8566] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1022: couldn't read orphan inode 11 (err -117) [ 373.357058][ T8566] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 373.849535][ T8566] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.1022: Invalid block bitmap block 0 in block_group 0 [ 373.877151][ T8566] Quota error (device loop5): write_blk: dquota write failed [ 373.884564][ T8566] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 373.895779][ T8566] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.1022: Failed to acquire dquot type 0 [ 375.145378][ T8586] netlink: 'syz.5.1030': attribute type 1 has an invalid length. [ 375.248685][ T8593] loop2: detected capacity change from 0 to 512 [ 375.394607][ T8588] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 375.871957][ T8588] bond2: (slave vxcan3): Error -22 calling dev_set_mtu [ 375.924669][ T8593] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1031: invalid indirect mapped block 256 (level 2) [ 375.957565][ T8593] EXT4-fs (loop2): 2 truncates cleaned up [ 375.966952][ T8593] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 375.994085][ T8600] device macvlan2 entered promiscuous mode [ 376.002477][ T8600] device bond2 entered promiscuous mode [ 376.009962][ T8600] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.041853][ T8600] device bond2 left promiscuous mode [ 377.008307][ T8610] hub 8-0:1.0: USB hub found [ 377.014309][ T8610] hub 8-0:1.0: 1 port detected [ 377.679146][ T8616] loop0: detected capacity change from 0 to 16 [ 377.771354][ T8616] erofs: (device loop0): mounted with root inode @ nid 36. [ 378.973222][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.067603][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.269903][ T8628] device syzkaller0 entered promiscuous mode [ 379.969071][ T8648] hub 8-0:1.0: USB hub found [ 379.975961][ T8648] hub 8-0:1.0: 1 port detected [ 382.464714][ T8657] loop5: detected capacity change from 0 to 512 [ 382.507480][ T8660] loop2: detected capacity change from 0 to 16 [ 382.999426][ T8660] erofs: (device loop2): mounted with root inode @ nid 36. [ 383.049372][ T8657] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1048: invalid indirect mapped block 256 (level 2) [ 383.189327][ T8657] EXT4-fs (loop5): 2 truncates cleaned up [ 383.204248][ T8657] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 384.777341][ T8687] loop4: detected capacity change from 0 to 512 [ 386.513271][ T8687] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1059: invalid indirect mapped block 256 (level 2) [ 386.529854][ T8687] EXT4-fs (loop4): 2 truncates cleaned up [ 386.539315][ T8687] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 386.573312][ T8705] netlink: 'syz.5.1061': attribute type 1 has an invalid length. [ 386.853757][ T8709] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 386.974872][ T8713] hub 8-0:1.0: USB hub found [ 386.981871][ T8713] hub 8-0:1.0: 1 port detected [ 387.368719][ T8701] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 388.021394][ T5475] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 388.068487][ T8709] bond3: (slave vxcan3): Error -22 calling dev_set_mtu [ 388.077084][ T5475] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 390.093978][ T8742] loop0: detected capacity change from 0 to 16 [ 391.392048][ T8742] erofs: (device loop0): mounted with root inode @ nid 36. [ 393.478573][ T8766] netlink: 'syz.1.1078': attribute type 1 has an invalid length. [ 394.513379][ T8770] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 394.530836][ T8770] bond5: (slave vxcan3): Error -22 calling dev_set_mtu [ 395.550920][ T8787] loop0: detected capacity change from 0 to 512 [ 395.800832][ T8787] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1081: invalid indirect mapped block 256 (level 2) [ 395.985218][ T8787] EXT4-fs (loop0): 2 truncates cleaned up [ 396.021365][ T8787] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 396.853742][ T8791] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 397.471185][ T8807] hub 8-0:1.0: USB hub found [ 397.476785][ T8807] hub 8-0:1.0: 1 port detected [ 398.130902][ T8809] loop5: detected capacity change from 0 to 16 [ 398.405786][ T8809] erofs: (device loop5): mounted with root inode @ nid 36. [ 399.388660][ T8829] hub 8-0:1.0: USB hub found [ 399.393632][ T8829] hub 8-0:1.0: 1 port detected [ 399.417001][ T8830] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1091'. [ 400.955401][ T8844] netlink: 'syz.2.1095': attribute type 1 has an invalid length. [ 402.409748][ T8847] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 402.437576][ T8847] bond5: (slave vxcan3): Error -22 calling dev_set_mtu [ 403.557733][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 403.688404][ T8877] loop5: detected capacity change from 0 to 512 [ 403.806997][ T8877] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1103: invalid indirect mapped block 256 (level 2) [ 403.842243][ T8877] EXT4-fs (loop5): 2 truncates cleaned up [ 403.855858][ T8877] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 404.839576][ T8901] loop4: detected capacity change from 0 to 512 [ 404.999255][ T8901] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1108: invalid indirect mapped block 256 (level 2) [ 405.018205][ T8901] EXT4-fs (loop4): 2 truncates cleaned up [ 405.023983][ T8901] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 405.304640][ T8911] netlink: 'syz.5.1111': attribute type 1 has an invalid length. [ 405.814009][ T8917] loop2: detected capacity change from 0 to 1024 [ 405.926692][ T8917] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 405.934131][ T8917] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 406.314187][ T8917] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.1110: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 406.334272][ T8917] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1110: couldn't read orphan inode 11 (err -117) [ 406.347512][ T8917] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 406.351114][ T8914] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 406.396293][ T8914] bond4: (slave vxcan3): Error -22 calling dev_set_mtu [ 406.443114][ T8917] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.1110: Invalid block bitmap block 0 in block_group 0 [ 406.461650][ T8917] Quota error (device loop2): write_blk: dquota write failed [ 406.469266][ T8917] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 406.481930][ T8917] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.1110: Failed to acquire dquot type 0 [ 406.549091][ T8917] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1110: Invalid inode bitmap blk 137438953472 in block_group 0 [ 407.604284][ T8929] hub 8-0:1.0: USB hub found [ 407.609253][ T8929] hub 8-0:1.0: 1 port detected [ 408.416767][ T8935] loop5: detected capacity change from 0 to 1024 [ 408.466539][ T8935] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 408.473841][ T8935] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 409.915449][ T8935] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.1116: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 409.948070][ T8935] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1116: couldn't read orphan inode 11 (err -117) [ 409.960593][ T4949] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm kworker/u4:20: Invalid inode table block 8589934593 in block_group 0 [ 409.977276][ T8935] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 410.123043][ T8934] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.1116: Invalid block bitmap block 0 in block_group 0 [ 410.139896][ T8934] Quota error (device loop5): write_blk: dquota write failed [ 410.147522][ T8934] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 410.157569][ T8934] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.1116: Failed to acquire dquot type 0 [ 410.189919][ T8934] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1116: Invalid inode bitmap blk 137438953472 in block_group 0 [ 410.565805][ T8951] loop2: detected capacity change from 0 to 512 [ 410.587396][ T8951] EXT4-fs (loop2): Ignoring removed nobh option [ 410.761037][ T4949] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm kworker/u4:20: Invalid inode table block 8589934593 in block_group 0 [ 410.761873][ T8951] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1120: iget: bad i_size value: 38620345925642 [ 410.789843][ T8951] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1120: couldn't read orphan inode 15 (err -117) [ 410.790632][ T8957] Bluetooth: hci0: invalid len left 7, exp >= 38 [ 411.529407][ T8951] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 411.531576][ T8962] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 411.770113][ T8970] loop4: detected capacity change from 0 to 512 [ 411.799739][ T8966] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 411.811468][ T8966] bond5: (slave vxcan3): Error -22 calling dev_set_mtu [ 411.843630][ T8969] device macvlan2 entered promiscuous mode [ 411.851302][ T8969] device bond5 entered promiscuous mode [ 411.862907][ T8970] EXT4-fs (loop4): Ignoring removed nobh option [ 411.955516][ T8969] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 412.104257][ T8970] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1125: iget: bad i_size value: 38620345925642 [ 412.165332][ T8970] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1125: couldn't read orphan inode 15 (err -117) [ 412.215230][ T8969] device bond5 left promiscuous mode [ 412.235221][ T8970] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 415.926832][ T4230] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 416.196752][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 416.247746][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 416.279159][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.296854][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.310070][ T9020] device bridge_slave_0 left promiscuous mode [ 416.321534][ T4230] usb 1-1: config 0 has an invalid interface number: 162 but max is 0 [ 416.325041][ T9020] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.346639][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.364113][ T9020] device bridge_slave_1 left promiscuous mode [ 416.374408][ T9020] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.381552][ T4230] usb 1-1: config 0 has no interface number 0 [ 416.452782][ T9020] bond0: (slave bond_slave_0): Releasing backup interface [ 416.473368][ T9020] bond0: (slave bond_slave_1): Releasing backup interface [ 416.547538][ T9020] team0: Port device team_slave_0 removed [ 416.561213][ T4230] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 416.576313][ T9020] team0: Port device team_slave_1 removed [ 416.589253][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.607820][ T4230] usb 1-1: Product: syz [ 416.617902][ T9020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.622152][ T4230] usb 1-1: Manufacturer: syz [ 416.625571][ T9020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.646614][ T4230] usb 1-1: SerialNumber: syz [ 416.683846][ T4230] usb 1-1: config 0 descriptor?? [ 416.698761][ T9020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.706241][ T9020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.547252][ T5472] usb 1-1: USB disconnect, device number 7 [ 419.134992][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 419.144955][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 419.164766][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 419.228834][ T9063] device bridge_slave_0 left promiscuous mode [ 419.237474][ T9063] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.498188][ T9063] device bridge_slave_1 left promiscuous mode [ 419.535841][ T9063] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.618100][ T9063] bond0: (slave bond_slave_0): Releasing backup interface [ 419.770453][ T9063] bond0: (slave bond_slave_1): Releasing backup interface [ 419.880589][ T9063] team0: Port device team_slave_0 removed [ 419.935363][ T9063] team0: Port device team_slave_1 removed [ 419.970182][ T9063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.075694][ T9080] loop4: detected capacity change from 0 to 1024 [ 420.126304][ T9080] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 420.134680][ T9080] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 420.225639][ T9063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.267245][ T9080] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.1150: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 420.287659][ T9080] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1150: couldn't read orphan inode 11 (err -117) [ 420.300771][ T9080] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 420.397518][ T9080] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1150: Invalid block bitmap block 0 in block_group 0 [ 420.414532][ T9080] Quota error (device loop4): write_blk: dquota write failed [ 420.422236][ T9080] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 420.446769][ T9080] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.1150: Failed to acquire dquot type 0 [ 420.523988][ T9063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.643350][ T9063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.025649][ T9078] device syzkaller0 entered promiscuous mode [ 421.076952][ T3053] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm kworker/u4:4: Invalid inode table block 8589934593 in block_group 0 [ 423.879507][ T9124] hub 8-0:1.0: USB hub found [ 423.885113][ T9124] hub 8-0:1.0: 1 port detected [ 424.852522][ T9133] loop2: detected capacity change from 0 to 1024 [ 425.647288][ T9137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 425.700321][ T9137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 425.747124][ T9137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 425.849264][ T9133] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 425.857002][ T9133] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 425.934076][ T9133] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.1161: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 425.955904][ T9133] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1161: couldn't read orphan inode 11 (err -117) [ 425.970373][ T9133] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 426.022012][ T9140] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 426.096024][ T9137] device bridge_slave_0 left promiscuous mode [ 426.182252][ T9137] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.243505][ T9133] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.1161: Invalid block bitmap block 0 in block_group 0 [ 426.261055][ T9137] device bridge_slave_1 left promiscuous mode [ 426.267701][ T9133] Quota error (device loop2): write_blk: dquota write failed [ 426.275445][ T9137] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.283105][ T9133] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 426.294055][ T9133] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.1161: Failed to acquire dquot type 0 [ 426.530820][ T9137] bond0: (slave bond_slave_0): Releasing backup interface [ 426.608609][ T9137] bond0: (slave bond_slave_1): Releasing backup interface [ 426.659544][ T4631] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm kworker/u4:14: Invalid inode table block 8589934593 in block_group 0 [ 426.703036][ T9137] team0: Port device team_slave_0 removed [ 426.764541][ T9137] team0: Port device team_slave_1 removed [ 426.788073][ T9137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.826357][ T9137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.932430][ T9137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.946354][ T9137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.942064][ T9160] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1169'. [ 429.042704][ T9181] mmap: syz.1.1171 (9181) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 429.325019][ T9184] loop0: detected capacity change from 0 to 512 [ 429.390687][ T9184] EXT4-fs (loop0): Ignoring removed nobh option [ 429.461541][ T9184] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1174: iget: bad i_size value: 38620345925642 [ 429.479750][ T9184] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1174: couldn't read orphan inode 15 (err -117) [ 429.516170][ T9184] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 430.576901][ T9201] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1178'. [ 430.933814][ T9204] loop5: detected capacity change from 0 to 1024 [ 431.465517][ T9204] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 431.473077][ T9204] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 434.629317][ T9204] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.1177: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 434.649730][ T9204] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1177: couldn't read orphan inode 11 (err -117) [ 434.664377][ T9204] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 434.780915][ T9200] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.1177: Invalid block bitmap block 0 in block_group 0 [ 434.795578][ T9200] Quota error (device loop5): write_blk: dquota write failed [ 434.803095][ T9200] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 434.813113][ T9200] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.1177: Failed to acquire dquot type 0 [ 434.943236][ T9220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1182'. [ 436.413576][ T4947] Quota error (device loop5): remove_tree: Getting block too big (0 >= 9) [ 436.429989][ T4947] EXT4-fs error (device loop5): ext4_release_dquot:6270: comm kworker/u4:19: Failed to release dquot type 0 [ 436.443764][ T9244] loop4: detected capacity change from 0 to 512 [ 436.499290][ T9244] EXT4-fs (loop4): Ignoring removed nobh option [ 436.583121][ T9244] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1190: iget: bad i_size value: 38620345925642 [ 436.608386][ T9247] loop0: detected capacity change from 0 to 512 [ 436.647322][ T9244] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1190: couldn't read orphan inode 15 (err -117) [ 436.657718][ T9247] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1192: invalid indirect mapped block 256 (level 2) [ 436.677286][ T9244] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 436.720409][ T9247] EXT4-fs (loop0): 2 truncates cleaned up [ 436.738089][ T9247] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 437.875895][ T9267] loop2: detected capacity change from 0 to 512 [ 438.089616][ T9267] EXT4-fs (loop2): Ignoring removed nobh option [ 438.419943][ T9267] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1196: iget: bad i_size value: 38620345925642 [ 438.794179][ T9267] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1196: couldn't read orphan inode 15 (err -117) [ 438.807085][ T9267] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 439.134858][ T9275] loop4: detected capacity change from 0 to 512 [ 439.190214][ T9275] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1198: invalid indirect mapped block 256 (level 2) [ 439.247467][ T9275] EXT4-fs (loop4): 2 truncates cleaned up [ 439.253422][ T9275] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 439.615817][ T9288] loop5: detected capacity change from 0 to 512 [ 440.222979][ T9288] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1201: invalid indirect mapped block 256 (level 2) [ 440.305676][ T9288] EXT4-fs (loop5): 2 truncates cleaned up [ 440.325064][ T9288] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 440.359676][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.366046][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.663851][ T26] audit: type=1800 audit(1775736913.773:935): pid=9287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1200" name="bus" dev="ramfs" ino=45964 res=0 errno=0 [ 443.199383][ T9320] hub 8-0:1.0: USB hub found [ 443.204399][ T9320] hub 8-0:1.0: 1 port detected [ 443.316643][ T9322] Unsupported ieee802154 address type: 0 [ 447.179315][ T9350] tipc: Enabling of bearer rejected, failed to enable media [ 447.272648][ T9348] loop4: detected capacity change from 0 to 1024 [ 447.354903][ T9354] device syzkaller0 entered promiscuous mode [ 448.110603][ T9353] loop2: detected capacity change from 0 to 4096 [ 449.801588][ T9353] ntfs3: Invalid value for dmask. [ 449.845362][ T9348] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 449.876717][ T9348] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 450.030960][ T9348] EXT4-fs: failed to create workqueue [ 450.036572][ T9348] EXT4-fs (loop4): mount failed [ 452.444379][ T9388] loop5: detected capacity change from 0 to 512 [ 453.242207][ T9391] loop0: detected capacity change from 0 to 1024 [ 453.427642][ T9391] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 453.435012][ T9391] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 453.565664][ T9391] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1226: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 453.586333][ T9391] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1226: couldn't read orphan inode 11 (err -117) [ 453.599762][ T9391] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 453.644614][ T9388] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1227: invalid indirect mapped block 256 (level 2) [ 453.704974][ T9391] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1226: Invalid block bitmap block 0 in block_group 0 [ 453.721150][ T9391] Quota error (device loop0): write_blk: dquota write failed [ 453.729511][ T9391] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 453.740782][ T9391] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.1226: Failed to acquire dquot type 0 [ 453.767796][ T9395] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1226: Invalid inode bitmap blk 137438953472 in block_group 0 [ 453.932507][ T9388] EXT4-fs (loop5): 2 truncates cleaned up [ 454.011023][ T9388] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 454.406786][ T4558] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm kworker/u4:13: Invalid inode table block 8589934593 in block_group 0 [ 455.569664][ T9408] loop4: detected capacity change from 0 to 512 [ 455.674685][ T9412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1231'. [ 455.689212][ T9412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1231'. [ 455.714065][ T9408] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1232: invalid indirect mapped block 256 (level 2) [ 455.756944][ T9408] EXT4-fs (loop4): 2 truncates cleaned up [ 455.762864][ T9408] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 455.839008][ T26] audit: type=1800 audit(1775736926.953:936): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1229" name="bus" dev="ramfs" ino=47127 res=0 errno=0 [ 458.192993][ T9444] loop0: detected capacity change from 0 to 512 [ 458.282654][ T9444] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1241: invalid indirect mapped block 256 (level 2) [ 458.338011][ T9444] EXT4-fs (loop0): 2 truncates cleaned up [ 458.343801][ T9444] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 459.301471][ T9454] loop5: detected capacity change from 0 to 1024 [ 459.357988][ T9454] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 459.365296][ T9454] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 459.736155][ T9454] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.1242: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 459.756137][ T9454] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1242: couldn't read orphan inode 11 (err -117) [ 459.942912][ T9454] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 460.437884][ T9454] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.1242: Invalid block bitmap block 0 in block_group 0 [ 460.691831][ T9454] Quota error (device loop5): write_blk: dquota write failed [ 460.703690][ T9454] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 460.714347][ T9454] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.1242: Failed to acquire dquot type 0 [ 460.905236][ T306] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm kworker/u4:3: Invalid inode table block 8589934593 in block_group 0 [ 461.323272][ T9478] hub 8-0:1.0: USB hub found [ 461.328489][ T9478] hub 8-0:1.0: 1 port detected [ 462.598356][ T9491] loop4: detected capacity change from 0 to 512 [ 462.765372][ T9493] loop5: detected capacity change from 0 to 128 [ 462.819698][ T9491] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1253: invalid indirect mapped block 256 (level 2) [ 462.848234][ T9493] qnx6: invalid mount options. [ 462.947174][ T9491] EXT4-fs (loop4): 2 truncates cleaned up [ 462.953114][ T9491] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 463.252510][ T9502] loop5: detected capacity change from 0 to 512 [ 463.272293][ T9504] loop0: detected capacity change from 0 to 512 [ 463.876606][ T9502] EXT4-fs (loop5): Ignoring removed nobh option [ 463.893547][ T9502] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1257: iget: bad i_size value: 38620345925642 [ 463.921470][ T5475] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 463.989421][ T9504] EXT4-fs (loop0): Ignoring removed nobh option [ 464.003160][ T5475] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 464.024071][ T9502] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1257: couldn't read orphan inode 15 (err -117) [ 464.144702][ T9504] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1256: iget: bad i_size value: 38620345925642 [ 464.780041][ T9502] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 464.797126][ T9504] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1256: couldn't read orphan inode 15 (err -117) [ 464.946728][ T9504] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 468.467305][ T9576] loop2: detected capacity change from 0 to 1024 [ 469.475217][ T9576] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 469.482540][ T9576] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 471.050001][ T9590] device syzkaller0 entered promiscuous mode [ 471.056981][ T9576] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.1276: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 471.182043][ T9576] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1276: couldn't read orphan inode 11 (err -117) [ 471.391089][ T9600] loop4: detected capacity change from 0 to 1024 [ 471.987277][ T9600] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 471.994630][ T9600] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 473.130902][ T9576] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 473.183509][ T9608] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 473.206796][ T9600] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.1283: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 473.243399][ T9600] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1283: couldn't read orphan inode 11 (err -117) [ 473.265170][ T9600] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 474.080788][ T9600] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1283: Invalid block bitmap block 0 in block_group 0 [ 474.096956][ T9600] Quota error (device loop4): write_blk: dquota write failed [ 474.104717][ T9600] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 474.118536][ T9600] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.1283: Failed to acquire dquot type 0 [ 474.134151][ T9615] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1283: Invalid inode bitmap blk 137438953472 in block_group 0 [ 474.700627][ T9610] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 474.718273][ T9610] bond6: (slave vxcan3): Error -22 calling dev_set_mtu [ 474.734642][ T9613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1285'. [ 474.780636][ T4631] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm kworker/u4:14: Invalid inode table block 8589934593 in block_group 0 [ 475.020721][ T9628] loop0: detected capacity change from 0 to 1024 [ 475.081584][ T9628] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 475.089334][ T9628] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 475.170290][ T9628] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1291: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 475.191088][ T9628] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1291: couldn't read orphan inode 11 (err -117) [ 475.206875][ T9628] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 475.305461][ T9628] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1291: Invalid block bitmap block 0 in block_group 0 [ 475.322229][ T9628] Quota error (device loop0): write_blk: dquota write failed [ 475.330599][ T9628] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 475.342290][ T9628] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.1291: Failed to acquire dquot type 0 [ 475.370161][ T9630] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1291: Invalid inode bitmap blk 137438953472 in block_group 0 [ 475.477215][ T9627] loop4: detected capacity change from 0 to 512 [ 475.907653][ T9627] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1290: invalid indirect mapped block 256 (level 2) [ 475.969060][ T9627] EXT4-fs (loop4): 2 truncates cleaned up [ 476.007320][ T9627] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 476.014744][ T4961] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm kworker/u4:25: Invalid inode table block 8589934593 in block_group 0 [ 477.929568][ T9649] loop5: detected capacity change from 0 to 128 [ 477.997920][ T9649] qnx6: invalid mount options. [ 478.219479][ T9657] hub 8-0:1.0: USB hub found [ 478.224954][ T9657] hub 8-0:1.0: 1 port detected [ 479.240727][ T9665] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 479.860487][ T9670] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 479.918511][ T9670] bond7: (slave vxcan3): Error -22 calling dev_set_mtu [ 479.952079][ T9671] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1301'. [ 481.725278][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1310'. [ 483.789027][ T9733] loop0: detected capacity change from 0 to 512 [ 483.984136][ T9733] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1316: invalid indirect mapped block 256 (level 2) [ 484.002646][ T9733] EXT4-fs (loop0): 2 truncates cleaned up [ 484.010038][ T9733] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 484.256706][ T9737] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 485.133060][ T9763] loop5: detected capacity change from 0 to 1024 [ 485.187188][ T9763] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 485.194501][ T9763] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 485.296803][ T9763] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.1324: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 485.321470][ T9763] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1324: couldn't read orphan inode 11 (err -117) [ 485.334642][ T9763] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 485.420389][ T9763] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.1324: Invalid block bitmap block 0 in block_group 0 [ 485.435990][ T9763] Quota error (device loop5): write_blk: dquota write failed [ 485.443614][ T9763] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 485.454029][ T9763] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.1324: Failed to acquire dquot type 0 [ 485.477996][ T9766] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1324: Invalid inode bitmap blk 137438953472 in block_group 0 [ 486.053026][ T26] audit: type=1800 audit(1775736957.163:937): pid=9755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1323" name="bus" dev="ramfs" ino=47670 res=0 errno=0 [ 486.138266][ T4554] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm kworker/u4:12: Invalid inode table block 8589934593 in block_group 0 [ 487.498888][ T9792] loop4: detected capacity change from 0 to 128 [ 487.533429][ T9794] tipc: Enabling of bearer rejected, failed to enable media [ 487.589105][ T9792] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 487.639246][ T9792] ext4 filesystem being mounted at /255/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 487.704571][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1337'. [ 487.753998][ T9800] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1337'. [ 488.502498][ T9810] hub 8-0:1.0: USB hub found [ 488.508926][ T9810] hub 8-0:1.0: 1 port detected [ 490.110395][ T9833] loop4: detected capacity change from 0 to 1024 [ 490.188506][ T9833] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 490.196174][ T9833] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 490.366272][ T9833] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.1345: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 490.386566][ T9833] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1345: couldn't read orphan inode 11 (err -117) [ 490.400341][ T9833] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 490.739190][ T9833] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1345: Invalid block bitmap block 0 in block_group 0 [ 491.591281][ T9833] Quota error (device loop4): write_blk: dquota write failed [ 491.599409][ T9833] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 491.611514][ T9833] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.1345: Failed to acquire dquot type 0 [ 491.779086][ T4942] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm kworker/u4:17: Invalid inode table block 8589934593 in block_group 0 [ 492.615037][ T26] audit: type=1800 audit(1775736963.723:938): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1348" name="bus" dev="ramfs" ino=47806 res=0 errno=0 [ 496.371642][ T9888] loop0: detected capacity change from 0 to 1024 [ 496.410877][ T9888] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 496.418896][ T9888] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 496.496425][ T9888] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1360: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 496.535212][ T9888] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1360: couldn't read orphan inode 11 (err -117) [ 496.548330][ T9888] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 496.584309][ T9888] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1360: Invalid block bitmap block 0 in block_group 0 [ 496.598813][ T9888] Quota error (device loop0): write_blk: dquota write failed [ 496.607147][ T9888] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 496.617340][ T9888] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.1360: Failed to acquire dquot type 0 [ 496.682845][ T9894] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1360: Invalid inode bitmap blk 137438953472 in block_group 0 [ 496.762776][ T9898] hub 8-0:1.0: USB hub found [ 496.771082][ T9898] hub 8-0:1.0: 1 port detected [ 497.673045][ T4942] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm kworker/u4:17: Invalid inode table block 8589934593 in block_group 0 [ 498.986481][ T9929] hub 8-0:1.0: USB hub found [ 498.993609][ T9929] hub 8-0:1.0: 1 port detected [ 500.609876][ T9947] loop4: detected capacity change from 0 to 128 [ 500.668166][ T9947] qnx6: invalid mount options. [ 501.860373][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.866911][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.021579][ T9956] loop0: detected capacity change from 0 to 128 [ 502.358617][ T9956] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 502.394960][ T9956] ext4 filesystem being mounted at /277/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 503.413390][ T9978] hub 8-0:1.0: USB hub found [ 503.419015][ T9978] hub 8-0:1.0: 1 port detected [ 505.162836][T10002] hub 8-0:1.0: USB hub found [ 505.168229][T10002] hub 8-0:1.0: 1 port detected [ 506.931853][T10026] loop0: detected capacity change from 0 to 128 [ 507.204910][T10026] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 507.257017][T10026] ext4 filesystem being mounted at /281/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 510.311936][T10070] loop0: detected capacity change from 0 to 128 [ 510.391672][T10070] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 510.409145][T10070] ext4 filesystem being mounted at /285/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 511.344958][T10072] loop2: detected capacity change from 0 to 1024 [ 511.528472][T10084] hub 8-0:1.0: USB hub found [ 511.534911][T10084] hub 8-0:1.0: 1 port detected [ 512.337242][T10072] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 512.348636][T10072] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 512.593497][T10072] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.1404: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 513.312116][T10072] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1404: couldn't read orphan inode 11 (err -117) [ 513.346789][T10072] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 513.500237][T10099] hub 8-0:1.0: USB hub found [ 513.507010][T10099] hub 8-0:1.0: 1 port detected [ 520.795662][T10145] hub 8-0:1.0: USB hub found [ 520.802333][T10145] hub 8-0:1.0: 1 port detected [ 520.945380][T10152] loop2: detected capacity change from 0 to 512 [ 521.191344][T10152] EXT4-fs (loop2): Ignoring removed nobh option [ 521.700654][T10152] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1422: iget: bad i_size value: 38620345925642 [ 521.731118][T10152] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1422: couldn't read orphan inode 15 (err -117) [ 521.814675][T10152] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 524.409261][T10163] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 526.401159][T10209] loop4: detected capacity change from 0 to 1024 [ 526.502756][T10209] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 526.530200][T10209] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 526.622739][T10209] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.1436: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 526.655732][T10209] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1436: couldn't read orphan inode 11 (err -117) [ 526.705354][T10223] device syzkaller0 entered promiscuous mode [ 526.713582][T10209] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 526.777017][T10209] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1436: Invalid block bitmap block 0 in block_group 0 [ 526.855959][T10209] Quota error (device loop4): write_blk: dquota write failed [ 526.864667][T10209] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 526.867893][T10226] loop2: detected capacity change from 0 to 128 [ 526.888438][T10209] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.1436: Failed to acquire dquot type 0 [ 526.930426][T10215] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1436: Invalid inode bitmap blk 137438953472 in block_group 0 [ 526.948674][T10226] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 526.986876][T10226] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 527.074877][T10232] netlink: 'syz.5.1443': attribute type 1 has an invalid length. [ 527.293608][T10232] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 527.304293][ T4947] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm kworker/u4:19: Invalid inode table block 8589934593 in block_group 0 [ 527.305310][T10232] bond5: (slave vxcan3): Error -22 calling dev_set_mtu [ 527.594870][T10241] loop5: detected capacity change from 0 to 16 [ 527.639789][T10241] erofs: (device loop5): mounted with root inode @ nid 36. [ 528.644331][T10260] netlink: 'syz.4.1451': attribute type 10 has an invalid length. [ 528.757431][T10260] device netdevsim0 entered promiscuous mode [ 528.795049][T10260] team0: Port device netdevsim0 added [ 529.938400][T10279] netlink: 'syz.0.1457': attribute type 1 has an invalid length. [ 530.053971][T10283] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 530.514210][T10283] bond8: (slave vxcan3): Error -22 calling dev_set_mtu [ 532.073047][T10305] loop0: detected capacity change from 0 to 16 [ 532.189559][T10305] erofs: (device loop0): mounted with root inode @ nid 36. [ 533.965689][T10314] loop5: detected capacity change from 0 to 1024 [ 535.425103][T10340] tipc: Enabling of bearer rejected, failed to enable media [ 538.916247][T10377] loop4: detected capacity change from 0 to 512 [ 539.377091][T10377] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1484: invalid indirect mapped block 256 (level 2) [ 539.662267][T10377] EXT4-fs (loop4): 2 truncates cleaned up [ 539.717048][T10377] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 540.046641][T10381] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 540.072484][T10384] netlink: 'syz.0.1485': attribute type 10 has an invalid length. [ 540.136643][T10384] team0: Port device netdevsim0 added [ 541.172613][T10399] loop0: detected capacity change from 0 to 1024 [ 541.218810][T10399] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 541.226126][T10399] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 541.315123][T10399] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1488: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 541.335882][T10399] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1488: couldn't read orphan inode 11 (err -117) [ 541.349760][T10399] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 541.448547][T10399] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1488: Invalid block bitmap block 0 in block_group 0 [ 541.463907][T10399] Quota error (device loop0): write_blk: dquota write failed [ 541.471636][T10399] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 541.482513][T10399] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.1488: Failed to acquire dquot type 0 [ 541.504947][T10403] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1488: Invalid inode bitmap blk 137438953472 in block_group 0 [ 542.910917][ T154] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm kworker/u4:2: Invalid inode table block 8589934593 in block_group 0 [ 542.925980][ T26] audit: type=1800 audit(1775737014.033:939): pid=10404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1490" name="bus" dev="ramfs" ino=49574 res=0 errno=0 [ 542.973000][T10417] loop2: detected capacity change from 0 to 16 [ 543.004220][T10417] erofs: (device loop2): mounted with root inode @ nid 36. [ 544.382045][T10432] loop4: detected capacity change from 0 to 512 [ 544.528350][T10432] EXT4-fs (loop4): Ignoring removed nobh option [ 544.544343][T10432] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1499: iget: bad i_size value: 38620345925642 [ 544.653542][T10432] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1499: couldn't read orphan inode 15 (err -117) [ 544.707160][T10432] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 544.939858][T10445] hub 8-0:1.0: USB hub found [ 544.944979][T10445] hub 8-0:1.0: 1 port detected [ 546.551108][T10463] loop4: detected capacity change from 0 to 4096 [ 546.610846][T10463] ntfs3: Invalid value for dmask. [ 548.448880][T10471] tipc: Enabled bearer , priority 0 [ 548.507295][T10475] device syzkaller0 entered promiscuous mode [ 550.083066][T10475] tipc: Resetting bearer [ 550.099861][T10484] netlink: 'syz.2.1513': attribute type 10 has an invalid length. [ 550.128653][T10484] team0: Port device netdevsim0 added [ 550.135595][T10470] tipc: Resetting bearer [ 550.233800][T10470] tipc: Disabling bearer [ 550.306352][T10495] loop0: detected capacity change from 0 to 16 [ 550.327700][ T4718] tipc: Node number set to 1213647570 [ 550.337558][T10498] netlink: 'syz.2.1519': attribute type 1 has an invalid length. [ 550.537077][T10495] erofs: (device loop0): mounted with root inode @ nid 36. [ 550.545669][T10498] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 551.024708][T10498] bond6: (slave vxcan3): Error -22 calling dev_set_mtu [ 551.217265][T10509] bond6: (slave gretap2): making interface the new active one [ 551.230076][T10509] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 551.275174][T10511] tipc: Enabling of bearer rejected, failed to enable media [ 551.470105][T10509] syz.2.1519 (10509) used greatest stack depth: 20304 bytes left [ 552.327410][T10521] loop4: detected capacity change from 0 to 1024 [ 552.439636][T10521] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 552.459072][T10521] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 552.579325][T10533] loop0: detected capacity change from 0 to 128 [ 552.662705][ T26] audit: type=1800 audit(1775737023.703:940): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1524" name="bus" dev="ramfs" ino=50330 res=0 errno=0 [ 552.700698][T10521] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.1523: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 552.721768][T10533] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 552.732872][T10533] ext4 filesystem being mounted at /306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 552.777453][T10541] loop2: detected capacity change from 0 to 512 [ 552.790885][T10521] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1523: couldn't read orphan inode 11 (err -117) [ 552.819060][T10521] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 552.871771][T10541] EXT4-fs (loop2): Ignoring removed nobh option [ 553.054784][T10521] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1523: Invalid block bitmap block 0 in block_group 0 [ 553.069476][T10541] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1529: iget: bad i_size value: 38620345925642 [ 553.126504][T10541] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1529: couldn't read orphan inode 15 (err -117) [ 553.138864][T10521] Quota error (device loop4): write_blk: dquota write failed [ 553.158811][T10521] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 553.178328][T10521] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.1523: Failed to acquire dquot type 0 [ 553.246841][T10541] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 553.423672][T10548] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1523: Invalid inode bitmap blk 137438953472 in block_group 0 [ 555.431264][T10563] netlink: 'syz.1.1534': attribute type 1 has an invalid length. [ 555.472470][ T4931] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm kworker/u4:15: Invalid inode table block 8589934593 in block_group 0 [ 556.144571][T10571] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 556.157904][T10571] bond6: (slave vxcan3): Error -22 calling dev_set_mtu [ 556.559946][T10577] loop4: detected capacity change from 0 to 1024 [ 556.637870][T10577] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 556.645132][T10577] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 557.117779][T10577] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.1537: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 557.151303][T10577] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1537: couldn't read orphan inode 11 (err -117) [ 557.177452][T10577] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 557.562588][T10590] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1537: Invalid block bitmap block 0 in block_group 0 [ 557.703162][T10590] Quota error (device loop4): write_blk: dquota write failed [ 557.729362][T10596] loop5: detected capacity change from 0 to 512 [ 559.167195][T10590] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 559.216758][T10596] EXT4-fs (loop5): Ignoring removed nobh option [ 559.258231][T10596] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1543: iget: bad i_size value: 38620345925642 [ 559.285316][T10596] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1543: couldn't read orphan inode 15 (err -117) [ 559.386690][ T26] audit: type=1800 audit(1775737030.493:941): pid=10598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1542" name="bus" dev="ramfs" ino=50422 res=0 errno=0 [ 559.395753][T10609] netlink: 'syz.1.1546': attribute type 10 has an invalid length. [ 559.415785][T10590] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.1537: Failed to acquire dquot type 0 [ 559.450441][T10596] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 559.513235][T10616] loop2: detected capacity change from 0 to 512 [ 559.577068][T10616] EXT4-fs (loop2): Ignoring removed nobh option [ 559.621697][T10609] device netdevsim0 entered promiscuous mode [ 559.637691][T10609] team0: Port device netdevsim0 added [ 559.776227][ T9] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 559.826720][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:0: Failed to release dquot type 0 [ 559.993401][T10616] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1548: iget: bad i_size value: 38620345925642 [ 560.381337][T10616] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1548: couldn't read orphan inode 15 (err -117) [ 560.428057][T10616] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 560.504180][T10625] netlink: 'syz.4.1550': attribute type 1 has an invalid length. [ 560.654184][T10628] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 560.848211][T10628] bond2: (slave vxcan3): Error -22 calling dev_set_mtu [ 561.143483][T10586] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 562.905660][T10658] loop0: detected capacity change from 0 to 1024 [ 562.956913][T10658] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 562.964173][T10658] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 563.168458][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.174801][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.194225][T10658] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1557: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 563.215171][T10658] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1557: couldn't read orphan inode 11 (err -117) [ 563.233900][T10658] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 563.316376][T10658] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1557: Invalid block bitmap block 0 in block_group 0 [ 563.333909][T10658] Quota error (device loop0): write_blk: dquota write failed [ 563.341849][T10658] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 563.352200][T10658] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.1557: Failed to acquire dquot type 0 [ 563.377927][T10661] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1557: Invalid inode bitmap blk 137438953472 in block_group 0 [ 563.715498][ T26] audit: type=1800 audit(1775737034.823:942): pid=10656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1558" name="bus" dev="ramfs" ino=49926 res=0 errno=0 [ 563.971361][T10663] loop5: detected capacity change from 0 to 512 [ 564.066228][T10663] EXT4-fs (loop5): Ignoring removed nobh option [ 564.089692][T10663] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1559: iget: bad i_size value: 38620345925642 [ 564.120200][T10663] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1559: couldn't read orphan inode 15 (err -117) [ 564.153112][T10663] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 564.433937][ T4631] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm kworker/u4:14: Invalid inode table block 8589934593 in block_group 0 [ 564.702005][T10675] loop4: detected capacity change from 0 to 128 [ 564.763127][T10677] netlink: 'syz.5.1563': attribute type 1 has an invalid length. [ 564.806529][T10677] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 564.818396][T10677] bond6: (slave vxcan3): Error -22 calling dev_set_mtu [ 564.835249][T10675] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 564.856678][T10675] ext4 filesystem being mounted at /297/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 565.059411][T10686] loop2: detected capacity change from 0 to 128 [ 565.121912][T10686] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 565.358431][T10686] ext4 filesystem being mounted at /298/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 565.612676][T10696] netlink: 'syz.1.1569': attribute type 10 has an invalid length. [ 565.798540][T10702] tipc: Enabling of bearer rejected, failed to enable media [ 567.125743][T10720] loop2: detected capacity change from 0 to 512 [ 567.152674][T10723] netlink: 'syz.1.1577': attribute type 1 has an invalid length. [ 567.199822][T10720] EXT4-fs (loop2): Ignoring removed nobh option [ 567.273083][T10723] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 567.293840][T10723] bond7: (slave vxcan3): Error -22 calling dev_set_mtu [ 567.304135][T10720] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1576: iget: bad i_size value: 38620345925642 [ 567.339295][T10720] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1576: couldn't read orphan inode 15 (err -117) [ 567.353086][T10720] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 567.559340][T10732] netlink: 'syz.4.1579': attribute type 10 has an invalid length. [ 567.603727][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1580'. [ 567.680646][T10738] hub 8-0:1.0: USB hub found [ 567.698513][T10738] hub 8-0:1.0: 1 port detected [ 572.105216][T10780] netlink: 'syz.1.1593': attribute type 1 has an invalid length. [ 572.344923][T10783] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 572.721402][T10783] bond8: (slave vxcan3): Error -22 calling dev_set_mtu [ 573.176083][T10789] loop0: detected capacity change from 0 to 512 [ 573.298063][T10789] EXT4-fs (loop0): Ignoring removed nobh option [ 573.369739][T10789] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1594: iget: bad i_size value: 38620345925642 [ 573.387137][T10789] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1594: couldn't read orphan inode 15 (err -117) [ 573.442334][T10789] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 575.180860][T10813] netlink: 'syz.4.1602': attribute type 10 has an invalid length. [ 575.538755][T10829] loop0: detected capacity change from 0 to 128 [ 576.246656][T10829] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 576.297849][T10834] netlink: 'syz.5.1608': attribute type 1 has an invalid length. [ 576.327288][T10829] ext4 filesystem being mounted at /319/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 576.782150][T10844] hub 8-0:1.0: USB hub found [ 576.787724][T10844] hub 8-0:1.0: 1 port detected [ 577.030313][T10838] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 577.465636][T10838] bond7: (slave vxcan3): Error -22 calling dev_set_mtu [ 577.673032][T10852] hub 8-0:1.0: USB hub found [ 577.678727][T10852] hub 8-0:1.0: 1 port detected [ 578.483597][T10862] loop2: detected capacity change from 0 to 512 [ 578.622855][T10862] EXT4-fs (loop2): Ignoring removed nobh option [ 579.193262][T10849] netlink: 'syz.0.1611': attribute type 10 has an invalid length. [ 580.123372][T10862] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1616: iget: bad i_size value: 38620345925642 [ 580.236231][T10862] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1616: couldn't read orphan inode 15 (err -117) [ 580.260662][T10862] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 581.377483][T10874] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 583.583358][T10897] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 583.668543][T10897] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 583.679908][T10897] bond9: (slave vxcan3): Error -22 calling dev_set_mtu [ 584.642973][T10914] netlink: 'syz.2.1626': attribute type 10 has an invalid length. [ 587.517724][T10947] netlink: 'syz.4.1637': attribute type 10 has an invalid length. [ 589.572949][T10958] hub 8-0:1.0: USB hub found [ 589.577833][T10958] hub 8-0:1.0: 1 port detected [ 590.178433][T10963] netlink: 'syz.1.1640': attribute type 1 has an invalid length. [ 590.439349][T10963] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 590.451675][T10963] bond9: (slave vxcan3): Error -22 calling dev_set_mtu [ 591.462280][ T4718] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 591.482648][ T4718] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 593.247312][T11001] device syzkaller0 entered promiscuous mode [ 594.363632][T11010] loop4: detected capacity change from 0 to 1024 [ 594.473371][T11010] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 594.480575][T11010] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 594.655256][T11010] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.1653: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 594.677464][T11010] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1653: couldn't read orphan inode 11 (err -117) [ 594.690430][T11010] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 594.778276][T11010] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1653: Invalid block bitmap block 0 in block_group 0 [ 594.792238][T11010] Quota error (device loop4): write_blk: dquota write failed [ 594.799966][T11010] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 594.810883][T11010] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.1653: Failed to acquire dquot type 0 [ 594.967176][T11010] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1653: Invalid inode bitmap blk 137438953472 in block_group 0 [ 595.199450][ T154] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm kworker/u4:2: Invalid inode table block 8589934593 in block_group 0 [ 595.289207][T11024] Unsupported ieee802154 address type: 0 [ 596.164889][T11029] hub 8-0:1.0: USB hub found [ 596.170842][T11029] hub 8-0:1.0: 1 port detected [ 599.023435][ T5475] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 599.077653][ T5475] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 600.735402][T11064] hub 8-0:1.0: USB hub found [ 600.755975][T11064] hub 8-0:1.0: 1 port detected [ 601.423085][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1672'. [ 602.376372][T11089] loop0: detected capacity change from 0 to 512 [ 602.422487][T11089] EXT4-fs (loop0): Ignoring removed nobh option [ 602.658240][T11089] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1676: iget: bad i_size value: 38620345925642 [ 602.671854][T11089] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1676: couldn't read orphan inode 15 (err -117) [ 602.686586][T11089] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 603.661719][T11105] loop0: detected capacity change from 0 to 512 [ 603.702897][T11105] EXT4-fs (loop0): Ignoring removed nobh option [ 603.729768][T11105] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1678: iget: bad i_size value: 38620345925642 [ 603.772010][T11105] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1678: couldn't read orphan inode 15 (err -117) [ 603.842804][T11105] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 604.113269][T11110] loop4: detected capacity change from 0 to 128 [ 604.622173][T11110] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 604.655011][T11110] ext4 filesystem being mounted at /324/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 604.961389][ T5475] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 605.017978][ T5475] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 606.779986][T11135] loop2: detected capacity change from 0 to 16 [ 606.874719][T11137] loop5: detected capacity change from 0 to 512 [ 606.891734][T11135] erofs: (device loop2): mounted with root inode @ nid 36. [ 606.935170][T11137] EXT4-fs (loop5): Ignoring removed nobh option [ 607.062627][T11137] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1689: iget: bad i_size value: 38620345925642 [ 607.090952][T11137] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1689: couldn't read orphan inode 15 (err -117) [ 607.109604][T11137] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 607.876445][T11152] hub 8-0:1.0: USB hub found [ 607.883912][T11152] hub 8-0:1.0: 1 port detected [ 611.387555][T11176] hub 8-0:1.0: USB hub found [ 611.393312][T11176] hub 8-0:1.0: 1 port detected [ 611.695582][T11177] loop4: detected capacity change from 0 to 1024 [ 611.898151][T11177] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 611.905975][T11177] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 611.971099][ T9584] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 611.988183][ T9584] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 612.281899][T11177] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.1693: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 612.304439][T11177] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1693: couldn't read orphan inode 11 (err -117) [ 612.322751][T11177] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 612.859601][T11177] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1693: Invalid block bitmap block 0 in block_group 0 [ 612.874915][T11177] Quota error (device loop4): write_blk: dquota write failed [ 612.882530][T11177] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 612.893143][T11177] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.1693: Failed to acquire dquot type 0 [ 613.016335][ T5763] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 613.068653][ T5763] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:28: Failed to release dquot type 0 [ 613.541024][T11204] hub 8-0:1.0: USB hub found [ 613.546609][T11204] hub 8-0:1.0: 1 port detected [ 614.333004][T11210] loop4: detected capacity change from 0 to 16 [ 614.544312][T11210] erofs: (device loop4): mounted with root inode @ nid 36. [ 616.270711][T11237] netlink: 'syz.2.1715': attribute type 10 has an invalid length. [ 616.506980][T11241] loop2: detected capacity change from 0 to 512 [ 616.524682][T11239] netlink: 'syz.5.1717': attribute type 10 has an invalid length. [ 616.592963][T11241] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1716: invalid indirect mapped block 256 (level 2) [ 616.612359][T11239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.626916][T11239] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 616.630044][T11241] EXT4-fs (loop2): 2 truncates cleaned up [ 617.660310][T11241] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 617.723580][ T5475] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 617.744366][ T5475] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 619.394387][T11274] loop4: detected capacity change from 0 to 512 [ 619.428988][T11274] EXT4-fs (loop4): Ignoring removed nobh option [ 619.463574][T11274] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1725: iget: bad i_size value: 38620345925642 [ 619.514613][T11274] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1725: couldn't read orphan inode 15 (err -117) [ 619.568130][T11274] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 620.413338][T11245] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 621.025898][T11289] hub 8-0:1.0: USB hub found [ 621.031496][T11289] hub 8-0:1.0: 1 port detected [ 624.609316][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.615800][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.700288][T11311] Unsupported ieee802154 address type: 0 [ 626.458258][T11323] netlink: 'syz.2.1740': attribute type 10 has an invalid length. [ 626.498194][T11323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.546828][T11323] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 627.651646][T11338] loop5: detected capacity change from 0 to 512 [ 627.722400][T11341] loop4: detected capacity change from 0 to 1024 [ 627.755279][T11338] EXT4-fs (loop5): Ignoring removed nobh option [ 627.812953][T11346] netlink: 'syz.2.1747': attribute type 10 has an invalid length. [ 627.822289][T11341] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 627.829764][T11341] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 628.245731][T11338] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1744: iget: bad i_size value: 38620345925642 [ 628.265354][T11341] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.1745: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 628.298270][T11338] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1744: couldn't read orphan inode 15 (err -117) [ 628.326929][T11341] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1745: couldn't read orphan inode 11 (err -117) [ 628.354314][T11341] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 628.609923][T11338] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 629.384058][T11341] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1745: Invalid block bitmap block 0 in block_group 0 [ 629.398840][T11341] Quota error (device loop4): write_blk: dquota write failed [ 629.406353][T11341] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 629.416546][T11341] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.1745: Failed to acquire dquot type 0 [ 629.439680][T11341] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1745: Invalid inode bitmap blk 137438953472 in block_group 0 [ 630.218204][T11375] netlink: 'syz.0.1755': attribute type 10 has an invalid length. [ 630.226852][T11290] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm kworker/u4:5: Invalid inode table block 8589934593 in block_group 0 [ 630.383701][T11379] hub 8-0:1.0: USB hub found [ 630.389478][T11379] hub 8-0:1.0: 1 port detected [ 631.492312][T11375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.597701][T11375] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 631.649490][T11395] loop4: detected capacity change from 0 to 16 [ 631.825443][T11395] erofs: (device loop4): mounted with root inode @ nid 36. [ 633.005022][T11404] hub 8-0:1.0: USB hub found [ 633.010062][T11404] hub 8-0:1.0: 1 port detected [ 633.022415][T11406] hub 8-0:1.0: USB hub found [ 633.028206][T11406] hub 8-0:1.0: 1 port detected [ 635.016925][T11420] hub 8-0:1.0: USB hub found [ 635.023259][T11420] hub 8-0:1.0: 1 port detected [ 637.200383][T11433] hub 8-0:1.0: USB hub found [ 637.206052][T11433] hub 8-0:1.0: 1 port detected [ 640.142012][T11457] hub 8-0:1.0: USB hub found [ 640.148330][T11457] hub 8-0:1.0: 1 port detected [ 640.791589][T11463] device syzkaller0 entered promiscuous mode [ 640.908455][T11470] hub 8-0:1.0: USB hub found [ 640.910285][T11470] hub 8-0:1.0: 1 port detected [ 640.971909][T11471] hub 8-0:1.0: USB hub found [ 640.972820][T11471] hub 8-0:1.0: 1 port detected [ 641.822853][T11477] loop4: detected capacity change from 0 to 16 [ 641.881612][T11477] erofs: (device loop4): mounted with root inode @ nid 36. [ 643.881429][T11491] loop0: detected capacity change from 0 to 1024 [ 644.544163][T11491] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 644.551481][T11491] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 645.006561][T11491] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1785: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 645.026855][T11491] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1785: couldn't read orphan inode 11 (err -117) [ 645.041861][T11491] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 645.118442][T11491] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1785: Invalid block bitmap block 0 in block_group 0 [ 645.133554][T11491] Quota error (device loop0): write_blk: dquota write failed [ 645.141173][T11491] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 645.151618][T11491] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.1785: Failed to acquire dquot type 0 [ 645.390674][T11500] hub 8-0:1.0: USB hub found [ 645.427707][T11500] hub 8-0:1.0: 1 port detected [ 646.073797][ T306] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 646.086493][ T306] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:3: Failed to release dquot type 0 [ 647.319268][T11515] loop5: detected capacity change from 0 to 1024 [ 648.180964][T11515] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 648.188442][T11515] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 648.399871][T11515] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.1791: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 648.425058][T11515] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1791: couldn't read orphan inode 11 (err -117) [ 648.440681][T11515] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 648.523746][T11515] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.1791: Invalid block bitmap block 0 in block_group 0 [ 648.542089][T11515] Quota error (device loop5): write_blk: dquota write failed [ 648.549862][T11515] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 648.560252][T11515] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.1791: Failed to acquire dquot type 0 [ 648.890939][T11524] loop0: detected capacity change from 0 to 512 [ 648.978357][T11523] device syzkaller0 entered promiscuous mode [ 649.048205][T11524] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1793: invalid indirect mapped block 256 (level 2) [ 649.104981][T11524] EXT4-fs (loop0): 2 truncates cleaned up [ 649.147594][T11524] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 649.176580][ T4945] Quota error (device loop5): remove_tree: Getting block too big (0 >= 9) [ 649.185148][ T4945] EXT4-fs error (device loop5): ext4_release_dquot:6270: comm kworker/u4:18: Failed to release dquot type 0 [ 649.754304][T11534] loop2: detected capacity change from 0 to 16 [ 649.778044][T11534] erofs: (device loop2): mounted with root inode @ nid 36. [ 650.066008][T11536] netlink: 'syz.1.1798': attribute type 10 has an invalid length. [ 650.924052][T11554] hub 8-0:1.0: USB hub found [ 650.929489][T11554] hub 8-0:1.0: 1 port detected [ 652.509975][T11564] loop0: detected capacity change from 0 to 1024 [ 655.315313][T11564] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 655.324359][T11564] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 655.460762][T11564] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1802: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 655.481668][T11564] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1802: couldn't read orphan inode 11 (err -117) [ 655.497719][T11564] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 655.588235][T11564] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1802: Invalid block bitmap block 0 in block_group 0 [ 655.609138][T11564] Quota error (device loop0): write_blk: dquota write failed [ 655.617487][T11564] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 655.638130][T11564] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.1802: Failed to acquire dquot type 0 [ 656.468572][T11590] netlink: 'syz.5.1811': attribute type 10 has an invalid length. [ 656.485173][ T4961] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 656.494836][ T4961] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:25: Failed to release dquot type 0 [ 656.509724][T11590] team0: Port device netdevsim0 added [ 659.359542][T11613] hub 8-0:1.0: USB hub found [ 659.364504][T11613] hub 8-0:1.0: 1 port detected [ 660.512774][T11617] hub 8-0:1.0: USB hub found [ 660.523816][T11617] hub 8-0:1.0: 1 port detected [ 661.244785][T11622] hub 8-0:1.0: USB hub found [ 661.250096][T11622] hub 8-0:1.0: 1 port detected [ 661.621472][T11623] loop2: detected capacity change from 0 to 1024 [ 662.078233][T11623] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 662.085555][T11623] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 663.334211][T11623] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.1817: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 663.810992][T11623] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1817: couldn't read orphan inode 11 (err -117) [ 663.825902][T11623] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 663.930410][T11605] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.1817: Invalid block bitmap block 0 in block_group 0 [ 663.952502][T11605] Quota error (device loop2): write_blk: dquota write failed [ 663.959998][T11605] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 663.970245][T11605] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.1817: Failed to acquire dquot type 0 [ 665.563370][T11643] hub 8-0:1.0: USB hub found [ 665.569862][T11643] hub 8-0:1.0: 1 port detected [ 666.510036][T11642] netlink: 'syz.5.1827': attribute type 1 has an invalid length. [ 667.910376][T11660] hub 8-0:1.0: USB hub found [ 667.916603][T11660] hub 8-0:1.0: 1 port detected [ 668.506809][T11642] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 668.521223][ T5763] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 668.522022][T11663] loop0: detected capacity change from 0 to 512 [ 668.538179][T11642] bond8: (slave vxcan3): Error -22 calling dev_set_mtu [ 668.548970][T11666] loop4: detected capacity change from 0 to 128 [ 668.556303][ T5763] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:28: Failed to release dquot type 0 [ 668.579230][T11646] device macvlan2 entered promiscuous mode [ 668.585598][T11646] bond8: (slave macvlan2): Error -98 calling set_mac_address [ 668.805904][T11672] device syzkaller0 entered promiscuous mode [ 668.845807][T11663] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1832: invalid indirect mapped block 256 (level 2) [ 668.909096][T11663] EXT4-fs (loop0): 2 truncates cleaned up [ 668.923268][T11663] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 669.182583][T11673] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 669.254499][T11666] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 669.277921][T11666] ext4 filesystem being mounted at /349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 669.524176][T11681] loop2: detected capacity change from 0 to 128 [ 669.735381][T11681] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 669.851139][T11681] ext4 filesystem being mounted at /351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 673.203607][T11718] netlink: 'syz.1.1846': attribute type 1 has an invalid length. [ 673.284773][T11720] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 673.364542][T11720] bond10: (slave vxcan3): Error -22 calling dev_set_mtu [ 673.410821][T11723] device syzkaller0 entered promiscuous mode [ 673.478899][T11718] device macvlan3 entered promiscuous mode [ 673.518480][T11726] hub 8-0:1.0: USB hub found [ 673.524555][T11726] hub 8-0:1.0: 1 port detected [ 673.636000][T11718] bond10: (slave macvlan3): Error -98 calling set_mac_address [ 674.412732][T11736] loop4: detected capacity change from 0 to 128 [ 675.395730][T11736] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 675.412204][T11736] ext4 filesystem being mounted at /351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 675.685759][T11751] hub 8-0:1.0: USB hub found [ 675.690757][T11751] hub 8-0:1.0: 1 port detected [ 676.380907][ T4276] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 676.452953][ T4276] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 677.964475][T11771] netlink: 'syz.1.1859': attribute type 1 has an invalid length. [ 678.169134][T11777] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 678.189999][T11777] bond11: (slave vxcan3): Error -22 calling dev_set_mtu [ 678.338852][T11771] device macvlan3 entered promiscuous mode [ 678.345108][T11771] bond11: (slave macvlan3): Error -98 calling set_mac_address [ 678.569471][T11787] loop2: detected capacity change from 0 to 128 [ 678.990623][T11787] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 679.002435][T11787] ext4 filesystem being mounted at /359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 681.034097][T11812] hub 8-0:1.0: USB hub found [ 681.039704][T11812] hub 8-0:1.0: 1 port detected [ 682.332489][T11824] loop5: detected capacity change from 0 to 512 [ 682.364164][T11824] EXT4-fs (loop5): Ignoring removed nobh option [ 682.432852][T11824] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1871: iget: bad i_size value: 38620345925642 [ 682.458439][T11824] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1871: couldn't read orphan inode 15 (err -117) [ 682.542077][T11824] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 682.952999][ T4526] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 683.048636][T11838] hub 8-0:1.0: USB hub found [ 683.053675][T11838] hub 8-0:1.0: 1 port detected [ 683.658040][ T4526] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 684.821952][T11846] loop0: detected capacity change from 0 to 128 [ 684.937623][T11792] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 685.005434][T11846] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 685.072084][T11846] ext4 filesystem being mounted at /369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 686.208094][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.216539][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.318135][T11869] netlink: 'syz.0.1882': attribute type 10 has an invalid length. [ 688.443227][T11881] hub 8-0:1.0: USB hub found [ 688.448815][T11881] hub 8-0:1.0: 1 port detected [ 689.355656][T11892] loop5: detected capacity change from 0 to 128 [ 689.373337][T11889] loop4: detected capacity change from 0 to 512 [ 689.435415][T11892] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 689.446590][T11892] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 689.536077][T11895] hub 8-0:1.0: USB hub found [ 689.541047][T11895] hub 8-0:1.0: 1 port detected [ 689.651631][T11889] EXT4-fs (loop4): Ignoring removed nobh option [ 689.679282][T11889] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1889: iget: bad i_size value: 38620345925642 [ 689.721246][T11889] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1889: couldn't read orphan inode 15 (err -117) [ 689.770241][T11889] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 693.117011][T11926] netlink: 'syz.5.1899': attribute type 10 has an invalid length. [ 694.761572][T11941] netlink: 'syz.0.1903': attribute type 10 has an invalid length. [ 695.224649][T11947] netlink: 'syz.0.1904': attribute type 10 has an invalid length. [ 695.340511][T11953] loop0: detected capacity change from 0 to 128 [ 695.581378][T11953] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 695.622857][T11953] ext4 filesystem being mounted at /374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 696.607595][T11980] netlink: 'syz.1.1913': attribute type 10 has an invalid length. [ 697.731080][T11991] loop2: detected capacity change from 0 to 512 [ 697.923859][T11991] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1916: invalid indirect mapped block 256 (level 2) [ 698.084447][T11991] EXT4-fs (loop2): 2 truncates cleaned up [ 698.114670][T11991] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 701.151068][T12024] netlink: 'syz.0.1925': attribute type 10 has an invalid length. [ 702.053145][T12033] loop0: detected capacity change from 0 to 128 [ 702.168366][T12033] qnx6: invalid mount options. [ 702.343360][ T26] audit: type=1800 audit(1775737173.453:943): pid=12030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1927" name="bus" dev="ramfs" ino=53915 res=0 errno=0 [ 702.650791][T12043] loop4: detected capacity change from 0 to 512 [ 702.840670][T12043] EXT4-fs (loop4): Ignoring removed nobh option [ 703.672626][T12043] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1931: iget: bad i_size value: 38620345925642 [ 703.839615][T12043] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1931: couldn't read orphan inode 15 (err -117) [ 703.987952][T12043] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 705.306525][ T5674] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 705.837013][T12080] loop5: detected capacity change from 0 to 16 [ 705.846618][ T5674] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 705.863232][ T5674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.872522][ T26] audit: type=1800 audit(1775737176.983:944): pid=12073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1940" name="bus" dev="ramfs" ino=53987 res=0 errno=0 [ 705.900245][ T5674] usb 5-1: Product: syz [ 705.904570][T12080] erofs: (device loop5): mounted with root inode @ nid 36. [ 705.923635][ T5674] usb 5-1: Manufacturer: syz [ 705.932581][ T5674] usb 5-1: SerialNumber: syz [ 705.980237][ T5674] usb 5-1: config 0 descriptor?? [ 706.256919][ T5674] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 708.606611][ T5674] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 708.626943][ T5674] usb 5-1: USB disconnect, device number 4 [ 710.020986][ T4233] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 710.047986][ T4233] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 711.258469][ T4233] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 712.046576][ T4233] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 712.086569][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.122467][ T4233] usb 1-1: Product: syz [ 712.147562][ T4233] usb 1-1: Manufacturer: syz [ 712.152379][ T4233] usb 1-1: SerialNumber: syz [ 712.264059][ T4233] usb 1-1: config 0 descriptor?? [ 713.278060][ T4233] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 713.658597][T12149] loop5: detected capacity change from 0 to 128 [ 713.769760][T12149] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 713.803807][T12149] ext4 filesystem being mounted at /277/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 714.703313][T12161] netlink: 'syz.4.1965': attribute type 10 has an invalid length. [ 716.506579][ T4233] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 716.538381][ T4233] usb 1-1: USB disconnect, device number 8 [ 716.600492][T12192] hub 8-0:1.0: USB hub found [ 716.610962][T12192] hub 8-0:1.0: 1 port detected [ 716.980327][T12190] loop5: detected capacity change from 0 to 16 [ 717.301514][T12190] erofs: (device loop5): mounted with root inode @ nid 36. [ 717.329981][ T4436] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 717.351392][ T4436] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 717.800344][T12199] netlink: 'syz.1.1976': attribute type 10 has an invalid length. [ 726.095573][T12276] hub 8-0:1.0: USB hub found [ 726.100632][T12276] hub 8-0:1.0: 1 port detected [ 726.878630][T12283] loop2: detected capacity change from 0 to 16 [ 727.096516][T12283] erofs: (device loop2): mounted with root inode @ nid 36. [ 729.137827][T12304] netlink: 'syz.1.2005': attribute type 10 has an invalid length. [ 729.220382][T12304] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 729.244963][T12301] netlink: 'syz.4.2004': attribute type 10 has an invalid length. [ 729.280292][T12301] device syz_tun entered promiscuous mode [ 729.318203][T12301] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 729.434307][T12310] 8021q: adding VLAN 0 to HW filter on device bond3 [ 729.492179][T12309] 8021q: adding VLAN 0 to HW filter on device bond12 [ 729.592889][T12304] device bond_slave_0 entered promiscuous mode [ 729.599935][T12304] device bond_slave_1 entered promiscuous mode [ 729.606192][T12304] device syz_tun entered promiscuous mode [ 729.624023][T12304] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 729.639229][T12304] bond12: (slave macvlan3): unknown ethtool speed (20010) for port 1 (set it to 0) [ 729.650143][T12304] bond12: (slave macvlan3): speed changed to 0 on port 1 [ 729.683782][T12304] bond12: (slave macvlan3): Enslaving as a backup interface with an up link [ 729.739344][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 732.352631][T12335] netlink: 'syz.0.2013': attribute type 10 has an invalid length. [ 732.438990][T12335] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 733.739621][T12338] 8021q: adding VLAN 0 to HW filter on device bond10 [ 733.868143][T12335] device batadv0 entered promiscuous mode [ 733.874578][T12335] device syz_tun entered promiscuous mode [ 734.674602][T12335] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 734.699692][T12335] bond10: (slave macvlan2): Enslaving as a backup interface with an up link [ 734.828489][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 735.680300][T12363] netlink: 'syz.2.2020': attribute type 10 has an invalid length. [ 735.771275][T12368] loop0: detected capacity change from 0 to 128 [ 735.963136][T12375] loop4: detected capacity change from 0 to 16 [ 736.007034][T12372] netlink: 'syz.2.2023': attribute type 10 has an invalid length. [ 736.854331][T12375] erofs: (device loop4): mounted with root inode @ nid 36. [ 736.867391][T12372] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 736.872523][T12368] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 736.891798][T12368] ext4 filesystem being mounted at /393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 738.358684][T12377] 8021q: adding VLAN 0 to HW filter on device bond7 [ 738.376685][T12380] device batadv0 entered promiscuous mode [ 738.382460][T12380] device syz_tun entered promiscuous mode [ 738.389498][T12380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 738.397940][T12380] bond7: (slave macvlan2): Enslaving as a backup interface with an up link [ 738.408356][T12381] netlink: 'syz.1.2025': attribute type 10 has an invalid length. [ 738.447442][T12384] bond12: option mode: unable to set because the bond device has slaves [ 738.500991][T12387] bond12: (slave macvlan4): Error -98 calling set_mac_address [ 738.561442][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 738.688486][ T1111] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 738.702263][T12395] netlink: 'syz.0.2027': attribute type 10 has an invalid length. [ 738.753813][ T1111] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 744.400578][T12443] bond12: option mode: unable to set because the bond device has slaves [ 744.708685][T12449] bond12: option mode: unable to set because the bond device has slaves [ 747.169033][T12463] sd 0:0:1:0: device reset [ 747.719121][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.725489][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.252492][T12482] netlink: 'syz.5.2048': attribute type 10 has an invalid length. [ 750.733013][T12499] loop5: detected capacity change from 0 to 16 [ 751.422298][T12499] erofs: (device loop5): mounted with root inode @ nid 36. [ 752.221181][T12504] netlink: 'syz.1.2054': attribute type 10 has an invalid length. [ 754.167395][T12520] netlink: 'syz.1.2059': attribute type 10 has an invalid length. [ 756.332410][T12527] netlink: 'syz.4.2061': attribute type 10 has an invalid length. [ 758.737974][T12548] netlink: 'syz.2.2069': attribute type 10 has an invalid length. [ 764.961061][T12583] netlink: 'syz.2.2074': attribute type 10 has an invalid length. [ 765.057853][T12583] 8021q: adding VLAN 0 to HW filter on device bond8 [ 766.899153][T12592] netlink: 'syz.1.2077': attribute type 10 has an invalid length. [ 768.329881][T12619] loop4: detected capacity change from 0 to 512 [ 769.397358][T12619] EXT4-fs (loop4): Ignoring removed nobh option [ 770.098739][T12636] netlink: 'syz.1.2088': attribute type 10 has an invalid length. [ 770.125042][T12619] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.2085: iget: bad i_size value: 38620345925642 [ 770.166511][T12636] bond12: (slave macvlan4): Error -98 calling set_mac_address [ 770.201587][T12619] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2085: couldn't read orphan inode 15 (err -117) [ 770.227333][T12619] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 772.138913][T12655] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2091'. [ 776.084300][T12682] loop4: detected capacity change from 0 to 16 [ 776.201004][T12689] netlink: 'syz.2.2104': attribute type 10 has an invalid length. [ 776.444884][T12682] erofs: (device loop4): mounted with root inode @ nid 36. [ 779.192463][T12717] netlink: 'syz.1.2113': attribute type 10 has an invalid length. [ 781.870163][T12745] loop5: detected capacity change from 0 to 16 [ 782.010193][T12745] erofs: (device loop5): mounted with root inode @ nid 36. [ 787.617128][T12791] netlink: 'syz.5.2131': attribute type 10 has an invalid length. [ 787.863173][T12791] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 788.075625][T12803] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2132'. [ 789.799967][T12827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2136'. [ 802.696191][T12902] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2162'. [ 808.574110][T12967] 8021q: adding VLAN 0 to HW filter on device bond11 [ 808.703949][T12981] bond10: (slave macvlan3): Error -98 calling set_mac_address [ 810.381726][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.388434][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.587107][T12998] loop5: detected capacity change from 0 to 512 [ 810.658443][T12998] EXT4-fs (loop5): Ignoring removed nobh option [ 811.058353][T12998] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.2188: iget: bad i_size value: 38620345925642 [ 811.299378][T12998] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2188: couldn't read orphan inode 15 (err -117) [ 811.319514][T12998] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 817.518026][T13042] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 822.500111][T13066] netlink: 'syz.5.2205': attribute type 10 has an invalid length. [ 823.108511][T13072] 8021q: adding VLAN 0 to HW filter on device bond9 [ 823.750675][T13086] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2210'. [ 825.800497][ T26] audit: type=1800 audit(1775737296.903:945): pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2202" name="bus" dev="ramfs" ino=57232 res=0 errno=0 [ 827.516510][T13101] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2214'. [ 828.708496][T13116] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2216'. [ 830.937497][T13131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2222'. [ 832.527971][T13150] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2226'. [ 833.179800][ T26] audit: type=1800 audit(1775737304.293:946): pid=13137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2225" name="bus" dev="ramfs" ino=57347 res=0 errno=0 [ 833.373911][T13157] netlink: 'syz.5.2230': attribute type 10 has an invalid length. [ 834.871563][T13176] netlink: 'syz.2.2236': attribute type 10 has an invalid length. [ 839.490669][T13219] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 841.499567][T13236] loop5: detected capacity change from 0 to 128 [ 842.730745][T13236] qnx6: invalid mount options. [ 846.919799][T13277] 8021q: adding VLAN 0 to HW filter on device bond13 [ 846.931207][T13280] bond12: (slave macvlan4): Error -98 calling set_mac_address [ 848.266144][ T5476] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 848.295840][ T5476] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 850.043023][T13326] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 850.367003][ T4436] [ 850.370604][ T4436] ============================= [ 850.375601][ T4436] WARNING: suspicious RCU usage [ 850.380810][ T4436] syzkaller #0 Not tainted [ 850.385235][ T4436] ----------------------------- [ 850.390213][ T4436] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 850.398588][ T4436] [ 850.398588][ T4436] other info that might help us debug this: [ 850.398588][ T4436] [ 850.408992][ T4436] [ 850.408992][ T4436] rcu_scheduler_active = 2, debug_locks = 1 [ 850.417831][ T4436] 9 locks held by kworker/1:11/4436: [ 850.423234][ T4436] #0: ffff888060e87538 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 850.434841][ T4436] #1: ffffc9000407fd00 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 850.448068][ T4436] #2: ffff888020683058 (&peer->endpoint_lock){++-.}-{2:2}, at: wg_socket_send_skb_to_peer+0x50/0x1c0 [ 850.459756][ T4436] #3: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 850.469770][ T4436] #4: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 850.479533][ T4436] #5: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 850.489216][ T4436] #6: ffff888022afd948 (dev->qdisc_running_key ?: &qdisc_running_key){+...}-{0:0}, at: ip6_finish_output2+0x1051/0x1510 [ 850.502639][ T4436] #7: ffff888022afd908 (&sch->q.lock){+.-.}-{2:2}, at: sch_direct_xmit+0x311/0x4b0 [ 850.512357][ T4436] #8: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 850.522385][ T4436] [ 850.522385][ T4436] stack backtrace: [ 850.528370][ T4436] CPU: 1 PID: 4436 Comm: kworker/1:11 Not tainted syzkaller #0 [ 850.536035][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 850.543178][T13328] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 850.546203][ T4436] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 850.559807][ T4436] Call Trace: [ 850.563290][ T4436] [ 850.566236][ T4436] dump_stack_lvl+0x188/0x250 [ 850.571026][ T4436] ? show_regs_print_info+0x20/0x20 [ 850.576349][ T4436] ? lockdep_rcu_suspicious+0x110/0x180 [ 850.581972][ T4436] qdisc_lookup+0xa6/0x650 [ 850.586412][ T4436] qdisc_tree_reduce_backlog+0x190/0x430 [ 850.592065][ T4436] ? cake_dequeue_one+0x305/0x4e0 [ 850.597117][ T4436] cake_dequeue+0x1bd6/0x4b10 [ 850.601857][ T4436] ? do_raw_spin_lock+0x128/0x2f0 [ 850.607008][ T4436] ? cake_enqueue+0x7fc0/0x7fc0 [ 850.611891][ T4436] qdisc_peek_dequeued+0x6e/0x1f0 [ 850.617039][ T4436] tbf_dequeue+0x7d/0xce0 [ 850.621487][ T4436] __qdisc_run+0x236/0x1490 [ 850.626171][ T4436] __dev_queue_xmit+0xe3d/0x2f80 [ 850.631312][ T4436] ? udp_tunnel6_xmit_skb+0x4dd/0x8f0 [ 850.636724][ T4436] ? dev_queue_xmit+0x20/0x20 [ 850.641430][ T4436] ? mark_lock+0x94/0x320 [ 850.645790][ T4436] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 850.651915][ T4436] ? lock_chain_count+0x20/0x20 [ 850.657233][ T4436] ? __ipv6_neigh_lookup_noref+0x61d/0x7d0 [ 850.663081][ T4436] ? ip6_finish_output2+0xcb6/0x1510 [ 850.668405][ T4436] ? ip6_finish_output2+0xe80/0x1510 [ 850.675461][ T4436] ip6_finish_output2+0x1051/0x1510 [ 850.681236][ T4436] ? nf_hook+0x360/0x360 [ 850.686240][ T4436] ? ip6_finish_output+0x64c/0x7d0 [ 850.692656][ T4436] udp_tunnel6_xmit_skb+0x4dd/0x8f0 [ 850.698229][ T4436] send6+0x5ab/0x8d0 [ 850.702227][ T4436] ? send4+0xdc0/0xdc0 [ 850.706469][ T4436] ? __local_bh_disable_ip+0x111/0x1a0 [ 850.712277][ T4436] wg_socket_send_skb_to_peer+0x10d/0x1c0 [ 850.718402][ T4436] wg_packet_tx_worker+0x1d3/0x790 [ 850.723939][ T4436] process_one_work+0x85f/0x1010 [ 850.729457][ T4436] ? worker_detach_from_pool+0x240/0x240 [ 850.735850][ T4436] ? lockdep_hardirqs_off+0x70/0x100 [ 850.742434][ T4436] ? _raw_spin_lock_irq+0xb7/0xf0 [ 850.747618][ T4436] ? _raw_spin_lock_irqsave+0x100/0x100 [ 850.753929][ T4436] ? wq_worker_running+0x97/0x170 [ 850.758997][ T4436] worker_thread+0xaa6/0x1290 [ 850.764112][ T4436] kthread+0x436/0x520 [ 850.768399][ T4436] ? rcu_lock_release+0x20/0x20 [ 850.773284][ T4436] ? kthread_blkcg+0xd0/0xd0 [ 850.777907][ T4436] ret_from_fork+0x1f/0x30 [ 850.782382][ T4436]